Warning: Permanently added '[localhost]:54836' (ECDSA) to the list of known hosts. 2024/10/17 22:58:21 fuzzer started 2024/10/17 22:58:22 dialing manager at localhost:45639 syzkaller login: [ 52.601252] cgroup: Unknown subsys name 'net' [ 52.694647] cgroup: Unknown subsys name 'cpuset' [ 52.732782] cgroup: Unknown subsys name 'rlimit' 2024/10/17 22:58:39 syscalls: 2217 2024/10/17 22:58:39 code coverage: enabled 2024/10/17 22:58:39 comparison tracing: enabled 2024/10/17 22:58:39 extra coverage: enabled 2024/10/17 22:58:39 setuid sandbox: enabled 2024/10/17 22:58:39 namespace sandbox: enabled 2024/10/17 22:58:39 Android sandbox: enabled 2024/10/17 22:58:39 fault injection: enabled 2024/10/17 22:58:39 leak checking: enabled 2024/10/17 22:58:39 net packet injection: enabled 2024/10/17 22:58:39 net device setup: enabled 2024/10/17 22:58:39 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/17 22:58:39 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/17 22:58:39 USB emulation: enabled 2024/10/17 22:58:39 hci packet injection: enabled 2024/10/17 22:58:39 wifi device emulation: enabled 2024/10/17 22:58:39 802.15.4 emulation: enabled 2024/10/17 22:58:39 fetching corpus: 0, signal 0/2000 (executing program) 2024/10/17 22:58:39 fetching corpus: 48, signal 22989/26517 (executing program) 2024/10/17 22:58:39 fetching corpus: 98, signal 33939/38842 (executing program) 2024/10/17 22:58:39 fetching corpus: 148, signal 43145/49286 (executing program) 2024/10/17 22:58:39 fetching corpus: 198, signal 49485/56837 (executing program) 2024/10/17 22:58:39 fetching corpus: 248, signal 55262/63660 (executing program) 2024/10/17 22:58:39 fetching corpus: 298, signal 57781/67353 (executing program) 2024/10/17 22:58:39 fetching corpus: 348, signal 60892/71583 (executing program) 2024/10/17 22:58:39 fetching corpus: 398, signal 62590/74465 (executing program) 2024/10/17 22:58:39 fetching corpus: 448, signal 67470/80165 (executing program) 2024/10/17 22:58:40 fetching corpus: 498, signal 69819/83489 (executing program) 2024/10/17 22:58:40 fetching corpus: 548, signal 72349/86946 (executing program) 2024/10/17 22:58:40 fetching corpus: 598, signal 74695/90144 (executing program) 2024/10/17 22:58:40 fetching corpus: 648, signal 76674/93015 (executing program) 2024/10/17 22:58:40 fetching corpus: 698, signal 79319/96413 (executing program) 2024/10/17 22:58:40 fetching corpus: 748, signal 81153/99090 (executing program) 2024/10/17 22:58:40 fetching corpus: 798, signal 82958/101665 (executing program) 2024/10/17 22:58:40 fetching corpus: 848, signal 85011/104427 (executing program) 2024/10/17 22:58:40 fetching corpus: 897, signal 87578/107526 (executing program) 2024/10/17 22:58:40 fetching corpus: 947, signal 90284/110700 (executing program) 2024/10/17 22:58:41 fetching corpus: 997, signal 92120/113121 (executing program) 2024/10/17 22:58:41 fetching corpus: 1047, signal 93598/115284 (executing program) 2024/10/17 22:58:41 fetching corpus: 1097, signal 95379/117694 (executing program) 2024/10/17 22:58:41 fetching corpus: 1147, signal 97593/120268 (executing program) 2024/10/17 22:58:41 fetching corpus: 1197, signal 99494/122559 (executing program) 2024/10/17 22:58:41 fetching corpus: 1247, signal 100889/124437 (executing program) 2024/10/17 22:58:41 fetching corpus: 1297, signal 102823/126737 (executing program) 2024/10/17 22:58:41 fetching corpus: 1347, signal 103640/128196 (executing program) 2024/10/17 22:58:41 fetching corpus: 1397, signal 104775/129848 (executing program) 2024/10/17 22:58:42 fetching corpus: 1447, signal 106356/131800 (executing program) 2024/10/17 22:58:42 fetching corpus: 1497, signal 107640/133505 (executing program) 2024/10/17 22:58:42 fetching corpus: 1547, signal 108254/134731 (executing program) 2024/10/17 22:58:42 fetching corpus: 1597, signal 109174/136154 (executing program) 2024/10/17 22:58:42 fetching corpus: 1647, signal 110588/137912 (executing program) 2024/10/17 22:58:42 fetching corpus: 1697, signal 111781/139475 (executing program) 2024/10/17 22:58:42 fetching corpus: 1747, signal 112998/140976 (executing program) 2024/10/17 22:58:42 fetching corpus: 1797, signal 113827/142218 (executing program) 2024/10/17 22:58:42 fetching corpus: 1847, signal 114970/143635 (executing program) 2024/10/17 22:58:42 fetching corpus: 1897, signal 116081/145046 (executing program) 2024/10/17 22:58:43 fetching corpus: 1947, signal 117203/146385 (executing program) 2024/10/17 22:58:43 fetching corpus: 1997, signal 117881/147456 (executing program) 2024/10/17 22:58:43 fetching corpus: 2047, signal 119260/148912 (executing program) 2024/10/17 22:58:43 fetching corpus: 2097, signal 120055/150020 (executing program) 2024/10/17 22:58:43 fetching corpus: 2147, signal 121004/151280 (executing program) 2024/10/17 22:58:43 fetching corpus: 2197, signal 121788/152371 (executing program) 2024/10/17 22:58:43 fetching corpus: 2247, signal 122645/153500 (executing program) 2024/10/17 22:58:43 fetching corpus: 2297, signal 123754/154669 (executing program) 2024/10/17 22:58:43 fetching corpus: 2347, signal 124886/155865 (executing program) 2024/10/17 22:58:43 fetching corpus: 2397, signal 125647/156881 (executing program) 2024/10/17 22:58:44 fetching corpus: 2447, signal 126146/157785 (executing program) 2024/10/17 22:58:44 fetching corpus: 2497, signal 126763/158674 (executing program) 2024/10/17 22:58:44 fetching corpus: 2547, signal 127359/159592 (executing program) 2024/10/17 22:58:44 fetching corpus: 2597, signal 128568/160708 (executing program) 2024/10/17 22:58:44 fetching corpus: 2647, signal 129071/161558 (executing program) 2024/10/17 22:58:44 fetching corpus: 2697, signal 130020/162562 (executing program) 2024/10/17 22:58:44 fetching corpus: 2747, signal 130510/163358 (executing program) 2024/10/17 22:58:44 fetching corpus: 2796, signal 131133/164196 (executing program) 2024/10/17 22:58:44 fetching corpus: 2846, signal 131858/165031 (executing program) 2024/10/17 22:58:45 fetching corpus: 2895, signal 133492/166197 (executing program) 2024/10/17 22:58:45 fetching corpus: 2945, signal 134008/166935 (executing program) 2024/10/17 22:58:45 fetching corpus: 2995, signal 134798/167788 (executing program) 2024/10/17 22:58:45 fetching corpus: 3045, signal 136096/168768 (executing program) 2024/10/17 22:58:45 fetching corpus: 3094, signal 136703/169483 (executing program) 2024/10/17 22:58:45 fetching corpus: 3143, signal 137130/170144 (executing program) 2024/10/17 22:58:45 fetching corpus: 3193, signal 137653/170826 (executing program) 2024/10/17 22:58:45 fetching corpus: 3243, signal 138061/171434 (executing program) 2024/10/17 22:58:46 fetching corpus: 3293, signal 138637/172105 (executing program) 2024/10/17 22:58:46 fetching corpus: 3343, signal 139457/172804 (executing program) 2024/10/17 22:58:46 fetching corpus: 3393, signal 140061/173412 (executing program) 2024/10/17 22:58:46 fetching corpus: 3442, signal 140476/174006 (executing program) 2024/10/17 22:58:46 fetching corpus: 3492, signal 