Warning: Permanently added '[localhost]:23851' (ECDSA) to the list of known hosts. 2026/01/14 09:50:32 fuzzer started 2026/01/14 09:50:33 dialing manager at localhost:46753 syzkaller login: [ 43.571193] cgroup: Unknown subsys name 'net' [ 43.671615] cgroup: Unknown subsys name 'cpuset' [ 43.687329] cgroup: Unknown subsys name 'rlimit' 2026/01/14 09:50:43 syscalls: 2214 2026/01/14 09:50:43 code coverage: enabled 2026/01/14 09:50:43 comparison tracing: enabled 2026/01/14 09:50:43 extra coverage: enabled 2026/01/14 09:50:43 setuid sandbox: enabled 2026/01/14 09:50:43 namespace sandbox: enabled 2026/01/14 09:50:43 Android sandbox: enabled 2026/01/14 09:50:43 fault injection: enabled 2026/01/14 09:50:43 leak checking: enabled 2026/01/14 09:50:43 net packet injection: enabled 2026/01/14 09:50:43 net device setup: enabled 2026/01/14 09:50:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 09:50:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 09:50:43 USB emulation: enabled 2026/01/14 09:50:43 hci packet injection: enabled 2026/01/14 09:50:43 wifi device emulation: enabled 2026/01/14 09:50:43 802.15.4 emulation: enabled 2026/01/14 09:50:43 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 09:50:43 fetching corpus: 50, signal 30406/33947 (executing program) 2026/01/14 09:50:43 fetching corpus: 100, signal 41910/46934 (executing program) 2026/01/14 09:50:43 fetching corpus: 150, signal 56368/62580 (executing program) 2026/01/14 09:50:43 fetching corpus: 200, signal 60283/67854 (executing program) 2026/01/14 09:50:44 fetching corpus: 250, signal 66642/75364 (executing program) 2026/01/14 09:50:44 fetching corpus: 300, signal 72038/81886 (executing program) 2026/01/14 09:50:44 fetching corpus: 350, signal 76123/87086 (executing program) 2026/01/14 09:50:44 fetching corpus: 400, signal 78853/90972 (executing program) 2026/01/14 09:50:44 fetching corpus: 450, signal 82490/95620 (executing program) 2026/01/14 09:50:44 fetching corpus: 500, signal 86542/100576 (executing program) 2026/01/14 09:50:44 fetching corpus: 550, signal 88609/103692 (executing program) 2026/01/14 09:50:44 fetching corpus: 600, signal 92316/108286 (executing program) 2026/01/14 09:50:44 fetching corpus: 650, signal 95380/112230 (executing program) 2026/01/14 09:50:44 fetching corpus: 700, signal 97259/115062 (executing program) 2026/01/14 09:50:45 fetching corpus: 750, signal 98969/117761 (executing program) 2026/01/14 09:50:45 fetching corpus: 800, signal 101178/120820 (executing program) 2026/01/14 09:50:45 fetching corpus: 850, signal 103268/123752 (executing program) 2026/01/14 09:50:45 fetching corpus: 900, signal 105699/126941 (executing program) 2026/01/14 09:50:45 fetching corpus: 950, signal 107584/129622 (executing program) 2026/01/14 09:50:45 fetching corpus: 1000, signal 108738/131676 (executing program) 2026/01/14 09:50:45 fetching corpus: 1050, signal 110464/134151 (executing program) 2026/01/14 09:50:45 fetching corpus: 1100, signal 113505/137718 (executing program) 2026/01/14 09:50:45 fetching corpus: 1150, signal 115297/140231 (executing program) 2026/01/14 09:50:46 fetching corpus: 1200, signal 116959/142611 (executing program) 2026/01/14 09:50:46 fetching corpus: 1250, signal 118030/144444 (executing program) 2026/01/14 09:50:46 fetching corpus: 1300, signal 119753/146777 (executing program) 2026/01/14 09:50:46 fetching corpus: 1350, signal 121423/149031 (executing program) 2026/01/14 09:50:46 fetching corpus: 1400, signal 122961/151169 (executing program) 2026/01/14 09:50:46 fetching corpus: 1450, signal 124055/152936 (executing program) 2026/01/14 09:50:46 fetching corpus: 1500, signal 125892/155322 (executing program) 2026/01/14 09:50:46 fetching corpus: 1550, signal 127390/157372 (executing program) 2026/01/14 09:50:47 fetching corpus: 1600, signal 128444/159084 (executing program) 2026/01/14 09:50:47 fetching corpus: 1650, signal 129534/160779 (executing program) 2026/01/14 09:50:47 fetching corpus: 1700, signal 130860/162671 (executing program) 2026/01/14 09:50:47 fetching corpus: 1750, signal 131672/164147 (executing