Warning: Permanently added '[localhost]:2623' (ECDSA) to the list of known hosts. 2024/12/12 08:30:12 fuzzer started 2024/12/12 08:30:13 dialing manager at localhost:35345 syzkaller login: [ 61.431309] cgroup: Unknown subsys name 'net' [ 61.537611] cgroup: Unknown subsys name 'cpuset' [ 61.566138] cgroup: Unknown subsys name 'rlimit' 2024/12/12 08:30:31 syscalls: 2217 2024/12/12 08:30:31 code coverage: enabled 2024/12/12 08:30:31 comparison tracing: enabled 2024/12/12 08:30:31 extra coverage: enabled 2024/12/12 08:30:31 setuid sandbox: enabled 2024/12/12 08:30:31 namespace sandbox: enabled 2024/12/12 08:30:31 Android sandbox: enabled 2024/12/12 08:30:31 fault injection: enabled 2024/12/12 08:30:31 leak checking: enabled 2024/12/12 08:30:31 net packet injection: enabled 2024/12/12 08:30:31 net device setup: enabled 2024/12/12 08:30:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/12 08:30:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/12 08:30:31 USB emulation: enabled 2024/12/12 08:30:31 hci packet injection: enabled 2024/12/12 08:30:31 wifi device emulation: enabled 2024/12/12 08:30:31 802.15.4 emulation: enabled 2024/12/12 08:30:31 fetching corpus: 50, signal 23236/25003 (executing program) 2024/12/12 08:30:31 fetching corpus: 100, signal 38754/42016 (executing program) 2024/12/12 08:30:32 fetching corpus: 150, signal 46219/50878 (executing program) 2024/12/12 08:30:32 fetching corpus: 200, signal 51468/57555 (executing program) 2024/12/12 08:30:32 fetching corpus: 250, signal 56244/63617 (executing program) 2024/12/12 08:30:32 fetching corpus: 300, signal 61438/70015 (executing program) 2024/12/12 08:30:32 fetching corpus: 350, signal 64845/74615 (executing program) 2024/12/12 08:30:32 fetching corpus: 400, signal 68264/79178 (executing program) 2024/12/12 08:30:32 fetching corpus: 450, signal 75872/87510 (executing program) 2024/12/12 08:30:33 fetching corpus: 500, signal 79542/92117 (executing program) 2024/12/12 08:30:33 fetching corpus: 550, signal 81546/95186 (executing program) 2024/12/12 08:30:33 fetching corpus: 600, signal 84562/99093 (executing program) 2024/12/12 08:30:33 fetching corpus: 650, signal 86467/101981 (executing program) 2024/12/12 08:30:33 fetching corpus: 700, signal 88181/104608 (executing program) 2024/12/12 08:30:33 fetching corpus: 750, signal 90111/107367 (executing program) 2024/12/12 08:30:33 fetching corpus: 800, signal 92281/110376 (executing program) 2024/12/12 08:30:33 fetching corpus: 850, signal 94385/113263 (executing program) 2024/12/12 08:30:33 fetching corpus: 900, signal 96537/116162 (executing program) 2024/12/12 08:30:33 fetching corpus: 950, signal 98629/118912 (executing program) 2024/12/12 08:30:34 fetching corpus: 1000, signal 100598/121580 (executing program) 2024/12/12 08:30:34 fetching corpus: 1050, signal 102089/123806 (executing program) 2024/12/12 08:30:34 fetching corpus: 1100, signal 104424/126700 (executing program) 2024/12/12 08:30:34 fetching corpus: 1150, signal 106227/129093 (executing program) 2024/12/12 08:30:34 fetching corpus: 1200, signal 107325/130996 (executing program) 2024/12/12 08:30:34 fetching corpus: 1250, signal 109581/133703 (executing program) 2024/12/12 08:30:34 fetching corpus: 1300, signal 110784/135599 (executing program) 2024/12/12 08:30:34 fetching corpus: 1350, signal 112260/137692 (executing program) 2024/12/12 08:30:34 fetching corpus: 1400, signal 113871/139843 (executing program) 2024/12/12 08:30:34 fetching corpus: 1450, signal 115034/141572 (executing program) 2024/12/12 08:30:35 fetching corpus: 1500, signal 116295/143375 (executing program) 2024/12/12 08:30:35 fetching corpus: 1550, signal 117762/145358 (executing program) 2024/12/12 08:30:35 fetching corpus: 1600, signal 118809/146984 (executing program) 2024/12/12 08:30:35 fetching corpus: 1650, signal 120453/148982 (executing program) 2024/12/12 08:30:35 fetching corpus: 1700, signal 121282/150409 (executing program) 2024/12/12 08:30:35 fetching corpus: 1750, signal 122791/152278 (executing program) 2024/12/12 08:30:35 fetching corpus: 1800, signal 123832/153830 (executing program) 2024/12/12 08:30:35 fetching corpus: 1850, signal 124646/155208 (executing program) 2024/12/12 08:30:35 fetching corpus: 1900, signal 125649/156706 (executing program) 2024/12/12 08:30:35 fetching corpus: 1950, signal 126697/158180 (executing program) 2024/12/12 08:30:35 fetching corpus: 2000, signal 127437/159488 (executing program) 2024/12/12 08:30:36 fetching corpus: 2050, signal 128574/160983 (executing program) 2024/12/12 08:30:36 fetching corpus: 2100, signal 129299/162211 (executing program) 2024/12/12 08:30:36 fetching corpus: 2150, signal 130315/163625 (executing program) 2024/12/12 08:30:36 fetching corpus: 2200, signal 131345/164969 (executing program) 2024/12/12 08:30:36 fetching corpus: 2250, signal 131926/166123 (executing program) 2024/12/12 08:30:36 fetching corpus: 2300, signal 132520/167211 (executing program) 2024/12/12 08:30:36 fetching corpus: 2350, signal 133319/168446 (executing program) 2024/12/12 08:30:36 fetching corpus: 2400, signal 133918/169486 (executing program) 2024/12/12 08:30:36 fetching corpus: 2450, signal 134536/170568 (executing program) 2024/12/12 08:30:36 fetching corpus: 2500, signal 135427/171763 (executing program) 2024/12/12 08:30:37 fetching corpus: 2550, signal 136423/172968 (executing program) 2024/12/12 08:30:37 fetching corpus: 2600, signal 136882/173900 (executing program) 2024/12/12 08:30:37 fetching corpus: 2650, signal 137677/175022 (executing program) 2024/12/12 08:30:37 fetching corpus: 2700, signal 138331/176036 (executing program) 2024/12/12 08:30:37 fetching corpus: 2750, signal 139406/177290 (executing program) 2024/12/12 08:30:37 fetching corpus: 2800, signal 140455/178462 (executing program) 2024/12/12 08:30:37 fetching corpus: 2850, signal 141601/179645 (executing program) 2024/12/12 08:30:37 fetching corpus: 2900, signal 142519/180732 (executing program) 2024/12/12 08:30:37 fetching corpus: 2950, signal 143222/181661 (executing program) 2024/12/12 08:30:37 fetching corpus: 3000, signal 143936/182574 (executing program) 2024/12/12 08:30:38 fetching corpus: 3050, signal 144371/183420 (executing program) 2024/12/12 08:30:38 fetching corpus: 3100, signal 145078/184379 (executing program) 2024/12/12 08:30:38 fetching corpus: 3150, signal 145656/185219 (executing program) 2024/12/12 08:30:38 fetching corpus: 3200, signal 146485/186154 (executing program) 2024/12/12 08:30:38 fetching corpus: 3250, signal 147321/187091 (executing program) 2024/12/12 08:30:38 fetching corpus: 3300, signal 148111/187981 (executing program) 2024/12/12 08:30:38 fetching corpus: 3350, signal 148977/188892 (executing program) 2024/12/12 08:30:38 fetching corpus: 3400, signal 149704/189747 (executing program) 2024/12/12 08:30:38 fetching corpus: 3450, signal 150260/190531 (executing program) 2024/12/12 08:30:38 fetching corpus: 3500, signal 150826/191300 (executing program) 2024/12/12 08:30:38 fetching corpus: 3550, signal 151164/191980 (executing program) 2024/12/12 08:30:39 fetching corpus: 3600, signal 151589/192696 (executing program) 2024/12/12 08:30:39 fetching corpus: 3650, signal 152181/193476 (executing program) 2024/12/12 08:30:39 fetching corpus: 3700, signal 152918/194305 (executing program) 2024/12/12 08:30:39 fetching corpus: 3750, signal 153400/195012 (executing program) 2024/12/12 08:30:39 fetching corpus: 3800, signal 154046/195788 (executing program) 2024/12/12 08:30:39 fetching corpus: 3850, signal 154412/196462 (executing program) 2024/12/12 08:30:39 fetching corpus: 3900, signal 155142/197185 (executing program) 2024/12/12 08:30:39 fetching corpus: 3950, signal 155593/197871 (executing program) 2024/12/12 08:30:39 fetching corpus: 4000, signal 156281/198537 (executing program) 2024/12/12 08:30:40 fetching corpus: 4050, signal 156965/199203 (executing program) 2024/12/12 08:30:40 fetching corpus: 4100, signal 157415/199828 (executing program) 2024/12/12 08:30:40 fetching corpus: 4150, signal 158338/200514 (executing program) 2024/12/12 08:30:40 fetching corpus: 4200, signal 158680/201106 (executing program) 2024/12/12 08:30:40 fetching corpus: 4250, signal 159075/201715 (executing program) 2024/12/12 08:30:40 fetching corpus: 4300, signal 159517/202323 (executing program) 2024/12/12 08:30:40 fetching corpus: 4350, signal 160031/202905 (executing program) 2024/12/12 08:30:40 fetching corpus: 4400, signal 160655/203504 (executing program) 2024/12/12 08:30:40 fetching corpus: 4450, signal 161108/204074 (executing program) 2024/12/12 08:30:40 fetching corpus: 4500, signal 161491/204592 (executing program) 2024/12/12 08:30:40 fetching corpus: 4550, signal 161963/205140 (executing program) 2024/12/12 08:30:40 fetching corpus: 4600, signal 162321/205713 (executing program) 2024/12/12 08:30:41 fetching corpus: 4650, signal 162614/206241 (executing program) 2024/12/12 08:30:41 fetching corpus: 4700, signal 163245/206773 (executing program) 2024/12/12 08:30:41 fetching corpus: 4750, signal 163767/207287 (executing program) 2024/12/12 08:30:41 fetching corpus: 4800, signal 164132/207758 (executing program) 2024/12/12 08:30:41 fetching corpus: 4850, signal 164952/208277 (executing program) 2024/12/12 08:30:41 fetching corpus: 4900, signal 165351/208772 (executing program) 2024/12/12 08:30:41 fetching corpus: 4950, signal 165820/209255 (executing program) 2024/12/12 08:30:41 fetching corpus: 5000, signal 166321/209703 (executing program) 2024/12/12 08:30:41 fetching corpus: 5050, signal 166676/210176 (executing program) 2024/12/12 08:30:41 fetching corpus: 5100, signal 167155/210631 (executing program) 2024/12/12 08:30:42 fetching corpus: 5150, signal 167564/211070 (executing program) 2024/12/12 08:30:42 fetching corpus: 5200, signal 167942/211488 (executing program) 2024/12/12 08:30:42 fetching corpus: 5250, signal 168306/211940 (executing program) 2024/12/12 08:30:42 fetching corpus: 5300, signal 168673/212334 (executing program) 2024/12/12 08:30:42 fetching corpus: 5350, signal 169116/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5400, signal 169419/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5450, signal 169877/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5500, signal 170336/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5550, signal 170792/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5600, signal 171210/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5650, signal 172710/212417 (executing program) 