141173/174649 (executing program) 2024/10/17 22:58:46 fetching corpus: 3542, signal 141491/175188 (executing program) 2024/10/17 22:58:46 fetching corpus: 3592, signal 142020/175776 (executing program) 2024/10/17 22:58:46 fetching corpus: 3642, signal 142480/176316 (executing program) 2024/10/17 22:58:46 fetching corpus: 3692, signal 142815/176825 (executing program) 2024/10/17 22:58:47 fetching corpus: 3742, signal 143293/177348 (executing program) 2024/10/17 22:58:47 fetching corpus: 3792, signal 143569/177834 (executing program) 2024/10/17 22:58:47 fetching corpus: 3842, signal 143847/178309 (executing program) 2024/10/17 22:58:47 fetching corpus: 3892, signal 144177/178764 (executing program) 2024/10/17 22:58:47 fetching corpus: 3942, signal 144670/179256 (executing program) 2024/10/17 22:58:47 fetching corpus: 3992, signal 145008/179764 (executing program) 2024/10/17 22:58:47 fetching corpus: 4042, signal 145434/180225 (executing program) 2024/10/17 22:58:47 fetching corpus: 4092, signal 145757/180678 (executing program) 2024/10/17 22:58:47 fetching corpus: 4141, signal 146245/181154 (executing program) 2024/10/17 22:58:47 fetching corpus: 4191, signal 146624/181602 (executing program) 2024/10/17 22:58:48 fetching corpus: 4241, signal 147003/181996 (executing program) 2024/10/17 22:58:48 fetching corpus: 4291, signal 147356/182446 (executing program) 2024/10/17 22:58:48 fetching corpus: 4341, signal 147735/182849 (executing program) 2024/10/17 22:58:48 fetching corpus: 4391, signal 148196/183248 (executing program) 2024/10/17 22:58:48 fetching corpus: 4441, signal 148624/183638 (executing program) 2024/10/17 22:58:48 fetching corpus: 4491, signal 149004/184046 (executing program) 2024/10/17 22:58:48 fetching corpus: 4541, signal 149367/184427 (executing program) 2024/10/17 22:58:48 fetching corpus: 4591, signal 149955/184496 (executing program) 2024/10/17 22:58:48 fetching corpus: 4641, signal 150220/184501 (executing program) 2024/10/17 22:58:49 fetching corpus: 4691, signal 150570/184501 (executing program) 2024/10/17 22:58:49 fetching corpus: 4741, signal 151405/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 4791, signal 151769/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 4841, signal 152189/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 4891, signal 152643/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 4941, signal 153260/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 4991, signal 153764/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 5041, signal 154186/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 5091, signal 154450/184503 (executing program) 2024/10/17 22:58:49 fetching corpus: 5141, signal 154882/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5191, signal 155153/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5241, signal 155874/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5291, signal 156140/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5341, signal 156423/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5391, signal 156728/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5441, signal 157119/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5491, signal 157439/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5541, signal 158021/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5590, signal 158278/184503 (executing program) 2024/10/17 22:58:50 fetching corpus: 5640, signal 158670/184503 (executing program) 2024/10/17 22:58:51 fetching corpus: 5690, signal 159043/184503 (executing program) 2024/10/17 22:58:51 fetching corpus: 5740, signal 159484/184503 (executing program) 2024/10/17 22:58:51 fetching corpus: 5790, signal 159924/184503 (executing program) 2024/10/17 22:58:51 fetching corpus: 5840, signal 160259/184503 (executing program) 2024/10/17 22:58:51 fetching corpus: 5890, signal 160494/184506 (executing program) 2024/10/17 22:58:51 fetching corpus: 5940, signal 160876/184507 (executing program) 2024/10/17 22:58:51 fetching corpus: 5990, signal 161222/184507 (executing program) 2024/10/17 22:58:51 fetching corpus: 6040, signal 161510/184507 (executing program) 2024/10/17 22:58:51 fetching corpus: 6090, signal 161769/184507 (executing program) 2024/10/17 22:58:51 fetching corpus: 6140, signal 162056/184507 (executing program) 2024/10/17 22:58:51 fetching corpus: 6190, signal 162297/184507 (executing program) 2024/10/17 22:58:51 fetching corpus: 6240, signal 162617/184507 (executing program) 2024/10/17 22:58:52 fetching corpus: 6290, signal 162943/184507 (executing program) 2024/10/17 22:58:52 fetching corpus: 6340, signal 163343/184509 (executing program) 2024/10/17 22:58:52 fetching corpus: 6390, signal 164176/184517 (executing program) 2024/10/17 22:58:52 fetching corpus: 6440, signal 164422/184517 (executing program) 2024/10/17 22:58:52 fetching corpus: 6490, signal 164777/184517 (executing program) 2024/10/17 22:58:52 fetching corpus: 6540, signal 165503/184870 (executing program) 2024/10/17 22:58:52 fetching corpus: 6590, signal 165946/184870 (executing program) 2024/10/17 22:58:52 fetching corpus: 6640, signal 166190/184870 (executing program) 2024/10/17 22:58:52 fetching corpus: 6690, signal 166690/184870 (executing program) 2024/10/17 22:58:52 fetching corpus: 6740, signal 167060/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 6790, signal 167384/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 6839, signal 167692/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 6889, signal 167928/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 6939, signal 168214/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 6989, signal 168638/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 7039, signal 168910/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 7089, signal 169287/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 7139, signal 169558/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 7189, signal 169711/184870 (executing program) 2024/10/17 22:58:53 fetching corpus: 7239, signal 170029/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7289, signal 170254/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7339, signal 170598/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7389, signal 171672/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7439, signal 171948/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7489, signal 172235/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7539, signal 172475/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7589, signal 172792/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7639, signal 173167/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7688, signal 173556/184870 (executing program) 2024/10/17 22:58:54 fetching corpus: 7738, signal 173935/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 7787, signal 174154/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 7836, signal 174327/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 7886, signal 