program) 2026/01/14 09:50:47 fetching corpus: 1800, signal 132685/165771 (executing program) 2026/01/14 09:50:47 fetching corpus: 1850, signal 133651/167327 (executing program) 2026/01/14 09:50:47 fetching corpus: 1900, signal 134556/168859 (executing program) 2026/01/14 09:50:47 fetching corpus: 1950, signal 135833/170572 (executing program) 2026/01/14 09:50:47 fetching corpus: 2000, signal 136380/171816 (executing program) 2026/01/14 09:50:48 fetching corpus: 2050, signal 137828/173651 (executing program) 2026/01/14 09:50:48 fetching corpus: 2100, signal 138973/175172 (executing program) 2026/01/14 09:50:48 fetching corpus: 2150, signal 139903/176647 (executing program) 2026/01/14 09:50:48 fetching corpus: 2200, signal 140912/178135 (executing program) 2026/01/14 09:50:48 fetching corpus: 2250, signal 142160/179731 (executing program) 2026/01/14 09:50:48 fetching corpus: 2300, signal 142865/180980 (executing program) 2026/01/14 09:50:48 fetching corpus: 2350, signal 143850/182399 (executing program) 2026/01/14 09:50:48 fetching corpus: 2400, signal 144528/183595 (executing program) 2026/01/14 09:50:49 fetching corpus: 2450, signal 145358/184908 (executing program) 2026/01/14 09:50:49 fetching corpus: 2500, signal 146406/186315 (executing program) 2026/01/14 09:50:49 fetching corpus: 2550, signal 147602/187796 (executing program) 2026/01/14 09:50:49 fetching corpus: 2600, signal 148753/189238 (executing program) 2026/01/14 09:50:49 fetching corpus: 2650, signal 149566/190501 (executing program) 2026/01/14 09:50:49 fetching corpus: 2700, signal 150309/191686 (executing program) 2026/01/14 09:50:49 fetching corpus: 2750, signal 151496/193072 (executing program) 2026/01/14 09:50:49 fetching corpus: 2800, signal 152252/194202 (executing program) 2026/01/14 09:50:50 fetching corpus: 2850, signal 153150/195391 (executing program) 2026/01/14 09:50:50 fetching corpus: 2900, signal 154467/196824 (executing program) 2026/01/14 09:50:50 fetching corpus: 2950, signal 155148/197909 (executing program) 2026/01/14 09:50:50 fetching corpus: 3000, signal 155686/198862 (executing program) 2026/01/14 09:50:50 fetching corpus: 3050, signal 156514/199994 (executing program) 2026/01/14 09:50:50 fetching corpus: 3100, signal 157212/201061 (executing program) 2026/01/14 09:50:50 fetching corpus: 3150, signal 157924/202121 (executing program) 2026/01/14 09:50:50 fetching corpus: 3200, signal 158805/203224 (executing program) 2026/01/14 09:50:50 fetching corpus: 3250, signal 159407/204183 (executing program) 2026/01/14 09:50:51 fetching corpus: 3300, signal 161019/205574 (executing program) 2026/01/14 09:50:51 fetching corpus: 3350, signal 161543/206452 (executing program) 2026/01/14 09:50:51 fetching corpus: 3400, signal 162447/207507 (executing program) 2026/01/14 09:50:51 fetching corpus: 3450, signal 163253/208497 (executing program) 2026/01/14 09:50:51 fetching corpus: 3500, signal 164040/209473 (executing program) 2026/01/14 09:50:51 fetching corpus: 3550, signal 164823/210499 (executing program) 2026/01/14 09:50:51 fetching corpus: 3600, signal 165682/211421 (executing program) 2026/01/14 09:50:51 fetching corpus: 3650, signal 166895/212540 (executing program) 2026/01/14 09:50:52 fetching corpus: 3700, signal 167513/213351 (executing program) 2026/01/14 09:50:52 fetching corpus: 3750, signal 168221/214227 (executing program) 2026/01/14 09:50:52 fetching corpus: 3800, signal 168623/215001 (executing program) 2026/01/14 09:50:52 fetching corpus: 3850, signal 169288/215839 (executing program) 2026/01/14 09:50:52 fetching corpus: 3900, signal 170062/216723 (executing program) 2026/01/14 09:50:52 fetching corpus: 3950, signal 170605/217513 (executing program) 2026/01/14 09:50:52 fetching corpus: 4000, signal 171117/218301 (executing program) 2026/01/14 09:50:52 fetching corpus: 4050, signal 171972/219204 (executing program) 2026/01/14 09:50:53 fetching corpus: 4100, signal 172687/220004 (executing program) 2026/01/14 09:50:53 fetching corpus: 4150, signal 173216/220759 (executing program) 2026/01/14 09:50:53 fetching corpus: 4200, signal 