2024/12/12 08:30:42 fetching corpus: 5700, signal 173085/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 5750, signal 173479/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 5800, signal 174011/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 5850, signal 174444/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 5900, signal 174726/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 5950, signal 175062/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 6000, signal 175357/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 6050, signal 175763/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 6100, signal 176063/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 6150, signal 176540/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 6200, signal 176901/212417 (executing program) 2024/12/12 08:30:43 fetching corpus: 6250, signal 177222/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6300, signal 177493/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6350, signal 178409/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6400, signal 178696/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6450, signal 178999/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6500, signal 179264/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6550, signal 179554/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6600, signal 179843/212417 (executing program) 2024/12/12 08:30:44 fetching corpus: 6650, signal 180200/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 6700, signal 180487/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 6750, signal 180834/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 6800, signal 181147/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 6850, signal 181648/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 6900, signal 181854/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 6950, signal 182072/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 7000, signal 182483/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 7050, signal 182701/212417 (executing program) 2024/12/12 08:30:45 fetching corpus: 7100, signal 183086/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7150, signal 183315/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7200, signal 183631/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7250, signal 183892/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7300, signal 184098/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7350, signal 184383/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7400, signal 184950/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7450, signal 185233/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7500, signal 185405/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7550, signal 185718/212417 (executing program) 2024/12/12 08:30:46 fetching corpus: 7600, signal 186067/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7650, signal 186369/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7700, signal 186681/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7750, signal 186976/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7800, signal 187270/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7850, signal 187496/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7900, signal 187880/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 7950, signal 188117/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 8000, signal 188335/212417 (executing program) 2024/12/12 08:30:47 fetching corpus: 8050, signal 188624/212423 (executing program) 2024/12/12 08:30:47 fetching corpus: 8100, signal 189075/212423 (executing program) 2024/12/12 08:30:47 fetching corpus: 8150, signal 189282/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8200, signal 189477/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8250, signal 189745/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8300, signal 190002/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8350, signal 190260/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8400, signal 190626/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8450, signal 190921/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8500, signal 191201/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8550, signal 191415/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8600, signal 191702/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8650, signal 191844/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8700, signal 192048/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8750, signal 192293/212423 (executing program) 2024/12/12 08:30:48 fetching corpus: 8800, signal 192568/212423 (executing program) 2024/12/12 08:30:49 fetching corpus: 8850, signal 192846/212423 (executing program) 2024/12/12 08:30:49 fetching corpus: 8900, signal 193053/212423 (executing program) 2024/12/12 08:30:49 fetching corpus: 8950, signal 193280/212423 (executing program) 2024/12/12 08:30:49 fetching corpus: 9000, signal 193482/212423 (executing program) 2024/12/12 08:30:49 fetching corpus: 9050, signal 193726/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9100, signal 193889/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9150, signal 194168/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9200, signal 194496/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9250, signal 194759/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9300, signal 194961/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9350, signal 195219/212427 (executing program) 2024/12/12 08:30:49 fetching corpus: 9400, signal 195434/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9450, signal 195626/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9500, signal 195868/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9550, signal 196451/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9600, signal 196624/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9650, signal 196945/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9700, signal 197170/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9750, signal 197395/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9800, signal 197590/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9850, signal 197839/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9900, signal 197977/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 9950, signal 198171/212427 (executing program) 2024/12/12 08:30:50 fetching corpus: 10000, signal 198419/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10050, signal 198602/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10100, signal 198857/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10150, signal 199026/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10200, signal 199229/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10250, signal 199374/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10300, signal 199590/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10350, signal 199834/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10400, signal 200040/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10450, signal 200254/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10500, signal 200466/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10550, signal 200758/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10600, signal 201009/212430 (executing program) 2024/12/12 08:30:51 fetching corpus: 10650, signal 201181/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 10700, signal 201321/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 10750, signal 201452/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 10800, signal 201674/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 10850, signal 201826/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 10900, signal 202027/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 10950, signal 202279/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 11000, signal 202509/212430 (executing program) 2024/12/12 08:30:52 fetching corpus: 11050, signal 202714/212431 (executing program) 2024/12/12 08:30:52 fetching corpus: 11100, signal 203006/212431 (executing program) 2024/12/12 08:30:52 fetching corpus: 11150, signal 203213/212431 (executing program) 2024/12/12 08:30:52 fetching corpus: 11200, signal 203384/212431 (executing program) 2024/12/12 08:30:52 fetching corpus: 11250, signal 203559/212431 (executing program) 2024/12/12 08:30:52 fetching corpus: 11300, signal 203721/212431 (executing program) 2024/12/12 08:30:52 fetching corpus: 11350, signal 203877/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11400, signal 204038/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11450, signal 204217/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11500, signal 204363/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11550, signal 204780/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11600, signal 204963/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11650, signal 205134/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11700, signal 205347/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11750, signal 205569/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11800, signal 205775/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11850, signal 205956/212431 (executing program) 2024/12/12 08:30:53 fetching corpus: 11900, signal 206134/212431 (executing program) 2024/12/12 08:30:54 fetching corpus: 11950, signal 206294/212431 (executing program) 2024/12/12 08:30:54 fetching corpus: 12000, signal 206462/212431 (executing program) 2024/12/12 08:30:54 fetching corpus: 12003, signal 206474/212431 (executing program) 2024/12/12 08:30:54 fetching corpus: 12003, signal 206474/212431 (executing program) 2024/12/12 08:30:57 starting 8 fuzzer processes 08:30:57 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x1, "86e5276d61fce972b5fc52a8cf6181e1700825a028a6e779ca441d78fd320b48be3222cd6fd9c4b5750bb408b61f875e4d7989e0cb5413b7d701abfb954c6f511e02f4664b29b62c157aa7a1953cf81f37b5e169f30ebc38303371efa6dbfaaf0307df2df45f3906b058b032bf4a6883215f1e35f2f458d6419b9ab382082967a6fa19d55f3c9d7f5848bc699a213a613d77a938490db6955f194379d6f6497e014d665a1cab09eacc3ed3f4b5e6c8f6580b9cfdc036dc9579867aeac801d57030"}, 0xc9, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x2, "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"}, 0x102, 0x0) r0 = msgget(0x3, 0x688) msgsnd(r0, &(0x7f0000000240)={0x3, "48db34e12692d0d24095d989efcf9af184b6087cecdd6a118535977ddf1934792d"}, 