174713/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 7936, signal 174965/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 7986, signal 175215/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 8036, signal 175740/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 8086, signal 175959/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 8136, signal 176197/184873 (executing program) 2024/10/17 22:58:55 fetching corpus: 8186, signal 176391/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8236, signal 176727/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8286, signal 176879/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8336, signal 177276/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8386, signal 177443/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8436, signal 177684/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8486, signal 177834/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8536, signal 177996/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8586, signal 178205/184873 (executing program) 2024/10/17 22:58:56 fetching corpus: 8636, signal 178527/184873 (executing program) 2024/10/17 22:58:57 fetching corpus: 8686, signal 178783/184873 (executing program) 2024/10/17 22:58:57 fetching corpus: 8735, signal 179133/184873 (executing program) 2024/10/17 22:58:57 fetching corpus: 8785, signal 179553/184873 (executing program) 2024/10/17 22:58:57 fetching corpus: 8835, signal 179676/184874 (executing program) 2024/10/17 22:58:57 fetching corpus: 8885, signal 180365/184874 (executing program) 2024/10/17 22:58:57 fetching corpus: 8935, signal 180575/184874 (executing program) 2024/10/17 22:58:57 fetching corpus: 8985, signal 180825/184874 (executing program) 2024/10/17 22:58:57 fetching corpus: 9035, signal 180998/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9085, signal 181436/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9135, signal 181648/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9185, signal 181867/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9235, signal 182125/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9285, signal 182309/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9335, signal 182499/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9385, signal 182656/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9434, signal 182838/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9484, signal 183048/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9534, signal 183402/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9583, signal 183582/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9632, signal 183745/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9634, signal 183747/184878 (executing program) 2024/10/17 22:58:58 fetching corpus: 9634, signal 183747/184878 (executing program) 2024/10/17 22:59:02 starting 8 fuzzer processes 22:59:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000180)) 22:59:02 executing program 4: ioperm(0x0, 0x6d1f, 0x8) getpgrp(0xffffffffffffffff) 22:59:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000280)) 22:59:02 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001a00012b"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 22:59:02 executing program 3: rseq(0x0, 0x0, 0x1, 0x0) 22:59:02 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000a80)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1fc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440408000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) getpgid(0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffff8001, 0x9) 22:59:02 executing program 6: clock_gettime(0x9, &(0x7f0000000240)) [ 92.160960] audit: type=1400 audit(1729205942.106:7): avc: denied { execmem } for pid=273 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:59:02 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000001740), &(0x7f0000001780)=0x4) [ 93.676082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.677702] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.680144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.680933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.684476] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.685945] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.690896] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.695621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.696938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.699079] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.699820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.702139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.735834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.739334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.759464] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.761082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.762098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.762690] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.765836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.768212] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.768437] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.773631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.774136] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.777250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.777953] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.779282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.780356] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.781276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.782300] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.792398] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.794630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.808792] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.821780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.823272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.825693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.827630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.829604] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.832888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.835210] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.840170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.849753] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.851132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.853619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.856192] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.857726] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.873441] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.874708] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.879295] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.768966] Bluetooth: hci1: command tx timeout [ 95.768976] Bluetooth: hci0: command tx timeout [ 95.832267] Bluetooth: hci5: command tx timeout [ 95.833564] Bluetooth: hci3: command