173831/221514 (executing program) 2026/01/14 09:50:53 fetching corpus: 4250, signal 174397/222224 (executing program) 2026/01/14 09:50:53 fetching corpus: 4300, signal 175024/222930 (executing program) 2026/01/14 09:50:53 fetching corpus: 4350, signal 175467/223590 (executing program) 2026/01/14 09:50:53 fetching corpus: 4400, signal 176136/224279 (executing program) 2026/01/14 09:50:53 fetching corpus: 4450, signal 176867/224989 (executing program) 2026/01/14 09:50:53 fetching corpus: 4500, signal 177486/225624 (executing program) 2026/01/14 09:50:54 fetching corpus: 4550, signal 177924/226288 (executing program) 2026/01/14 09:50:54 fetching corpus: 4600, signal 178244/226854 (executing program) 2026/01/14 09:50:54 fetching corpus: 4650, signal 178697/227450 (executing program) 2026/01/14 09:50:54 fetching corpus: 4700, signal 179347/228138 (executing program) 2026/01/14 09:50:54 fetching corpus: 4750, signal 179920/228728 (executing program) 2026/01/14 09:50:54 fetching corpus: 4800, signal 180276/229317 (executing program) 2026/01/14 09:50:54 fetching corpus: 4850, signal 180608/229896 (executing program) 2026/01/14 09:50:54 fetching corpus: 4900, signal 181046/230502 (executing program) 2026/01/14 09:50:54 fetching corpus: 4950, signal 181455/231043 (executing program) 2026/01/14 09:50:55 fetching corpus: 5000, signal 181811/231610 (executing program) 2026/01/14 09:50:55 fetching corpus: 5050, signal 182480/232225 (executing program) 2026/01/14 09:50:55 fetching corpus: 5100, signal 182951/232775 (executing program) 2026/01/14 09:50:55 fetching corpus: 5150, signal 183426/233318 (executing program) 2026/01/14 09:50:55 fetching corpus: 5200, signal 183887/233880 (executing program) 2026/01/14 09:50:55 fetching corpus: 5250, signal 184375/234432 (executing program) 2026/01/14 09:50:55 fetching corpus: 5300, signal 185019/235001 (executing program) 2026/01/14 09:50:56 fetching corpus: 5350, signal 185440/235521 (executing program) 2026/01/14 09:50:56 fetching corpus: 5400, signal 185964/236073 (executing program) 2026/01/14 09:50:56 fetching corpus: 5450, signal 186422/236579 (executing program) 2026/01/14 09:50:56 fetching corpus: 5500, signal 186821/237047 (executing program) 2026/01/14 09:50:56 fetching corpus: 5550, signal 187205/237520 (executing program) 2026/01/14 09:50:56 fetching corpus: 5600, signal 187619/237985 (executing program) 2026/01/14 09:50:56 fetching corpus: 5650, signal 188102/238448 (executing program) 2026/01/14 09:50:56 fetching corpus: 5700, signal 188534/238889 (executing program) 2026/01/14 09:50:56 fetching corpus: 5750, signal 189151/239363 (executing program) 2026/01/14 09:50:56 fetching corpus: 5800, signal 189484/239771 (executing program) 2026/01/14 09:50:57 fetching corpus: 5850, signal 189938/240191 (executing program) 2026/01/14 09:50:57 fetching corpus: 5900, signal 190410/240629 (executing program) 2026/01/14 09:50:57 fetching corpus: 5950, signal 190726/241065 (executing program) 2026/01/14 09:50:57 fetching corpus: 6000, signal 191176/241221 (executing program) 2026/01/14 09:50:57 fetching corpus: 6050, signal 191556/241221 (executing program) 2026/01/14 09:50:57 fetching corpus: 6100, signal 192029/241221 (executing program) 2026/01/14 09:50:57 fetching corpus: 6150, signal 192550/241223 (executing program) 2026/01/14 09:50:57 fetching corpus: 6200, signal 192920/241225 (executing program) 2026/01/14 09:50:57 fetching corpus: 6250, signal 193396/241231 (executing program) 2026/01/14 09:50:58 fetching corpus: 6300, signal 193900/241231 (executing program) 2026/01/14 09:50:58 fetching corpus: 6350, signal 194590/241233 (executing program) 2026/01/14 09:50:58 fetching corpus: 6400, signal 194991/241236 (executing program) 2026/01/14 09:50:58 fetching corpus: 6450, signal 195301/241236 (executing program) 2026/01/14 09:50:58 fetching corpus: 6500, signal 195708/241238 (executing program) 2026/01/14 09:50:58 fetching corpus: 6550, signal 195990/241240 (executing program) 2026/01/14 09:50:58 fetching corpus: 6600, signal 196579/241243 (executing program) 2026/01/14 09:50:58 