0x29, 0x800) r1 = msgget(0x2, 0x204) msgsnd(r1, &(0x7f0000000280)={0x0, "e54462a122c0637843bc493bea6b94868f53a1f445ac8d4bb9a93a66c9f3f9011ab3297b79527a14013f61e0fb799686c7734ad7"}, 0x3c, 0x800) msgrcv(0xffffffffffffffff, &(0x7f00000002c0)={0x0, ""/69}, 0x4d, 0x0, 0x3800) msgrcv(r0, &(0x7f0000000340)={0x0, ""/47}, 0x37, 0x3, 0x0) r2 = msgget(0x2, 0x0) msgrcv(r1, &(0x7f0000000380)={0x0, ""/175}, 0xb7, 0x3, 0x800) msgsnd(r0, &(0x7f0000000440)={0x1, "ebac74d5de9f13940414bf474acee2a83d00825b6d30024f75355928b8c27a05d164b26f204d612ab3bef9f4b52b495db1336ac7dd824781ae7bdb2a61175ce48480b97b0f1419ea9da1ed1baf1ef7cae1354e9ef3f36f6c3541c134af4650f638c89641c3060992710935b83870c920d6d9660de6dc2b2f91b5f893f217eb831975aa62a69c61b559b75d337e0218cd66f5a75582c0ed626346ecdbf0868a920eb07e53de5b80239af36b36547ec1f7b9b943e58634b022205f9c44fe6ef2a8a3d9f293662229c797249503dba2ffb8206bc56c233d9542d9219c8fb97d"}, 0xe6, 0x0) r3 = msgget(0x1, 0x706) msgsnd(r3, &(0x7f0000000540)={0x1, "276057bc027dc4fa9cdc0079232ca973dbe5a7402b0a8315598972efa9da7d572c7af089a52d25dd9492f9727c0b569df8f2ce945617a126366fa2c8de78790d43beefd6"}, 0x4c, 0x0) r4 = msgget$private(0x0, 0x20) msgrcv(r4, &(0x7f00000005c0), 0x8, 0x0, 0x2000) r5 = msgget(0x0, 0x4) msgrcv(r5, &(0x7f0000000600)={0x0, ""/29}, 0x25, 0x0, 0x0) msgrcv(r4, &(0x7f0000000640)={0x0, ""/176}, 0xb8, 0x2, 0x2000) r6 = getgid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000700)={{0x2, 0xffffffffffffffff, 0xee01, 0xee01, r6, 0x80, 0x5}, 0x0, 0x0, 0x9, 0x1ff, 0x7e, 0x100, 0x1000, 0x6, 0xcb4, 0x7}) 08:30:57 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x10000) write$binfmt_aout(r0, &(0x7f0000000040)={{0x107, 0x3, 0x6, 0x2ee, 0x4, 0x2, 0x36d, 0x3}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1720) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001780)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000017c0)=""/145) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001880)={0x9, 0xffff, 0x7, 0x7, 0x1, [{0x7, 0x1, 0x1f, '\x00', 0x1c05}]}) r2 = syz_open_procfs(0x0, &(0x7f0000001900)='attr/fscreate\x00') ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000001940)=[0x5]) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001980)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000019c0)=""/113) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000001a80)={0x0, 0x8d, 0x6}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001e80)={0x9, 0x6, {0x2, @struct={0x9, 0x100}, 0x0, 0x4, 0xffffffffffff1a2c, 0x81, 0x100000001, 0x0, 0x8, @usage=0x9, 0x2, 0x7fff, [0x9, 0xfffffffffffffffb, 0xf29, 0x5, 0xff, 0x5]}, {0x0, @usage=0x3, r6, 0x9, 0x0, 0x1, 0x8, 0x0, 0x0, @usage=0x8, 0xffffffff, 0x5, [0x8, 0x2f7, 0x4, 0x5, 0x3, 0xffffffffffffffff]}, {0x40000000000000, @usage=0x6, 0x0, 0x4, 0xffffffff, 0x3, 0x5, 0x24e2, 0x8, @usage=0x8, 0x7fffffff, 0x80000000, [0x56fa, 0x8, 0x1, 0x401, 0xd52, 0xff]}, {0x1f, 0x1, 0x4}}) dup2(r2, r5) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) writev(r7, &(0x7f00000026c0)=[{&(0x7f00000022c0)="74abef3f6e1bcc84ec434c3c0f03ef5a85ed6ad1cfc8a1c279df1a04ee0e8b9ca91dd754580b8b956e121d5e4ad82a3869fe449e2e28b65a77e7c5a8910b593084a3fa69de55f8f1e8b4469114d550", 0x4f}, {&(0x7f0000002340)="e2105d33de947a0f0fe3c5e47e5dc94cb745d44cf7e94cff3d9b7f3b0d357e755842d38a5f30c46d5c0771fc3250e391fe7b12b9866773ee69ba5ef9d1784a7f2d537feba590f00f7ad6f76d3311093ccfc0354d862b671e7b5b7745eca0bdef71fbafdebb2c3e9e230b46bb67ae663d0736d3455c5ab23f31f7ad8ae4113540fae3e2730a79b33191b4eb3c455becb6eacfdecf2fd01e1c7429cdac7bcc581ba3619ae216739869f1d06c5ca6118dad03a38e1a10db4f6f2a713cf8e8521e9139688dd04d016e9e8c3f7e55929ac73b5346f9b40f2b3dc8af0c3c929678063dc23fe925a38d6bfdf29f22f3810a45a2710f8d", 0xf3}, {&(0x7f0000002440)="ed4800421bc6ffc94488d7fc7e7eced2e0fa1393cf845e5ed755a046665096a2be730a1effc0ddd33d6d74dc64267926fd15cf9ee7b56a50a8a35548a6b6b71b7e35818656b0cc3d4600", 0x4a}, {&(0x7f00000024c0)="7403b10fb23279c6ae238c768534cf4678662c27b2c853228e44e77f", 0x1c}, {&(0x7f0000002500)="05468595bc1ccd08b0ebdd19cea1e778464c5b46065ce6ae98c27c38fffc27dda24af223819c8978e1e29fa7f885f71dcc07fd0b037e66a6068401f377bc903b3e2afafc3c370655a0ec162d2ca2e2a23cb98605e29732ef992c01329185d4a6bb7bccb7b70daa8b907d4d144d0336686f6bbf011cef5badfbc55b81dc7414a759bc925ef135eb25aec59323a87fd8be6bae17b6f0cb77586cc79ec7d99c7127eb6cd122b104ad", 0xa7}, {&(0x7f00000025c0)="16737433c846184a03ba152d362297bedfe44b42276f0f07121082d877f92d8b5c87f115c1cde7efbbe8381a741a7712eed44fec4183715d112f0244de1292afe151e140696f681566eb665544474f16e7997f59969102250ce03c36968d38a0ec0d3436cacff4fc2fd295f9b84d43be215b8f27e3ba02a57d20b3626358aacb135fcafd78399628b16512eb56e872b35bea2625d876087198ed1a7e545d1339950b2f477cc589c455611bb7927d9a8c8cd41c9e9e9281f8e6c4a405a379aa01da687098bca7eb", 0xc7}], 0x6) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000002740)=""/85) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000027c0)=""/173) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000002880)=0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 08:30:57 executing program 2: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000040)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000000c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000180)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000001c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000280)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000002c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000300)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000340)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000380)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000003c0)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000400)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000440)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000480)) prctl$PR_GET_FPEXC(0xb, &(0x7f00000004c0)) [ 105.411787] audit: type=1400 audit(1733992257.242:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:30:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x40) fallocate(r0, 0x21, 0x2, 0x729) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008801}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"a19823a22ea1179d84406f4e678c39e0", r2, r3, {0x7, 0x5}, {0x1, 0xb4e}, 0x8, [0xa7, 0xf2, 0xb0, 0x1, 0xfff, 0x79, 0x4, 0x80000001, 0x9, 0x7, 0x9000000000, 0xfffffffffffffffa, 0xb1bb, 0xe3b2, 0x1, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000540)={"22bc4bb80202e38080c876d39dc01837", r1, r1, {0x8, 0x5}, {0x4, 0xfffffffa}, 0x1, [0x3, 0x3, 0x67, 0x1000, 0xd4, 0x1000, 0x7, 0x1, 0xfffffffffffffffd, 0xe3000000000, 0x67ef, 0x399, 0x4, 0x80000000, 0xfffffffffffffffd, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000640)={"6f417bc430c539d0d96ad7ca31ec2f21", r4, r5, {0x7ff, 0x8}, {0x3, 0x8}, 0x7fffffff, [0x6, 0x10000, 0x200, 0x16e, 0x2, 0xd5, 0x1000, 0x8000, 0x6, 0x4, 0x0, 0xfd1e, 0x2, 0x7f, 0x200, 0x4]}) pread64(r0, &(0x7f0000000740)=""/24, 0x18, 0x7) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000780)=0x7) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000007c0), 0xc0000, 0x0) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000800)=0x400) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000000840)={{r6}, r1, 0x6, @unused=[0x9, 0x7, 0x0, 0xe926], @subvolid=0x8f8}) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000001840), 0xe4000, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000018c0), r6) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x3c, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x21}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000001d80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001a00)={0x328, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1f, 0x33, @mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x6}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x4}}, @smps={0x7, 0x1, {0x0, 0x1}}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x595}, @device_b}}, @NL80211_ATTR_FRAME={0x152, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @initial, {0x2, 0x3}}, @random="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"}}, @NL80211_ATTR_FRAME={0x14e, 0x33, @mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @from_mac, {0xd, 0x2}}, @ver_80211n={0x0, 0x7ff8, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x0, @default, 0x18, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x0, 0x1}, {0x5}]}, @void, @val={0x4, 0x6, {0x6a, 0xff, 0x731, 0x3ff}}, @val={0x6, 0x2, 0x5}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7f, 0x1}}, @val={0x76, 0x6, {0x93, 0x7f, 0x3e, 0xfff}}, [{0xdd, 0xad, "13d958146561cb283f4ac76f2d42cc9a0685d2748ab65e90109ca72ec14d2419d9d07bd1a6949483a295293887f7bfc7c63826aaefcd50318775e703ec96f2fd8370b600e76f2981644df9111cba9be534a5766751132957f679378d08aa77253cdedb73ba311f8d9498c192542f9cc9724aebf761235a493ff4fb76fa62e5c868a07bc0b82303d3b7de820f16cdb46984e4dcb143d2596fddf9682c3880c3f92904ab034220bd8506eeaeda05"}, {0xdd, 0x48, "654a8c56e188c51a032cea96f509feff1e3a2a6156978bdf1d7680da235389c0529d580c0f498ea35f2de044aca789a8207a660b028ec54dccfc43b54c125af6a2f12835c705b35a"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x328}, 0x1, 0x0, 0x0, 0x44}, 0x30040000) r9 = open_tree(r7, &(0x7f0000001dc0)='./file0\x00', 0x8800) syncfs(r9) pread64(0xffffffffffffffff, &(0x7f0000001e40)=""/223, 0xdf, 0x60d) 08:30:57 executing program 4: r0 = shmget(0x1, 0x1000, 0x200, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/116) shmctl$IPC_RMID(0x0, 0x0) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmctl$IPC_RMID(r0, 0x0) shmget(0x1, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r1, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x29) shmctl$IPC_RMID(r0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f00000000c0)=""/223) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x1000) 08:30:57 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfb}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x850}, 0x8000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x18}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000480), 0x400000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000008) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004084) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048890}, 0x8080) r4 = syz_open_dev$mouse(&(0x7f0000000800), 0x0, 