tx timeout [ 95.896329] Bluetooth: hci4: command tx timeout [ 95.896375] Bluetooth: hci2: command tx timeout [ 95.896588] Bluetooth: hci7: command tx timeout [ 95.960241] Bluetooth: hci6: command tx timeout [ 97.816236] Bluetooth: hci0: command tx timeout [ 97.816463] Bluetooth: hci1: command tx timeout [ 97.880185] Bluetooth: hci3: command tx timeout [ 97.880314] Bluetooth: hci5: command tx timeout [ 97.944191] Bluetooth: hci4: command tx timeout [ 97.944231] Bluetooth: hci7: command tx timeout [ 97.944989] Bluetooth: hci2: command tx timeout [ 98.008167] Bluetooth: hci6: command tx timeout [ 99.865128] Bluetooth: hci1: command tx timeout [ 99.865621] Bluetooth: hci0: command tx timeout [ 99.928244] Bluetooth: hci5: command tx timeout [ 99.928269] Bluetooth: hci3: command tx timeout [ 99.992280] Bluetooth: hci2: command tx timeout [ 99.992787] Bluetooth: hci7: command tx timeout [ 99.993361] Bluetooth: hci4: command tx timeout [ 100.057091] Bluetooth: hci6: command tx timeout [ 101.912101] Bluetooth: hci1: command tx timeout [ 101.915054] Bluetooth: hci0: command tx timeout [ 101.976089] Bluetooth: hci3: command tx timeout [ 101.977118] Bluetooth: hci5: command tx timeout [ 102.040078] Bluetooth: hci7: command tx timeout [ 102.041113] Bluetooth: hci4: command tx timeout [ 102.041533] Bluetooth: hci2: command tx timeout [ 102.104097] Bluetooth: hci6: command tx timeout [ 152.606824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.608157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.079326] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.084095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.085607] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.091552] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.098371] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.101643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.130842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.133294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.135393] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.141769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.153808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.169771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.172192] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.176101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.182331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.192429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.205798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.214629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.324148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.332095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.334617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.338859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.341979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.345706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.410717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.421477] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.430370] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.463214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.470562] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.492404] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.520312] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.524506] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.540541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.559661] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.576893] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.579869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.585519] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.617363] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.620850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.623537] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.630677] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.638366] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.640458] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.642598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.703487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.717178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.725336] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.728481] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.169127] Bluetooth: hci0: command tx timeout [ 158.232656] Bluetooth: hci1: command tx timeout [ 158.296104] Bluetooth: hci2: command tx timeout [ 158.424599] Bluetooth: hci3: command tx timeout [ 158.552146] Bluetooth: hci4: command tx timeout [ 158.616761] Bluetooth: hci5: command tx timeout [ 158.744229] Bluetooth: hci7: command tx timeout [ 158.872163] Bluetooth: hci6: command tx timeout [ 160.218145] Bluetooth: hci0: command tx timeout [ 160.281130] Bluetooth: hci1: command tx timeout [ 160.346043] Bluetooth: hci2: command tx timeout [ 160.473118] Bluetooth: hci3: command tx timeout [ 160.602114] Bluetooth: hci4: command tx timeout [ 160.665032] Bluetooth: hci5: command tx timeout [ 160.793590] Bluetooth: hci7: command tx timeout [ 160.920061] Bluetooth: hci6: command tx timeout [ 162.265151] Bluetooth: hci0: command tx timeout [ 162.328060] Bluetooth: hci1: command tx timeout [ 162.392086] Bluetooth: hci2: command tx timeout [ 162.521099] Bluetooth: hci3: command tx timeout [ 162.651075] Bluetooth: hci4: command tx timeout [ 162.712213] Bluetooth: hci5: command tx timeout [ 162.840114] Bluetooth: hci7: command tx timeout [ 162.969082] Bluetooth: hci6: command tx timeout [ 164.313152] Bluetooth: hci0: command tx timeout [ 164.377079] Bluetooth: hci1: command tx timeout [ 164.441231] Bluetooth: hci2: command tx timeout [ 164.570121] Bluetooth: hci3: command tx timeout [ 164.697080] Bluetooth: hci4: command tx timeout [ 164.761100] Bluetooth: hci5: command tx timeout [ 164.888098] Bluetooth: hci7: command tx timeout [ 165.017066] Bluetooth: hci6: command tx timeout [ 212.656276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.656948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.942575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.943257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.130830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.131574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.274409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.275455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.588772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.589762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.811309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.811969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.444057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.444721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.694774] hrtimer: interrupt took 59323 ns [ 214.717784] audit: type=1400 audit(1729206064.612:8): avc: denied { open } for pid=7251 