fetching corpus: 6650, signal 197056/241243 (executing program) 2026/01/14 09:50:59 fetching corpus: 6700, signal 197437/241246 (executing program) 2026/01/14 09:50:59 fetching corpus: 6750, signal 197808/241248 (executing program) 2026/01/14 09:50:59 fetching corpus: 6800, signal 198183/241248 (executing program) 2026/01/14 09:50:59 fetching corpus: 6850, signal 198493/241248 (executing program) 2026/01/14 09:50:59 fetching corpus: 6900, signal 199003/241248 (executing program) 2026/01/14 09:50:59 fetching corpus: 6950, signal 199373/241248 (executing program) 2026/01/14 09:50:59 fetching corpus: 7000, signal 199805/241250 (executing program) 2026/01/14 09:50:59 fetching corpus: 7050, signal 200030/241259 (executing program) 2026/01/14 09:50:59 fetching corpus: 7100, signal 200459/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7150, signal 201007/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7200, signal 201300/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7250, signal 201702/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7300, signal 202115/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7350, signal 202413/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7400, signal 202638/241259 (executing program) 2026/01/14 09:51:00 fetching corpus: 7450, signal 203091/241266 (executing program) 2026/01/14 09:51:00 fetching corpus: 7500, signal 203455/241266 (executing program) 2026/01/14 09:51:00 fetching corpus: 7550, signal 203726/241266 (executing program) 2026/01/14 09:51:00 fetching corpus: 7600, signal 204095/241266 (executing program) 2026/01/14 09:51:01 fetching corpus: 7650, signal 204420/241267 (executing program) 2026/01/14 09:51:01 fetching corpus: 7700, signal 204774/241270 (executing program) 2026/01/14 09:51:01 fetching corpus: 7750, signal 205075/241270 (executing program) 2026/01/14 09:51:01 fetching corpus: 7800, signal 205480/241270 (executing program) 2026/01/14 09:51:01 fetching corpus: 7850, signal 205746/241270 (executing program) 2026/01/14 09:51:01 fetching corpus: 7900, signal 206042/241270 (executing program) 2026/01/14 09:51:01 fetching corpus: 7950, signal 206460/241273 (executing program) 2026/01/14 09:51:01 fetching corpus: 8000, signal 206919/241273 (executing program) 2026/01/14 09:51:01 fetching corpus: 8050, signal 207243/241279 (executing program) 2026/01/14 09:51:02 fetching corpus: 8100, signal 207552/241279 (executing program) 2026/01/14 09:51:02 fetching corpus: 8150, signal 208148/241279 (executing program) 2026/01/14 09:51:02 fetching corpus: 8200, signal 208422/241280 (executing program) 2026/01/14 09:51:02 fetching corpus: 8250, signal 208710/241280 (executing program) 2026/01/14 09:51:02 fetching corpus: 8300, signal 209016/241280 (executing program) 2026/01/14 09:51:02 fetching corpus: 8350, signal 209342/241280 (executing program) 2026/01/14 09:51:02 fetching corpus: 8400, signal 209517/241284 (executing program) 2026/01/14 09:51:02 fetching corpus: 8450, signal 209807/241288 (executing program) 2026/01/14 09:51:02 fetching corpus: 8500, signal 210141/241288 (executing program) 2026/01/14 09:51:03 fetching corpus: 8550, signal 210488/241288 (executing program) 2026/01/14 09:51:03 fetching corpus: 8600, signal 210727/241288 (executing program) 2026/01/14 09:51:03 fetching corpus: 8650, signal 211058/241290 (executing program) 2026/01/14 09:51:03 fetching corpus: 8700, signal 211592/241290 (executing program) 2026/01/14 09:51:03 fetching corpus: 8750, signal 211931/241293 (executing program) 2026/01/14 09:51:03 fetching corpus: 8800, signal 212264/241294 (executing program) 2026/01/14 09:51:03 fetching corpus: 8850, signal 212509/241295 (executing program) 2026/01/14 09:51:03 fetching corpus: 8900, signal 212764/241301 (executing program) 2026/01/14 09:51:03 fetching corpus: 8950, signal 213045/241301 (executing program) 2026/01/14 09:51:04 fetching corpus: 9000, signal 213332/241301 (executing program) 2026/01/14 09:51:04 fetching corpus: 9050, signal 213702/241301 (executing program) 2026/01/14 09:51:04 fetching corpus: 9100, signal 214006/241301 (executing program) 2026/01/14 09:51:04 fetching corpus: 9150, signal 214381/241307 (executing program) 2026/01/14 09:51:04 fetching corpus: 9200, signal 214664/241307 (executing program) 2026/01/14 09:51:04 fetching corpus: 9250, signal 214955/241310 (executing program) 2026/01/14 09:51:04 fetching corpus: 9300, signal 215199/241311 (executing program) 2026/01/14 09:51:04 fetching corpus: 9350, signal 215586/241311 (executing program) 2026/01/14 09:51:04 fetching corpus: 9400, signal 215852/241313 (executing program) 2026/01/14 09:51:05 fetching corpus: 9450, signal 216038/241321 (executing program) 2026/01/14 09:51:05 fetching corpus: 9500, signal 216335/241321 (executing program) 2026/01/14 09:51:05 fetching corpus: 9550, signal 216603/241322 (executing program) 2026/01/14 09:51:05 fetching corpus: 9600, signal 216827/241327 (executing program) 2026/01/14 09:51:05 fetching corpus: 9650, signal 217068/241327 (executing program) 2026/01/14 09:51:05 fetching corpus: 9700, signal 217393/241327 (executing program) 2026/01/14 09:51:05 fetching corpus: 9750, signal 217654/241327 (executing program) 2026/01/14 09:51:05 fetching corpus: 9800, signal 217914/241328 (executing program) 2026/01/14 09:51:05 fetching corpus: 9850, signal 218207/241328 (executing program) 2026/01/14 09:51:06 fetching corpus: 9900, signal 218573/241328 (executing program) 2026/01/14 09:51:06 fetching corpus: 9950, signal 218793/241328 (executing program) 2026/01/14 09:51:06 fetching corpus: 10000, signal 219076/241328 (executing program) 2026/01/14 09:51:06 fetching corpus: 10050, signal 219262/241330 (executing program) 2026/01/14 09:51:06 fetching corpus: 10100, signal 219507/241330 (executing program) 2026/01/14 09:51:06 fetching corpus: 10150, signal 219808/241330 (executing program) 2026/01/14 09:51:06 fetching corpus: 10200, signal 220048/241330 (executing program) 2026/01/14 09:51:07 fetching corpus: 10250, signal 220264/241330 (executing program) 2026/01/14 09:51:07 fetching corpus: 10300, signal 220553/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10350, signal 220848/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10400, signal 221250/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10450, signal 221444/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10500, signal 221670/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10550, signal 221912/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10600, signal 222125/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10650, signal 222438/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10700, signal 222696/241336 (executing program) 2026/01/14 09:51:07 fetching corpus: 10750, signal 222932/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 10800, signal 223318/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 10850, signal 223552/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 10900, signal 223799/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 10950, signal 223978/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 11000, signal 224241/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 11050, signal 224468/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 11100, signal 224737/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 11150, signal 224917/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 11200, signal 225151/241336 (executing program) 2026/01/14 09:51:08 fetching corpus: 11250, signal 225417/241336 (executing program) 2026/01/14 09:51:09 fetching corpus: 11300, signal 225559/241336 (executing program) 2026/01/14 09:51:09 fetching corpus: 11350, signal 225748/241336 (executing program) 2026/01/14 09:51:09 fetching corpus: 11400, signal 225999/241339 (executing program) 2026/01/14 09:51:09 fetching corpus: 11450, signal 226168/241339 (executing program) 2026/01/14 09:51:09 fetching corpus: 11500, signal 226365/241339 (executing program) 2026/01/14 09:51:09 fetching corpus: 11550, signal 226668/241343 (executing program) 2026/01/14 09:51:09 fetching corpus: 11600, signal 226925/241343 (executing program) 2026/01/14 