0x20000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x90, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x38000000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x503}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x20}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000001}, 0x2006405c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x7c, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf090, 0x18}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4007}, 0x400) r7 = open(&(0x7f0000000b80)='./file0\x00', 0x8042, 0x100) recvmmsg$unix(r7, &(0x7f0000005100)=[{{&(0x7f0000000bc0), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/154, 0x9a}, {&(0x7f0000000d00)=""/55, 0x37}], 0x2, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000002040)=[{&(0x7f0000000e80)=""/152, 0x98}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/92, 0x5c}, {&(0x7f0000001fc0)}, {&(0x7f0000002000)}], 0x5, &(0x7f00000020c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002140)=""/56, 0x38}, {&(0x7f0000002180)=""/64, 0x40}, {&(0x7f00000021c0)}, {&(0x7f0000002200)=""/123, 0x7b}, {&(0x7f0000002280)=""/185, 0xb9}, {&(0x7f0000002340)=""/10, 0xa}], 0x6}}, {{&(0x7f0000002400), 0x6e, &(0x7f00000035c0)=[{&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/233, 0xe9}], 0x3, &(0x7f0000003600)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000036c0), 0x6e, &(0x7f0000004900)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/171, 0xab}, {&(0x7f0000004800)=""/132, 0x84}, {&(0x7f00000048c0)=""/34, 0x22}], 0x4, &(0x7f0000004940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004a40)=""/138, 0x8a}, {&(0x7f0000004b00)=""/207, 0xcf}, {&(0x7f0000004c00)=""/11, 0xb}, {&(0x7f0000004c40)=""/62, 0x3e}], 0x4}}, {{&(0x7f0000004cc0), 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/27, 0x1b}, {&(0x7f0000004dc0)=""/210, 0xd2}, {&(0x7f0000004ec0)=""/211, 0xd3}], 0x4, &(0x7f0000005000)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}], 0x7, 0x20, &(0x7f00000052c0)) openat(r8, &(0x7f0000005300)='./file0\x00', 0x40080, 0x7a) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000005440)={&(0x7f0000005380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005400)={&(0x7f00000053c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400d0}, 0x8000) 08:30:57 executing program 6: write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x77359400}, 0x14, 0x6, 0x8}], 0x18) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3, 0x111401) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000080)=""/157) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x100024) fstat(r0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{}, 0x11, 0x0, 0x9}, {{}, 0x17, 0xfffa, 0x1d8cd79e}, {{r1, r2/1000+60000}, 0x3, 0x92, 0x140}, {{0x0, 0xea60}, 0x5, 0x6, 0x7}], 0x60) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0xc0000, 0x0) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000340)={0x9, 0x5, 0x800, 0x101, 0x8001, 0x7f}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x9) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000380)={0x7fff, 0x5}) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000003c0)=""/235) futex(&(0x7f00000004c0), 0x0, 0x1, &(0x7f0000000500), &(0x7f0000000540), 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000580)=""/43) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r4, {0x80000001}}, './file0\x00'}) read(0xffffffffffffffff, &(0x7f0000000600)=""/124, 0x7c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x8000}}, './file1\x00'}) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000006c0)) 08:30:57 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffffffffffa, 0x20) r1 = getpgrp(0xffffffffffffffff) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)={r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001180)=0x0) r3 = getpid() r4 = gettid() r5 = clone3(&(0x7f0000001200)={0x89000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/27, &(0x7f00000011c0)=[r2, r3, r1, r4, r1, 0xffffffffffffffff, r1], 0x7, {r0}}, 0x58) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001280)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000012c0)={0x3, 'veth0_to_hsr\x00', {0xbae}, 0x36ee}) write$P9_RLOPEN(r0, &(0x7f0000001300)={0x18, 0xd, 0x1, {{0x80, 0x1, 0x1}, 0x7ff}}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0}, &(0x7f0000001380)=0xc) rt_sigqueueinfo(r6, 0x4, &(0x7f00000013c0)={0x3e, 0x8}) tgkill(r5, r3, 0xd) getpid() open_by_handle_at(r0, &(0x7f0000001440)=@reiserfs_2={0x8, 0x2, {0x7, 0x7}}, 0x940) ptrace(0x10, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001480)=0x0) ptrace(0x10, r7) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x602000, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x40, 0x15, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000) [ 106.677494] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.680532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.682957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.699102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.712958] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.718471] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.805632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.816452] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.820445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.836455] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.847877] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.855484] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.885736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.902742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.910644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.927786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.929377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.934873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.936440] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.938442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.940520] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.959754] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.962429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.964549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.971822] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.972877] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.976447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.988287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.994596] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.996472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.028038] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.031591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.035669] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.038560] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.041906] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 107.076649] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 107.087452] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 107.091724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.105771] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 107.112808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 107.182717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 107.192419] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 107.208394] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 107.215410] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 107.225057] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 107.230336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 107.236647] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 107.241554] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.772697] Bluetooth: hci0: command tx timeout [ 108.899433] Bluetooth: hci1: command tx timeout [ 109.027248] Bluetooth: hci4: command tx timeout [ 109.027893] Bluetooth: hci2: command tx timeout [ 109.091253] Bluetooth: hci3: command tx timeout [ 109.219261] Bluetooth: hci5: command tx timeout [ 109.347365] Bluetooth: hci7: command tx timeout [ 109.348126] Bluetooth: hci6: command tx timeout [ 110.821207] Bluetooth: hci0: command tx timeout [ 110.947225] Bluetooth: hci1: command tx timeout [ 111.075333] Bluetooth: hci4: command tx timeout [ 111.075806] Bluetooth: hci2: command tx timeout [ 111.140266] Bluetooth: hci3: command tx timeout [ 111.268735] Bluetooth: hci5: command tx timeout [ 111.395788] Bluetooth: hci7: command tx timeout [ 111.397199] Bluetooth: hci6: command tx timeout [ 112.868249] Bluetooth: hci0: command tx timeout [ 112.995565] Bluetooth: hci1: command tx timeout [ 113.123227] Bluetooth: hci2: command tx timeout [ 113.123709] Bluetooth: hci4: command tx timeout [ 113.187348] Bluetooth: hci3: command tx timeout [ 113.315222] Bluetooth: hci5: command tx timeout [ 113.444994] Bluetooth: hci6: command tx timeout [ 113.445659] Bluetooth: hci7: command tx timeout [ 114.916360] Bluetooth: hci0: command tx timeout [ 115.045258] Bluetooth: hci1: command tx timeout [ 115.172284] Bluetooth: hci4: command tx timeout [ 115.172766] Bluetooth: hci2: command tx timeout [ 115.235262] Bluetooth: hci3: command tx timeout [ 115.363208] Bluetooth: hci5: command tx timeout [ 115.492197] Bluetooth: hci7: command tx timeout [ 115.492667] Bluetooth: hci6: command tx timeout [ 162.975569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.976319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.298197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.298845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.926946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.927629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.108206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.108869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.310629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.311340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.428336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.428960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:31:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x40) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) [ 164.540100] loop3: detected capacity change from 0 to 512 [ 164.551485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.552085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.559918] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 