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 214.719835] audit: type=1400 audit(1729206064.612:9): avc: denied { kernel } for pid=7251 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 23:01:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x53, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [], {}, [{0x8, 0x0, 0xffffffffffffffff}]}, 0x2c, 0x0) [ 214.996404] loop5: detected capacity change from 0 to 10 23:01:05 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') getcwd(&(0x7f0000001400)=""/178, 0xb2) 23:01:05 executing program 7: ioperm(0x0, 0x5, 0x36) io_submit(0x0, 0x0, 0x0) 23:01:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000240)='./file1\x00', 0x80, 0x0, 0x0, 0x20800, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,utf8,mode=0x0000000000000001,unhide,dmode=0x0000000000000009,iocharset=cp860,uid<', @ANYRESDEC, @ANYBLOB="c5d9756e633d50415477000000452d4b2c00"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x8, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000580)='./file1/file0\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40, 0x4) [ 215.322635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.323396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.610540] loop5: detected capacity change from 0 to 10 [ 215.612288] vfat: Unknown parameter '' 23:01:07 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000a80)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1fc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440408000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) getpgid(0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffff8001, 0x9) [ 217.544051] loop5: detected capacity change from 0 to 10 [ 218.676350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.677846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.678821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.681261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.683538] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.684468] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.831477] Bluetooth: hci0: command tx timeout 23:01:11 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000a80)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1fc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440408000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) getpgid(0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffff8001, 0x9) 23:01:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000240)='./file1\x00', 0x80, 0x0, 0x0, 0x20800, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,utf8,mode=0x0000000000000001,unhide,dmode=0x0000000000000009,iocharset=cp860,uid<', @ANYRESDEC, @ANYBLOB="c5d9756e633d50415477000000452d4b2c00"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x8, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000580)='./file1/file0\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40, 0x4) 23:01:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000240)='./file1\x00', 0x80, 0x0, 0x0, 0x20800, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,utf8,mode=0x0000000000000001,unhide,dmode=0x0000000000000009,iocharset=cp860,uid<', @ANYRESDEC, @ANYBLOB="c5d9756e633d50415477000000452d4b2c00"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x8, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000580)='./file1/file0\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40, 0x4) [ 222.443750] loop5: detected capacity change from 0 to 10 [ 223.897100] Bluetooth: hci0: command tx timeout [ 224.746947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.749648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.751216] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.757582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.759790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.762438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.458778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.459296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.466335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.473468] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.479244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.479277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.513379] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.513455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.519560] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.521541] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.533182] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.538174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.552537] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.569183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.577818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.603226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.608862] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.624349] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.675025] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.695870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.722419] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.742517] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.752355] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.783305] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 225.945497] Bluetooth: hci0: command tx timeout [ 226.841143] Bluetooth: hci1: command tx timeout [ 227.608089] Bluetooth: hci5: command tx timeout [ 227.609280] Bluetooth: hci2: command tx timeout [ 227.672197] Bluetooth: hci6: command tx timeout [ 227.992282] Bluetooth: hci0: command tx timeout [ 228.184133] Bluetooth: hci7: command tx timeout [ 228.888153] Bluetooth: hci1: command tx timeout [ 229.656149] Bluetooth: hci2: command tx timeout [ 229.656684] Bluetooth: hci5: command tx timeout [ 229.720158] Bluetooth: hci6: command tx timeout [ 230.232072] Bluetooth: hci7: command tx timeout [ 230.936342] Bluetooth: hci1: command tx timeout [ 231.706140] Bluetooth: hci2: command tx timeout [ 231.707163] Bluetooth: hci5: command tx timeout [ 231.768111] Bluetooth: hci6: command tx timeout [ 232.280125] Bluetooth: hci7: command tx timeout [ 232.984055] Bluetooth: hci1: command tx timeout [ 233.752099] Bluetooth: hci2: command tx timeout [ 233.752672] Bluetooth: hci5: command tx timeout [ 233.816824] Bluetooth: hci6: command tx timeout [ 234.328046] Bluetooth: hci7: command tx timeout [ 