164.567758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.653511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.654154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.667377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.667972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.679818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x40) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) [ 164.756689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.757582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.784033] loop3: detected capacity change from 0 to 512 [ 164.807508] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 164.818899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.853283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.853918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.883320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.883954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.940301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x40) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) [ 165.006733] loop3: detected capacity change from 0 to 512 [ 165.021295] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 165.026689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.054568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.055238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.128048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x40) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) [ 165.268007] loop3: detected capacity change from 0 to 512 [ 165.289305] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 165.312803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.465765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.466496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.521058] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x40) [ 165.588025] loop3: detected capacity change from 0 to 512 [ 165.599351] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 165.603715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.643017] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) [ 165.689083] loop3: detected capacity change from 0 to 512 [ 165.700335] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 165.716659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.763163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.878509] loop3: detected capacity change from 0 to 512 [ 165.900537] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 165.912988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:31:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) [ 166.061503] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:31:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) [ 166.166446] loop3: detected capacity change from 0 to 512 [ 166.179839] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 166.186641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.234811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.606559] syz-executor.0 (279) used greatest stack depth: 23536 bytes left [ 170.288683] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.299769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.306999] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.308734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.316853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.322738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.324364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.331023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.333826] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.335993] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.337627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.353621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.355492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.362897] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.371719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.376278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.380590] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.387587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.389569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.393693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.403296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.429432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.436034] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.442215] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.455107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.473699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.476844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.479445] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.481071] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.483558] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.485921] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.489373] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.491308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.503313] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.529591] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.534820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.595103] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.608676] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.611887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.625548] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.631546] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.641476] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.387258] Bluetooth: hci1: command tx timeout [ 172.387278] Bluetooth: hci0: command tx timeout [ 172.452238] Bluetooth: hci2: command tx timeout [ 172.515262] Bluetooth: hci4: command tx timeout [ 172.579224] Bluetooth: hci6: command tx timeout [ 172.963335] Bluetooth: hci5: command tx timeout [ 173.540703] Bluetooth: hci7: command tx timeout [ 174.436273] Bluetooth: hci0: command tx timeout [ 174.436303] Bluetooth: hci1: command tx timeout [ 174.499264] Bluetooth: hci2: command tx timeout [ 174.563254] Bluetooth: hci4: command tx timeout [ 174.628166] Bluetooth: hci6: command tx timeout [ 175.011302] Bluetooth: hci5: command tx timeout [ 175.587205] Bluetooth: hci7: command tx timeout [ 176.485184] Bluetooth: hci0: command tx timeout [ 176.485277] Bluetooth: hci1: command tx timeout [ 176.550182] Bluetooth: hci2: command tx timeout [ 176.611261] Bluetooth: hci4: command tx timeout [ 176.675305] Bluetooth: hci6: command tx timeout [ 177.060362] Bluetooth: hci5: command tx timeout [ 177.637248] Bluetooth: hci7: command tx timeout [ 178.531212] Bluetooth: hci1: command tx timeout [ 178.532221] Bluetooth: hci0: command tx timeout [ 178.595288] Bluetooth: hci2: command tx timeout [ 178.659269] Bluetooth: hci4: command tx timeout [ 178.723336] Bluetooth: hci6: command tx timeout [ 179.107325] Bluetooth: hci5: command tx timeout [ 179.683218] Bluetooth: hci7: command tx timeout [ 222.704143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.704793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.935868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.936561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.106209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.106873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.232527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.233262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.348973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.350145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.404244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.404888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.435792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.436647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.498225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.498876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.534576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.535533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.610091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.610799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.680571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.681265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.838381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.839031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.964874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.965575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.208275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.208921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.867461] Bluetooth: hci3: command 0x0406 tx timeout 08:33:15 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, r1) keyctl$search(0xa, r0, &(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="256ca22128", 0x5, r2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='id_legacy\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) read$hiddev(r4, 0x0, 0x0) 08:33:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) 08:33:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) 08:33:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x200001) mkdir(&(0x7f0000000340)='./file0\x00', 0x198) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x40) 08:33:15 executing program 1: syz_emit_ethernet(0xc1, &(0x7f00000000c0)={@multicast, @random="c7899dad433e", @void, {@ipv4={0x800, @generic={{0x11, 0x4, 0x3, 0x2, 0xb3, 0x66, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd7d9}, {@local, 0x873}]}, @lsrr={0x83, 0x17, 0xb3, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @private=0xa010101]}, @ra={0x94, 0x4}]}}, "5bf41fee6f9ec09fe3d177eb582115902aef820c0e5a127ee8bf436978a65a750416e4dedc3eec208ab33b3b2739d96497755ef2dd3b571c8061e63bb51c86084c65b320d984e8f19954aacceb349804c702821d7286c9e881bbffa6e756be8e20ee1d2b2687044752d0340fb6466a"}}}}, 0x0) 08:33:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000380)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dff4655fdbf4655f0100fff753ef9017311d6431732e9ed6a1103b64b9269591c65c8472dcfc8c56a537706413b6a565b1db1de51a508a9728e127c63be977a94d126fd4ac9c8cfb727498cfcfb8af22822d91f1a196554d420da512d4e12fa3228cfaa0524644fbafc70c09a346e4f23061062bd155f5c0c3fe88b5fc9186d54be4487339c9f522baab76315d4bc6fb5463948c7d15a402720093262d4cb683ae2e5ad9290c", 0xd2, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000000040)="02000000030000001402000f32000f39bf000300040000000000000000000f00408d90524d434f3fc5b6a36b4be78da609b93e6526b5fb51d1478b9c33a6af2b0e4b4a97de27bb31b1f04a6912c92496627b0fd2df3440c57dbb604d0bbdd45e98ee545a84dcc48bd29735bd5f6ab7a7226012ed00e35c1c3d849b26bf56e3de3d31b191d17be62ee205156d3f7c0d0d57840c7adc55c748028ae71aa5288c", 0x9f, 0x200}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007a38087d18bc98bcfab0d23306b3932dd5b2471eb16585a9f1dffbd18505f26d0f2c622a74cd4eb67cd5ae3f953e3dd450b3"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0xfffffffffffffffc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) pwrite64(r2, &(0x7f0000000480)="1b90ea88f310e0ebe79df1366260f21b0e4d0ed0bf5a333700e8466a96b2c4b9773fe312200dde7fd7bd962956112c450de2fbec0addab0db8517a16bca2a2992dbaf7fd120915ce9f92659cda80649e8f000d7fb4248ba2d42970cde52e0caa94349c99c5f7ed84fe3497cd97ae9a66bf4a0ea1a3725399ec4fca4c941880e0e9cbb20364c4881f60800290750ac124a54d0cf4082b21ed42a38825eb3d4af76ffb521632b73bc4e62e8da4b1a933fe0e2c", 0xb2, 0x7) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cc00041b484c2f6e477cc646e053d", @ANYRESHEX=r2, @ANYBLOB=',access=user,uname=ext4\x00,version=9p2000,access=any,cache=loose,cache=none,cache=loose,fowner=', @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB="2c66356e633d46494c4501004845434b2c353d6f53657569643e", @ANYRESDEC, @ANYBLOB=',seclabel,\x00']) 08:33:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240000006d000100000000000000000008000000", @ANYRES32, @ANYBLOB="090000800400000078000000681f134dcc27bde7ee1add891c2576e5caffd06f8445c570a0206ac129923af54fbe94e059fed9c4df3954dcee0c71ac3561e144f77f1ef05b9875c06d5cd66a92c5df278e20edd5f0074b4689fb27769f7b031eb65fcb571a914a06bc3477101486ceae30b18d4f1f"], 0x24}], 0x1}, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) listen(r1, 0x4) 08:33:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000003c0)=0xcb1b, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000018000300"/28], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffff8}}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x220c00, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r7, @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x40884) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000380)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000e975e74116df548b1ccd408e9cd9fd48168c3e50efd7900c72e7aee8f80c91c4653da2d7be0a5badfcb5f4f909", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x80) [ 244.122524] loop3: detected capacity change from 0 to 512 [ 244.165332] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 244.173980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.176703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8216 sclass=netlink_route_socket pid=7169 comm=syz-executor.0 [ 244.178472] loop6: detected capacity change from 0 to 512 [ 244.190005] loop5: detected capacity change from 0 to 512 [ 244.191089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.228365] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.232336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 08:33:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) [ 244.250734] EXT4-fs (loop5): unsupported inode size: 46611 [ 244.253042] EXT4-fs (loop5): blocksize: 4096 [ 244.283438] loop3: detected capacity change from 0 to 512 [ 244.294347] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz-executor.6: bad orphan inode 6684672 [ 244.301572] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 08:33:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105443, 0x0) write(r0, &(0x7f00000005c0)="937cc27240cff9bb70e5dea7f9f8acec928400ca7dde268ed988e9a3164d2ce7093ea6160677429b3afc21fe799f61655e854d7e97d2353d70af0ac41060030e17020159046d17e236fd8f1df35ddf33ac151a49d74ef9be878f1af73852cbb566d54f63f78a41902802bf94b46700059ad2e748abfff1a638f4c9f65891eb19459b970345340545", 0x88) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, 0xfffffffffffffffc) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f00000000c0)={0x3, 0xf80000000000000, 0xbf, &(0x7f00000002c0)=""/191}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdn=c', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',msize=0x0000000000001000,\x00']) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, 0xfffffffffffffffc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@debug}, {@access_user}, {@loose}, {@cache_none}, {@cache_loose}, {@debug={'debug', 0x3d, 0x6}}, {@version_9p2000}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/urandom\x00'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, '/dev/urandom\x00'}}, {@dont_appraise}, {@appraise_type}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000240)=""/70) [ 244.307991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.332970] 9pnet_fd: Insufficient options for proto=fd [ 244.346522] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.352757] loop5: detected capacity change from 0 to 512 [ 244.366061] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:33:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) [ 244.413684] EXT4-fs (loop5): unsupported inode size: 46611 [ 244.414624] EXT4-fs (loop5): blocksize: 4096 [ 244.446392] loop3: detected capacity change from 0 to 512 [ 244.449798] 9pnet_fd: Insufficient options for proto=fd 08:33:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x26e1, 0x0) syncfs(r1) sendfile(r0, r0, &(0x7f0000000040), 0x6) [ 244.506610] 9pnet_fd: Insufficient options for proto=fd [ 244.509518] audit: type=1400 audit(1733992396.334:8): avc: denied { open } for pid=7190 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 244.514320] audit: type=1400 audit(1733992396.334:9): avc: denied { kernel } for pid=7190 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 244.522654] 9pnet_fd: Insufficient options for proto=fd [ 244.598825] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 244.637984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.682311] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.770652] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:33:35 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x43) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000002680)=ANY=[@ANYBLOB="150000006bffff55"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80402, &(0x7f0000000240)={[{@noprefix}, {@subsystem='freezer'}, {@subsystem='io'}, {}], [{@subj_type={'subj_type', 0x3d, '9p\x00'}}]}) 08:33:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c20000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38323232353731363100"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040000c00000000000000d4f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1004}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d4f4655fd4f4655fd4f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4400}, {&(0x7f0000012700)="20000000c4caafbcc4caafbc00000000d4f4655f00"/32, 0x20, 0x4480}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4800}, {&(0x7f0000012900)="20000000000000000000000000000000d4f4655f00"/32, 0x20, 0x4880}, {&(0x7f0000012a00)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4c00}, {&(0x7f0000012b00)="20000000000000000000000000000000d4f4655f00"/32, 0x20, 0x4c80}, {&(0x7f0000012c00)="c041000000300000d4f4655fd4f4655fd4f4655f00000000000002008000000000000800000000000af301000400000000000000000000000300000020000000", 0x40, 0x6800}, {&(0x7f0000012d00)="20000000000000000000000000000000d4f4655f000000000000000000000000000002ea00"/64, 0x40, 0x6880}, {&(0x7f0000012e00)="ed4100003c000000d5f4655fd5f4655fd5f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000005aec127300000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x6c00}, {&(0x7f0000012f00)="ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000392c7b8c00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000", 0xa0, 0x7000}, {&(0x7f0000013000)="ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3832323235373136312f66696c65302f66696c653000000000000000000000000000000000000000000000d8199c5e00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000", 0xa0, 0x7400}, {&(0x7f0000013100)="ed8100000a000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ba95a2c00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x7800}, {&(0x7f0000013200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800010000000af301000400000000000000000000000300000060000000020000000100000062000000020000000180000062000000000000000000000000000000df980a7e00000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000", 0xc0, 0x7be0}, {&(0x7f0000013300)="ed81000064000000d5f4655fd5f4655fd5f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c852ae89800000000000000000000000000000000000000000000000020000000c4caafbcc4caafbcc4caafbcd5f4655fc4caafbc0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x8000}, {&(0x7f0000013400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x83c0}, {&(0x7f0000013500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e80f0000", 0x20, 0x20000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0xfffffffffffffd1d, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x31400}, {&(0x7f0000000040)="2719c0d901000000803a0900803a09000000000006000000ecff00dbdd5644f1eb22d37d1cc7bb6e1b74a87ada2f4173730ebbf8d2bbbacdceda90c7769b41cd0c4c55527b950151b6e1afbc78cff40988ac1e2be4c308eabf4e3878ea801694814782c111c51d4549c5c5a23fd13d55c4ba33992f194e6515699270a5312122ebce4695fb696f93d3701263f92b5bec7e2ed80b8ef936e264d923278b43e3e9677064f3588e7d6ca2e8996b2700"/184, 0xb8, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="05000000000000000000000000000000000000000000000000000a7165000000", 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000400"/96, 0x60, 0x41400}, {&(0x7f0000014500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x50000}], 0x0, &(0x7f0000014a00)) 08:33:35 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000003c0)=0xcb1b, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000018000300"/28], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xfffffff8}}, './file0\x00'}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x220c00, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r7, @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x40884) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x74, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x6}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000380)) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000100000018000000e975e74116df548b1ccd408e9cd9fd48168c3e50efd7900c72e7aee8f80c91c4653da2d7be0a5badfcb5f4f909", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x80) 08:33:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000004b000000080003002a5460996ba2fe5c7f1977bea13b11f15a98b3dae03c55a62083d25cb8d204967d3ac02c79db97b638b9f0e4f1e2f7686b357d2fbe8d229f0a", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800770007000000"], 