262.907513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.908227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.127093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.127751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.176227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.176863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.279379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.280160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.549599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.550538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.628727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.630120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.766690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.767467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.836418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.837435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.879451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.880149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.995193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.995885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.059764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.060679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.162831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.163473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:01:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x1, [{{0x4, 0x0, @broadcast}}]}, 0x110) 23:01:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") 23:01:58 executing program 4: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) umount2(&(0x7f0000000080)='./file1\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x0, 0x6628}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) 23:01:58 executing program 3: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000002000/0x2000)=nil) 23:01:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x40, &(0x7f0000000240)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 23:01:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCCBRK(r0, 0x5423) 23:01:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000240)='./file1\x00', 0x80, 0x0, 0x0, 0x20800, &(0x7f0000000140)=ANY=[@ANYBLOB='utf8,utf8,mode=0x0000000000000001,unhide,dmode=0x0000000000000009,iocharset=cp860,uid<', @ANYRESDEC, @ANYBLOB="c5d9756e633d50415477000000452d4b2c00"]) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x10) mknodat$loop(r0, &(0x7f0000000040)='./file1\x00', 0x8, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000580)='./file1/file0\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x40, 0x4) 23:01:58 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000000a80)={0x77359400}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1fc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440408000f801", 0x17}, {0x0, 0x0, 0xa00}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) getpgid(0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffff8001, 0x9) 23:01:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000300)="fd", 0x1, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@chain) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 23:01:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000001000)) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000004f80), 0x40, 0x0) syz_open_dev$usbmon(&(0x7f00000050c0), 0x9, 0x2c0001) 23:01:58 executing program 3: memfd_secret(0x8764316e4a9b0a19) 23:01:59 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r0) lseek(r1, 0x9, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x7, 0x8, 0xb, 0xffffff00, 0x0, "d4a89354cdc0e1d1ad0964940f221679708fb7", 0x9}) [ 270.882189] loop5: detected capacity change from 0 to 10 [ 282.205399] Bluetooth: hci3: command 0x0406 tx timeout [ 282.205939] Bluetooth: hci4: command 0x0406 tx timeout 23:02:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:02:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109840, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x2}, 0x0) 23:02:24 executing program 5: rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x2, 0x0) 23:02:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x43000000}}]}) 23:02:24 executing program 4: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) umount2(&(0x7f0000000080)='./file1\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x0, 0x6628}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) 23:02:24 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x8001}]) 23:02:24 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540)=""/243, 0xf3, 0x0) 23:02:24 executing program 6: syz_emit_ethernet(0x48a, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60f7cfde04543c00fc020000000000000000000000000000ff0200000000000000000000000000013c1b000000000000050200040738000000030c010200ca180000000000000000000000000000080000000000000000000000000000006cda0000000000000800000000000000050200080738000000000cf8030000100000000000000001000000000000dffbffffffffffff020000000000000005000000000000000800000000000000055a"], 0x0) [ 294.614511] loop2: detected capacity change from 0 to 128 [ 294.649878] loop2: detected capacity change from 0 to 128 [ 294.721731] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 294.741457] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 23:02:24 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 23:02:24 executing program 1: semget$private(0x0, 0x4000, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 23:02:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000010000010000000000000000000010000000000380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 23:02:24 executing program 6: syz_emit_ethernet(0x48a, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60f7cfde04543c00fc020000000000000000000000000000ff0200000000000000000000000000013c1b000000000000050200040738000000030c010200ca180000000000000000000000000000080000000000000000000000000000006cda0000000000000800000000000000050200080738000000000cf8030000100000000000000001000000000000dffbffffffffffff020000000000000005000000000000000800000000000000055a"], 0x0) 23:02:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet6_int(r0, 0x3a, 0x0, 0x0, 0x0) 23:02:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80186803, 0x0) [ 295.068025] process 'syz-executor.0' launched './file1' with NULL argv: empty string added 23:02:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r0, &(0x7f0000000700)=""/4096, 0x1000, 0xbe8e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local}, 0x0, @in6=@remote, 0x0, 0x4, 0x0, 0x2}}, 0xe8) r2 = syz_open_dev$vcsa(&(0x7f0000000140), 0x53b1, 0x80500) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/igmp6\x00') sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000001700)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf256b000000965d1a0008021100000100000a00060008021100000100000a001a00ffffffffffff00000a001a00080211242a1a00ed79d08f718d9151d300000100000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a00080211000001000031f49b5d27391dd9f66bd8ada1ff6835103900"/145], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4004) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r3, 0x19, 0x3, 0xff}) vmsplice(r4, &(0x7f0000002900)=[{&(0x7f0000000100)="728c3dccc16f28dd4f973a8648cde18a6b7874bfd53816f0da84b6ada219a0f5a739", 0x22}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000600)="d577d974d2222610217e13b6f24ab3e37b9320f912caf308e19bdd8ee9ae168d6f139351fd83a771f8499becb5a13f5c", 