0x30}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x29}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x14, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{0x0, 0x1, &(0x7f0000000380)='-', 0x0, 0x1}]}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0xe7, 0x4) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000040)="3ddb8f929d5aec688a22", 0xa, 0x0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002bbd7000ffdbdf25000000000600060002000000080008000300000008000700", @ANYRES32=r2, @ANYBLOB="08000400ac14141a08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="9f45e367205ca9cccc4bcdfc3e9828a1905ef24d23c326b19ea697a0b2b2879e61ca7c4d40b6e1a6dbaa1c17f4cb0c4b405a1ae4b2fbaf0cf7b98c492e7f317c25dde72d3a08132a1f358c03ca5eb34d7317a662ca56752cee1eea90b21f291ba7c09737c98ab06604c10a7bbb89daa34999e6234dd1221f7c0000dea6154872144610d62199f756"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r9, r10, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00010000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="e20033008011000001080211"], 0x100}}, 0x0) 08:33:35 executing program 1: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', &(0x7f0000000240)=""/16, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x3a, {0x2, 0x0, @empty}}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x81, 0x7f, 0x6, 0x1, 0x0, 0xffff, 0x100004, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x7f, 0x7ff}, 0xd040, 0xf0fe, 0x101, 0x5, 0x6, 0xffffffff, 0x2, 0x0, 0x4c728fa5, 0x0, 0x7}, 0xffffffffffffffff, 0x5, r1, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @remote}, {0x6, @multicast}, 0x0, {0x2, 0x4e20, @loopback}, 'macsec0\x00'}) 08:33:35 executing program 6: clone3(&(0x7f0000004c00)={0xc0002100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000140)={0x1, 0x1}) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0xfffffffffffffffc) pread64(r0, &(0x7f0000000000)=""/192, 0xc0, 0xfffffffffffffff8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)=0x7f) pidfd_open(0x0, 0x0) clone3(&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) 08:33:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000380)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dff4655fdbf4655f0100fff753ef9017311d6431732e9ed6a1103b64b9269591c65c8472dcfc8c56a537706413b6a565b1db1de51a508a9728e127c63be977a94d126fd4ac9c8cfb727498cfcfb8af22822d91f1a196554d420da512d4e12fa3228cfaa0524644fbafc70c09a346e4f23061062bd155f5c0c3fe88b5fc9186d54be4487339c9f522baab76315d4bc6fb5463948c7d15a402720093262d4cb683ae2e5ad9290c", 0xd2, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000000040)="02000000030000001402000f32000f39bf000300040000000000000000000f00408d90524d434f3fc5b6a36b4be78da609b93e6526b5fb51d1478b9c33a6af2b0e4b4a97de27bb31b1f04a6912c92496627b0fd2df3440c57dbb604d0bbdd45e98ee545a84dcc48bd29735bd5f6ab7a7226012ed00e35c1c3d849b26bf56e3de3d31b191d17be62ee205156d3f7c0d0d57840c7adc55c748028ae71aa5288c", 0x9f, 0x200}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007a38087d18bc98bcfab0d23306b3932dd5b2471eb16585a9f1dffbd18505f26d0f2c622a74cd4eb67cd5ae3f953e3dd450b3"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0xfffffffffffffffc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) pwrite64(r2, &(0x7f0000000480)="1b90ea88f310e0ebe79df1366260f21b0e4d0ed0bf5a333700e8466a96b2c4b9773fe312200dde7fd7bd962956112c450de2fbec0addab0db8517a16bca2a2992dbaf7fd120915ce9f92659cda80649e8f000d7fb4248ba2d42970cde52e0caa94349c99c5f7ed84fe3497cd97ae9a66bf4a0ea1a3725399ec4fca4c941880e0e9cbb20364c4881f60800290750ac124a54d0cf4082b21ed42a38825eb3d4af76ffb521632b73bc4e62e8da4b1a933fe0e2c", 0xb2, 0x7) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cc00041b484c2f6e477cc646e053d", @ANYRESHEX=r2, @ANYBLOB=',access=user,uname=ext4\x00,version=9p2000,access=any,cache=loose,cache=none,cache=loose,fowner=', @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB="2c66356e633d46494c4501004845434b2c353d6f53657569643e", @ANYRESDEC, @ANYBLOB=',seclabel,\x00']) 08:33:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0056deaef6317050f771cb030cccac0de37831c5cad20bbd379f6113b5be0ffe894ef4ed08019b9b5fcdfb5cad5e831522fbe2a9fc12fc40afd04fc3799af4ec6c83d0e3aa1787a7a99262d2cec88096ad90d382a54819737ce96208d17825b055c3d021c8eb5e5def6de984ab45a9896e8641c5fa09848d6166af93b04e1f0baa46a7a2440ff9e4412ce76d320ab0eb1a1afd21e0185e9cd7d69f13effb0febfe2fc34b2a82fe070fc60b907292b7e9944f051380a04e0000000000"]) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) [ 264.110992] loop5: detected capacity change from 0 to 512 [ 264.116199] EXT4-fs (loop5): unsupported inode size: 46611 [ 264.119012] EXT4-fs (loop5): blocksize: 4096 [ 264.183399] loop3: detected capacity change from 0 to 512 [ 264.199864] 9pnet_fd: Insufficient options for proto=fd [ 264.214709] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz-executor.3: bad orphan inode 6684672 [ 264.227213] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.239444] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 264.281377] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:33:36 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) 08:33:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000380)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dff4655fdbf4655f0100fff753ef9017311d6431732e9ed6a1103b64b9269591c65c8472dcfc8c56a537706413b6a565b1db1de51a508a9728e127c63be977a94d126fd4ac9c8cfb727498cfcfb8af22822d91f1a196554d420da512d4e12fa3228cfaa0524644fbafc70c09a346e4f23061062bd155f5c0c3fe88b5fc9186d54be4487339c9f522baab76315d4bc6fb5463948c7d15a402720093262d4cb683ae2e5ad9290c", 0xd2, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000000040)="02000000030000001402000f32000f39bf000300040000000000000000000f00408d90524d434f3fc5b6a36b4be78da609b93e6526b5fb51d1478b9c33a6af2b0e4b4a97de27bb31b1f04a6912c92496627b0fd2df3440c57dbb604d0bbdd45e98ee545a84dcc48bd29735bd5f6ab7a7226012ed00e35c1c3d849b26bf56e3de3d31b191d17be62ee205156d3f7c0d0d57840c7adc55c748028ae71aa5288c", 0x9f, 0x200}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007a38087d18bc98bcfab0d23306b3932dd5b2471eb16585a9f1dffbd18505f26d0f2c622a74cd4eb67cd5ae3f953e3dd450b3"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0xfffffffffffffffc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) pwrite64(r2, &(0x7f0000000480)="1b90ea88f310e0ebe79df1366260f21b0e4d0ed0bf5a333700e8466a96b2c4b9773fe312200dde7fd7bd962956112c450de2fbec0addab0db8517a16bca2a2992dbaf7fd120915ce9f92659cda80649e8f000d7fb4248ba2d42970cde52e0caa94349c99c5f7ed84fe3497cd97ae9a66bf4a0ea1a3725399ec4fca4c941880e0e9cbb20364c4881f60800290750ac124a54d0cf4082b21ed42a38825eb3d4af76ffb521632b73bc4e62e8da4b1a933fe0e2c", 0xb2, 0x7) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cc00041b484c2f6e477cc646e053d", @ANYRESHEX=r2, @ANYBLOB=',access=user,uname=ext4\x00,version=9p2000,access=any,cache=loose,cache=none,cache=loose,fowner=', @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB="2c66356e633d46494c4501004845434b2c353d6f53657569643e", @ANYRESDEC, @ANYBLOB=',seclabel,\x00']) 08:33:36 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) 08:33:36 executing program 0: madvise(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000180)='\xca[[A\x00', 0x5, 0x0) 08:33:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffeff}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x64c800, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1ca832a29b6e2951a91454a88645db33000000", @ANYRES16=r7, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fe, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0xc4}, 0x40000c0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r8, 0x40045201, 0xfffffffffffffffc) lseek(r8, 0x7, 0x0) 08:33:36 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/2, 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0xfffffffffffffffc) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x17b540000000) [ 264.639870] loop5: detected capacity change from 0 to 512 [ 264.660088] EXT4-fs (loop5): unsupported inode size: 46611 [ 264.661224] EXT4-fs (loop5): blocksize: 4096 [ 264.704633] 9pnet_fd: Insufficient options for proto=fd 08:33:36 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80000, 0x8e) openat(r0, &(0x7f0000000300)='./file0\x00', 0x80000, 0x30) 08:33:36 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000380)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dff4655fdbf4655f0100fff753ef9017311d6431732e9ed6a1103b64b9269591c65c8472dcfc8c56a537706413b6a565b1db1de51a508a9728e127c63be977a94d126fd4ac9c8cfb727498cfcfb8af22822d91f1a196554d420da512d4e12fa3228cfaa0524644fbafc70c09a346e4f23061062bd155f5c0c3fe88b5fc9186d54be4487339c9f522baab76315d4bc6fb5463948c7d15a402720093262d4cb683ae2e5ad9290c", 0xd2, 0x400}, {&(0x7f0000010100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f', 0xb, 0x4e0}, {&(0x7f0000000040)="02000000030000001402000f32000f39bf000300040000000000000000000f00408d90524d434f3fc5b6a36b4be78da609b93e6526b5fb51d1478b9c33a6af2b0e4b4a97de27bb31b1f04a6912c92496627b0fd2df3440c57dbb604d0bbdd45e98ee545a84dcc48bd29735bd5f6ab7a7226012ed00e35c1c3d849b26bf56e3de3d31b191d17be62ee205156d3f7c0d0d57840c7adc55c748028ae71aa5288c", 0x9f, 0x200}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="007a38087d18bc98bcfab0d23306b3932dd5b2471eb16585a9f1dffbd18505f26d0f2c622a74cd4eb67cd5ae3f953e3dd450b3"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, 0xfffffffffffffffc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) pwrite64(r2, &(0x7f0000000480)="1b90ea88f310e0ebe79df1366260f21b0e4d0ed0bf5a333700e8466a96b2c4b9773fe312200dde7fd7bd962956112c450de2fbec0addab0db8517a16bca2a2992dbaf7fd120915ce9f92659cda80649e8f000d7fb4248ba2d42970cde52e0caa94349c99c5f7ed84fe3497cd97ae9a66bf4a0ea1a3725399ec4fca4c941880e0e9cbb20364c4881f60800290750ac124a54d0cf4082b21ed42a38825eb3d4af76ffb521632b73bc4e62e8da4b1a933fe0e2c", 0xb2, 0x7) r4 = getuid() mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cc00041b484c2f6e477cc646e053d", @ANYRESHEX=r2, @ANYBLOB=',access=user,uname=ext4\x00,version=9p2000,access=any,cache=loose,cache=none,cache=loose,fowner=', @ANYRESDEC=r4, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB="2c66356e633d46494c4501004845434b2c353d6f53657569643e", @ANYRESDEC, @ANYBLOB=',seclabel,\x00']) 08:33:36 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14800, 