0x30}, {&(0x7f0000000640)="1d88741327eb2a2466f0b1f1337c34413fb72b684a1d3b1bb46807b60dbdaa2bf5c2a916b668ce1af46060cfca2f8747737847a0779701301677cf92f5244d79535763fb62ff078a5c107c3448217d086eff0e038c6bd72dbec74158d186a15490c0fd5657d859c9b3b21df1c383b0f086c89a413ed26bbb4994", 0x7a}, {&(0x7f00000027c0)="136ff50a7d9207ea12c9f339b4d2596d1801d1a96c3ecb49c84d96fce81509deb2f143b7a2b7f39de088bdbd04ef3173c1a9d252579e4b938500a46b34a45d7713a7ae01cd551646d3dee6183f38c491f0835bfbd9589afd2f9fae9dcb379c996b627a0db6dd97637fd5653b88f0f17e29e4e1f480ff6d2cb07f7f386944e4a3d79bc7d73411e1af3e", 0x89}], 0x5, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f0000000480)) 23:02:25 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:02:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 23:02:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000010000010000000000000000000010000000000380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 23:02:25 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0xffffffff}) 23:02:26 executing program 6: syz_emit_ethernet(0x48a, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60f7cfde04543c00fc020000000000000000000000000000ff0200000000000000000000000000013c1b000000000000050200040738000000030c010200ca180000000000000000000000000000080000000000000000000000000000006cda0000000000000800000000000000050200080738000000000cf8030000100000000000000001000000000000dffbffffffffffff020000000000000005000000000000000800000000000000055a"], 0x0) [ 320.813672] watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.2:10103] [ 320.814418] Modules linked in: [ 320.814716] irq event stamp: 2818195 [ 320.815041] hardirqs last enabled at (2818194): [] irqentry_exit+0x3b/0x90 [ 320.816340] hardirqs last disabled at (2818195): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 320.818440] softirqs last enabled at (2809326): [] handle_softirqs+0x50c/0x770 [ 320.820890] softirqs last disabled at (2809335): [] irq_exit_rcu+0x94/0xc0 [ 320.822721] CPU: 1 UID: 0 PID: 10103 Comm: syz-executor.2 Not tainted 6.12.0-rc3-next-20241016 #1 [ 320.824223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 320.824943] RIP: 0010:__virt_addr_valid+0x135/0x5d0 [ 320.825402] Code: 9a 6e 03 41 bc 00 00 08 00 eb c6 e8 e5 a5 3b 00 49 89 ec 49 c1 ec 23 e9 a4 02 00 00 41 bd 00 00 02 00 e8 ce a5 3b 00 4c 89 ee <4c> 89 e7 e8 63 a8 3b 00 4d 39 ec 0f 83 21 04 00 00 e8 b5 a5 3b 00 [ 320.826883] RSP: 0018:ffff88806cf093a8 EFLAGS: 00000246 [ 320.827354] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff8115d613 [ 320.827955] RDX: ffff88800f273700 RSI: 0000000000000800 RDI: 0000000000000006 [ 320.828572] RBP: 000000002e42dc80 R08: 0000000000000001 R09: 0000000000000000 [ 320.829174] R10: 0000000000080000 R11: dd6c604830043200 R12: 0000000000000000 [ 320.829785] R13: 0000000000000800 R14: ffff88802e42dc80 R15: ffff88806cf09690 [ 320.830391] FS: 00007f81e8c4a700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 320.831086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.831590] CR2: 0000001b2d324000 CR3: 00000000330b0000 CR4: 0000000000350ef0 [ 320.832198] Call Trace: [ 320.832443] [ 320.832654] ? watchdog_timer_fn+0x3ee/0x510 [ 320.833069] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 320.833516] ? __hrtimer_run_queues+0x57c/0xa70 [ 320.833963] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 320.834420] ? ktime_get_update_offsets_now+0x260/0x3c0 [ 320.834945] ? hrtimer_interrupt+0x2f2/0x750 [ 320.835389] ? __sysvec_apic_timer_interrupt+0xc2/0x390 [ 320.835882] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 320.836377] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.836899] ? __virt_addr_valid+0xf3/0x5d0 [ 320.837308] ? __virt_addr_valid+0x135/0x5d0 [ 320.837726] ? __virt_addr_valid+0x132/0x5d0 [ 320.838147] kasan_addr_to_slab+0xd/0xa0 [ 320.838556] __kasan_record_aux_stack+0xe/0xa0 [ 320.838994] kvfree_call_rcu+0x29/0x980 [ 320.839396] ? srso_return_thunk+0x5/0x5f [ 320.839815] ? lock_is_held_type+0x9e/0x120 [ 320.840250] cfg80211_update_known_bss+0x3c9/0x11e0 [ 320.840743] __cfg80211_bss_update+0xe0/0x1fe0 [ 320.841185] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 320.841663] ? srso_return_thunk+0x5/0x5f [ 320.842079] ? do_raw_spin_lock+0x124/0x270 [ 320.842490] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.842929] ? lock_acquire+0x32/0xc0 [ 320.843313] ? cfg80211_inform_single_bss_data+0x6c8/0x1c50 [ 320.843862] cfg80211_inform_single_bss_data+0x6e2/0x1c50 [ 320.844396] ? __pfx_mark_lock+0x10/0x10 [ 320.844802] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 320.845415] cfg80211_inform_bss_data+0x20f/0x3510 [ 320.845890] ? __hrtimer_run_queues+0x23d/0xa70 [ 320.846335] ? lock_release+0x20f/0x6f0 [ 320.846739] ? srso_return_thunk+0x5/0x5f [ 320.847153] ? find_held_lock+0x2c/0x110 [ 320.847550] ? clockevents_program_event+0x14f/0x360 [ 320.848042] ? srso_return_thunk+0x5/0x5f [ 320.848456] ? lock_release+0x20f/0x6f0 [ 320.848859] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 320.849364] ? __pfx_lock_release+0x10/0x10 [ 320.849789] ? srso_return_thunk+0x5/0x5f [ 320.850206] ? trace_lock_acquire+0x137/0x1b0 [ 320.850644] ? srso_return_thunk+0x5/0x5f [ 320.851063] ? srso_return_thunk+0x5/0x5f [ 320.851474] ? hlock_class+0x4e/0x130 [ 320.851843] ? srso_return_thunk+0x5/0x5f [ 320.852258] ? mark_lock+0xac/0x1370 [ 320.852646] ? srso_return_thunk+0x5/0x5f [ 320.853062] ? srso_return_thunk+0x5/0x5f [ 320.853476] ? ktime_get+0x171/0x270 [ 320.853852] ? __pfx_mark_lock+0x10/0x10 [ 320.854260] ? srso_return_thunk+0x5/0x5f [ 320.854674] ? srso_return_thunk+0x5/0x5f [ 320.855091] ? clockevents_program_event+0x135/0x360 [ 320.855612] ? srso_return_thunk+0x5/0x5f [ 320.856028] ? find_held_lock+0x2c/0x110 [ 320.856427] ? ieee80211_bss_info_update+0x2b4/0xa90 [ 320.856898] ? srso_return_thunk+0x5/0x5f [ 320.857312] ? lock_release+0x20f/0x6f0 [ 320.857722] cfg80211_inform_bss_frame_data+0x250/0x690 [ 320.858246] ieee80211_bss_info_update+0x2f6/0xa90 [ 320.858708] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 320.859200] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 320.859703] ? srso_return_thunk+0x5/0x5f [ 320.860124] ? kcov_remote_stop+0x67/0x490 [ 320.860538] ? srso_return_thunk+0x5/0x5f [ 320.860943] ? ieee80211_get_channel_khz+0x149/0x1d0 [ 320.861422] ieee80211_scan_rx+0x474/0xac0 [ 320.861806] ? ieee80211_clean_skb+0x18f/0x6f0 [ 320.862259] ieee80211_rx_list+0x21ec/0x2cf0 [ 320.862680] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 320.863109] ? srso_return_thunk+0x5/0x5f [ 320.863512] ? lock_acquire.part.0+0xeb/0x320 [ 320.863949] ? ieee80211_rx_napi+0x97/0x3b0 [ 320.864371] ? srso_return_thunk+0x5/0x5f [ 320.864774] ? lock_acquire+0x32/0xc0 [ 320.865150] ? ieee80211_rx_napi+0x97/0x3b0 [ 320.865554] ieee80211_rx_napi+0xdc/0x3b0 [ 320.865935] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 320.866374] ? srso_return_thunk+0x5/0x5f [ 320.866778] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 320.867253] ieee80211_handle_queued_frames+0xd9/0x130 [ 