0xf, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e0000000000001e00080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8804}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="01001c0000000100000005001d000000010046494c4530000000000000000000", 0x20, 0xa000}, {&(0x7f0000010e00)="01000000001c0001000005000000001d000146494c4530000000000000000000", 0x20, 0xb000}, {&(0x7f0000010f00)="01001e000000010000000a001f000000010000660069006c0065003000000000", 0x20, 0xc000}, {&(0x7f0000011000)="01000000001e000100000a000000001f000100660069006c0065003000000000", 0x20, 0xd000}, {&(0x7f0000011100)="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", 0x380, 0xe000}, {&(0x7f0000011500)="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", 0x200, 0xe800}, {&(0x7f0000011700)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400210000000000002164000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0022000000000000220a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c00650032002c00230000000000002328230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0xf000}, {&(0x7f0000011900)="22001f0000000000001f00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101012c0028000000000000281a0400000000041a7809140b2a3a08000000010000010a00660069006c00650030002c00290000000000002900000000000000007809140b2a3a08000000010000010a00660069006c006500310000000000", 0xa0, 0xf800}, {&(0x7f0000011a00)="4552ed010a548701525249505f313939314154484520524f434b20524944474520494e5445524348414e47452050524f544f434f4c2050524f564944455320535550504f525420464f5220504f5349582046494c452053595354454d2053454d414e54494353504c4541534520434f4e544143542044495343205055424c495348455220464f522053504543494649434154494f4e20534f555243452e2020534545205055424c4953484552204944454e54494649455220494e205052494d41525920564f4c554d452044455343524950544f5220464f5220434f4e5441435420494e464f524d4154494f4e2e00"/256, 0x100, 0x10000}, {&(0x7f0000011b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x10800}, {&(0x7f0000011c00)='syzkallers\x00'/32, 0x20, 0x11000}, {&(0x7f0000011d00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012200)) [ 265.046927] loop5: detected capacity change from 0 to 512 [ 265.050599] loop0: detected capacity change from 0 to 320 [ 265.068152] EXT4-fs (loop5): unsupported inode size: 46611 [ 265.068789] EXT4-fs (loop5): blocksize: 4096 [ 265.098254] 9pnet_fd: Insufficient options for proto=fd [ 265.182361] ------------[ cut here ]------------ [ 265.183178] WARNING: CPU: 0 PID: 7219 at net/ipv4/ipmr.c:440 ipmr_rules_exit+0x13a/0x1c0 [ 265.184200] Modules linked in: [ 265.184585] CPU: 0 UID: 0 PID: 7219 Comm: syz-executor.6 Not tainted 6.13.0-rc2-next-20241211 #1 [ 265.185539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 265.189926] RIP: 0010:ipmr_rules_exit+0x13a/0x1c0 [ 265.190569] Code: ff df 48 c1 ea 03 80 3c 02 00 75 7d 48 c7 83 00 08 00 00 00 00 00 00 5b 5d 41 5c 41 5d 41 5e e9 ac 70 a3 00 e8 47 bd 6d fd 90 <0f> 0b 90 eb 93 e8 3c bd 6d fd 0f b6 2d c0 db 38 02 31 ff 89 ee e8 [ 265.192373] RSP: 0018:ffff8880411578b8 EFLAGS: 00010216 [ 265.192938] RAX: 000000000002682e RBX: ffff88803f63c500 RCX: ffffc90002df2000 [ 265.193734] RDX: 0000000000040000 RSI: ffffffff84042639 RDI: 0000000000000005 [ 265.194534] RBP: ffff888017134000 R08: 0000000000000000 R09: ffffed1007ec78c9 [ 265.195312] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 265.196056] R13: ffff88803f63cd00 R14: ffff88803f63c500 R15: fffffbfff0c50fb0 [ 265.196869] FS: 00007f15116ae700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 265.197837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.198522] CR2: 0000000020bb5000 CR3: 000000000ea9a000 CR4: 0000000000350ef0 [ 265.199284] Call Trace: [ 265.199571] [ 265.199827] ? __warn+0xea/0x380 [ 265.200252] ? ipmr_rules_exit+0x13a/0x1c0 [ 265.200735] ? report_bug+0x2f5/0x3f0 [ 265.201227] ? ipmr_rules_exit+0x13a/0x1c0 [ 265.201696] ? ipmr_rules_exit+0x13b/0x1c0 [ 265.202234] ? handle_bug+0xe5/0x180 [ 265.202708] ? exc_invalid_op+0x35/0x80 [ 265.203243] ? asm_exc_invalid_op+0x1a/0x20 [ 265.203743] ? ipmr_rules_exit+0x139/0x1c0 [ 265.204271] ? ipmr_rules_exit+0x13a/0x1c0 [ 265.204749] ? ipmr_rules_exit+0x139/0x1c0 [ 265.205344] ipmr_net_exit_batch+0x53/0xa0 [ 265.205844] ? __pfx_ipmr_net_exit_batch+0x10/0x10 [ 265.206427] ? __pfx_ipmr_net_exit+0x10/0x10 [ 265.206887] ops_exit_list+0x12b/0x180 [ 265.207355] setup_net+0x492/0x7a0 [ 265.207777] ? __pfx_setup_net+0x10/0x10 [ 265.208276] ? __pfx_down_read_killable+0x10/0x10 [ 265.208805] ? __raw_spin_lock_init+0x3a/0x110 [ 265.209378] ? srso_return_thunk+0x5/0x5f [ 265.209867] ? debug_mutex_init+0x37/0x70 [ 265.210399] copy_net_ns+0x2e3/0x700 [ 265.210846] create_new_namespaces+0x3f6/0xaf0 [ 265.211426] copy_namespaces+0x45c/0x580 [ 265.211899] copy_process+0x26c0/0x70e0 [ 265.212433] ? srso_return_thunk+0x5/0x5f [ 265.212929] ? lock_release+0x20f/0x6f0 [ 265.213461] ? __pfx_copy_process+0x10/0x10 [ 265.213954] ? srso_return_thunk+0x5/0x5f [ 265.214481] ? _copy_from_user+0x5b/0xd0 [ 265.214945] kernel_clone+0xeb/0x850 [ 265.215447] ? __pfx_kernel_clone+0x10/0x10 [ 265.215983] __do_sys_clone3+0x1d9/0x260 [ 265.216484] ? __pfx___do_sys_clone3+0x10/0x10 [ 265.216984] ? do_futex+0x136/0x370 [ 265.217477] ? srso_return_thunk+0x5/0x5f [ 265.217937] ? srso_return_thunk+0x5/0x5f [ 265.218430] ? __x64_sys_futex+0x1d3/0x4d0 [ 265.218906] ? srso_return_thunk+0x5/0x5f [ 265.219387] ? xfd_validate_state+0x51/0x180 [ 265.219901] ? srso_return_thunk+0x5/0x5f [ 265.220389] ? trace_x86_fpu_regs_activated+0x130/0x190 [ 265.221003] do_syscall_64+0xbf/0x1d0 [ 265.221529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.222085] RIP: 0033:0x7f1514138b19 [ 265.222526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.224442] RSP: 002b:00007f15116ae188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 265.225275] RAX: ffffffffffffffda RBX: 00007f151424bf60 RCX: 00007f1514138b19 [ 265.226021] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 [ 265.226795] RBP: 00007f1514192f6d R08: 0000000000000000 R09: 0000000000000000 [ 265.227561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.228339] R13: 00007ffebb2d628f R14: 00007f15116ae300 R15: 0000000000022000 [ 265.229143] [ 265.229439] irq event stamp: 21415 [ 265.229823] hardirqs last enabled at (21425): [] __up_console_sem+0x78/0x80 [ 265.230803] hardirqs last disabled at (21436): [] __up_console_sem+0x5d/0x80 [ 265.231738] softirqs last enabled at (21136): [] handle_softirqs+0x50c/0x770 [ 265.232726] softirqs last disabled at (21131): [] __irq_exit_rcu+0xc4/0x100 [ 265.234578] ---[ end trace 0000000000000000 ]--- 08:33:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x101000, 0x137) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r1, r0, 0x0, 0xfffffdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220) sendfile(r3, r2, 0x0, 0xfffffdef) 08:33:37 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000200), 0x3, 0x10a00) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x8, 0x4, 0x3f, 0x0, 0x0, 0x20908, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000040)}, 0xa00, 0x8, 0xffff, 0x5, 0x0, 0x8ce7, 0x1, 0x0, 0x4, 0x0, 0x401}, 0xffffffffffffffff, 0x3, r1, 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000100)="968948485ad26aca87e416513711d019d39580a3e96ce1f03ad857c17c502cc18fd118d8b3d4d01f58271832551611ce0c5d1cbe97adcf0288df53bf5c6edb880ec42fabc231ba5785dba30e7c920fe40d3ae12cb36a282115d70d61bfd974dc7ca1a6831e6cab398d1e51638d59fe3201923e664460bd2b41", 0x79) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300)) perf_event_open(0x0, 0xffffffffffffffff, 0xd, r0, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000540)={0x5, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x6}}}, 0x108) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2d, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') r7 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) mknodat(r8, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) perf_event_open(0x0, 0x0, 0x0, r6, 0x8) 08:33:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x81}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffeff}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r1 = epoll_create(0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x64c800, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1ca832a29b6e2951a91454a88645db33000000", @ANYRES16=r7, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x88, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1fe, 0x24}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0xc4}, 0x40000c0) ioctl$TCXONC(r3, 0x540a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r8, 0x40045201, 0xfffffffffffffffc) lseek(r8, 0x7, 0x0) [ 265.521391] audit: type=1400 audit(1733992417.351:10): avc: denied { write } for pid=7259 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 265.525864] hrtimer: interrupt took 29496 ns [ 268.082395] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 268.084435] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 268.086287] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 268.091429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 268.093497] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 268.096355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 270.116254] Bluetooth: hci7: command tx timeout [ 272.163809] Bluetooth: hci7: command tx timeout [ 274.211294] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 08:33:37 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82840a25 RDI=ffffffff8867b900 RBP=ffffffff8867b8c0 RSP=ffff888041157200 R8 =0000000000000000 R9 =ffffed1001756046 R10=0000000000000061 R11=0000000000000000 R12=0000000000000061 R13=ffffffff8867b8c0 R14=0000000000000010 R15=ffffffff82840a10 RIP=ffffffff82840a7d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f15116ae700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020bb5000 CR3=000000000ea9a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000adce151144 RBX=0000000000000000 RCX=00000000000006e0 RDX=00000000000000ad RSI=ffff88806cf28300 RDI=000000000000649e RBP=ffff88806cf28300 RSP=ffff88806cf09ed0 R8 =0000000000000001 R9 =ffff88803ee2dd80 R10=0000000000012009 R11=0000000000000000 R12=000000000000649e R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf2ce40 RIP=ffffffff8131f535 RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556852b400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556853cc98 CR3=000000003e6c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000000b077189b09f50c2 XMM02=00000000000000003d5accffb07f2a9e XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000