320.867753] tasklet_action_common+0x235/0x3b0 [ 320.868177] ? workqueue_softirq_action+0x1a/0x170 [ 320.868655] handle_softirqs+0x1b1/0x770 [ 320.869043] irq_exit_rcu+0x94/0xc0 [ 320.869386] sysvec_apic_timer_interrupt+0x70/0x80 [ 320.869846] [ 320.870060] [ 320.870277] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.870762] RIP: 0010:put_cpu_partial+0x10a/0x1b0 [ 320.871213] Code: 24 28 75 5b 49 c7 44 24 28 00 00 00 00 4c 89 e7 48 8d 35 00 00 00 00 e8 b4 ff ab ff 4d 85 ed 74 06 e8 ca 7f d5 ff fb 4d 85 f6 <74> 1c 5b 4c 89 f6 48 89 ef 5d 41 5c 41 5d 41 5e e9 c1 fa ff ff 44 [ 320.872696] RSP: 0018:ffff88803f1478c0 EFLAGS: 00000246 [ 320.873168] RAX: 00000000002addf5 RBX: ffffea0000271a40 RCX: 1ffffffff0fdca53 [ 320.873772] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8183f876 [ 320.874375] RBP: ffff888008c4f780 R08: 0000000000000001 R09: fffffbfff0fda9d9 [ 320.874979] R10: ffffffff87ed4ecf R11: 0000000000000000 R12: ffff88806cf40350 [ 320.875587] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888009c69128 [ 320.876208] ? put_cpu_partial+0x106/0x1b0 [ 320.876625] qlist_free_all+0x50/0x160 [ 320.877014] kasan_quarantine_reduce+0x19c/0x230 [ 320.877473] __kasan_slab_alloc+0x49/0x70 [ 320.877852] kmem_cache_alloc_noprof+0x13d/0x3d0 [ 320.878295] ? lock_release+0x20f/0x6f0 [ 320.878699] __alloc_object+0x2f/0x270 [ 320.879063] __create_object+0x1d/0x80 [ 320.879433] kmem_cache_alloc_noprof+0x300/0x3d0 [ 320.879876] ? srso_return_thunk+0x5/0x5f [ 320.880290] ? hlock_class+0x4e/0x130 [ 320.880655] ? __x86_indirect_jump_thunk_r13+0x1/0x20 [ 320.881152] alloc_empty_file+0x76/0x1e0 [ 320.881551] path_openat+0xe1/0x2980 [ 320.881909] ? __lock_acquire+0x176a/0x4360 [ 320.882345] ? __pfx_path_openat+0x10/0x10 [ 320.882746] ? __pfx___lock_acquire+0x10/0x10 [ 320.883176] ? srso_return_thunk+0x5/0x5f [ 320.883590] do_filp_open+0x1b8/0x410 [ 320.883954] ? __pfx_do_filp_open+0x10/0x10 [ 320.884369] ? find_held_lock+0x2c/0x110 [ 320.884758] ? srso_return_thunk+0x5/0x5f [ 320.885162] ? lock_release+0x20f/0x6f0 [ 320.885557] ? __pfx_lock_release+0x10/0x10 [ 320.885977] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.886404] ? lock_acquire+0x32/0xc0 [ 320.886786] ? srso_return_thunk+0x5/0x5f [ 320.887196] ? srso_return_thunk+0x5/0x5f [ 320.887601] ? _raw_spin_unlock+0x1e/0x40 [ 320.887991] ? srso_return_thunk+0x5/0x5f [ 320.888404] ? alloc_fd+0x2c0/0x560 [ 320.888774] do_sys_openat2+0x164/0x1d0 [ 320.889143] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.889574] __x64_sys_openat+0x143/0x200 [ 320.889955] ? __pfx___x64_sys_openat+0x10/0x10 [ 320.890399] do_syscall_64+0xbf/0x1d0 [ 320.890762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.891238] RIP: 0033:0x7f81eb687a04 [ 320.891576] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 320.893067] RSP: 002b:00007f81e8c4a060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 320.893718] RAX: ffffffffffffffda RBX: 00007f81eb7e7f60 RCX: 00007f81eb687a04 [ 320.894326] RDX: 0000000000000002 RSI: 00007f81e8c4a0f0 RDI: 00000000ffffff9c [ 320.894933] RBP: 00007f81e8c4a0f0 R08: 0000000000000000 R09: 00007f81e8c49f70 [ 320.895536] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 320.896143] R13: 00007ffda2c2c72f R14: 00007f81e8c4a300 R15: 0000000000022000 [ 320.896779] [ 320.897001] Sending NMI from CPU 1 to CPUs 0: [ 320.897425] NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30 23:02:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)={0x28, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}]}, 0x28}}, 0x0) 23:02:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x1b, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, "935126b3c2cf399e6c05a998787606a0642a02c1996b010a4738bc52d457fc33b1f0a4d12b42d0486b4cfe186ef202da704669f8824d8060cbf2ba7da3ae26ac4fee343e855612c7eb3b8e983c54084e"}, 0xd8) 23:02:50 executing program 1: ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) 23:02:50 executing program 6: syz_emit_ethernet(0x48a, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60f7cfde04543c00fc020000000000000000000000000000ff0200000000000000000000000000013c1b000000000000050200040738000000030c010200ca180000000000000000000000000000080000000000000000000000000000006cda0000000000000800000000000000050200080738000000000cf8030000100000000000000001000000000000dffbffffffffffff020000000000000005000000000000000800000000000000055a"], 0x0) 23:02:50 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:02:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000010000010000000000000000000010000000000380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 23:02:50 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80186803, 0x0) 23:02:50 executing program 4: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x91010, 0x0) umount2(&(0x7f0000000080)='./file1\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000001c0), 0xffffffc1) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0x0, 0x6628}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'sit0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002880), 0x4000101, 0x0) 23:02:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000600)=@known='security.apparmor\x00') 23:02:51 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4042, 0x0) fallocate(r0, 0x0, 0x0, 0x87ffffc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x0) pwritev(r1, &(0x7f00000007c0)=[{&(0x7f0000000040)='\"', 0x1}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r1}) 23:02:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0x80186803, 0x0) 23:02:51 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0xee00) 23:02:51 executing program 6: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @dev}, @parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @private, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ssrr={0x89, 0x7, 0x0, [@empty]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@empty}]}]}}}}}}}, 0x0) 23:02:51 executing program 1: mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x57) VM DIAGNOSIS: 23:02:50 Registers: info registers vcpu 0 RAX=00000000000c14bd RBX=0000000000000000 RCX=ffffffff848238d7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff812ad1ed RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6c70 R10=ffff88806ce36383 R11=0000000000000000 R12=ffffffff863f2748 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8482487e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000056194c9b8618 CR3=00000000190fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041127a4000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8262d465 RDI=ffffffff886610c0 RBP=ffffffff88661080 RSP=ffff88806cf08b88 R8 =0000000000000000 R9 =ffffed1001d5d046 R10=0000000000000031 R11=552031203a555043 R12=0000000000000031 R13=ffffffff88661080 R14=0000000000000010 R15=ffffffff8262d450 RIP=ffffffff8262d4bd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f81e8c4a700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d324000 CR3=00000000330b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000