09:51:09 fetching corpus: 11650, signal 227166/241343 (executing program) 2026/01/14 09:51:09 fetching corpus: 11700, signal 227396/241343 (executing program) 2026/01/14 09:51:10 fetching corpus: 11750, signal 227608/241351 (executing program) 2026/01/14 09:51:10 fetching corpus: 11800, signal 227762/241351 (executing program) 2026/01/14 09:51:10 fetching corpus: 11850, signal 227983/241352 (executing program) 2026/01/14 09:51:10 fetching corpus: 11900, signal 228194/241352 (executing program) 2026/01/14 09:51:10 fetching corpus: 11950, signal 228400/241352 (executing program) 2026/01/14 09:51:10 fetching corpus: 12000, signal 228675/241352 (executing program) 2026/01/14 09:51:10 fetching corpus: 12050, signal 228848/241352 (executing program) 2026/01/14 09:51:10 fetching corpus: 12100, signal 229056/241352 (executing program) 2026/01/14 09:51:10 fetching corpus: 12150, signal 229325/241352 (executing program) 2026/01/14 09:51:11 fetching corpus: 12200, signal 229538/241352 (executing program) 2026/01/14 09:51:11 fetching corpus: 12250, signal 229799/241354 (executing program) 2026/01/14 09:51:11 fetching corpus: 12300, signal 230069/241354 (executing program) 2026/01/14 09:51:11 fetching corpus: 12350, signal 230339/241355 (executing program) 2026/01/14 09:51:11 fetching corpus: 12400, signal 230517/241355 (executing program) 2026/01/14 09:51:11 fetching corpus: 12450, signal 230754/241355 (executing program) 2026/01/14 09:51:11 fetching corpus: 12500, signal 230935/241355 (executing program) 2026/01/14 09:51:11 fetching corpus: 12550, signal 231214/241355 (executing program) 2026/01/14 09:51:11 fetching corpus: 12600, signal 231398/241355 (executing program) 2026/01/14 09:51:11 fetching corpus: 12650, signal 231634/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 12700, signal 231920/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 12750, signal 232220/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 12800, signal 232454/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 12850, signal 232720/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 12900, signal 232925/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 12950, signal 233171/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 13000, signal 233483/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 13050, signal 233758/241355 (executing program) 2026/01/14 09:51:12 fetching corpus: 13100, signal 234075/241355 (executing program) 2026/01/14 09:51:13 fetching corpus: 13150, signal 234311/241355 (executing program) 2026/01/14 09:51:13 fetching corpus: 13200, signal 234514/241355 (executing program) 2026/01/14 09:51:13 fetching corpus: 13250, signal 234784/241357 (executing program) 2026/01/14 09:51:13 fetching corpus: 13300, signal 234975/241357 (executing program) 2026/01/14 09:51:13 fetching corpus: 13350, signal 235156/241357 (executing program) 2026/01/14 09:51:13 fetching corpus: 13400, signal 235351/241357 (executing program) 2026/01/14 09:51:13 fetching corpus: 13450, signal 235492/241357 (executing program) 2026/01/14 09:51:13 fetching corpus: 13500, signal 235712/241357 (executing program) 2026/01/14 09:51:14 fetching corpus: 13550, signal 235970/241357 (executing program) 2026/01/14 09:51:14 fetching corpus: 13600, signal 236204/241357 (executing program) 2026/01/14 09:51:14 fetching corpus: 13650, signal 236421/241357 (executing program) 2026/01/14 09:51:14 fetching corpus: 13700, signal 236626/241357 (executing program) 2026/01/14 09:51:14 fetching corpus: 13750, signal 236815/241357 (executing program) 2026/01/14 09:51:14 fetching corpus: 13800, signal 237044/241358 (executing program) 2026/01/14 09:51:14 fetching corpus: 13850, signal 237218/241358 (executing program) 2026/01/14 09:51:14 fetching corpus: 13900, signal 237425/241368 (executing program) 2026/01/14 09:51:14 fetching corpus: 13950, signal 237558/241368 (executing program) 2026/01/14 09:51:14 fetching corpus: 14000, signal 237780/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14050, signal 237961/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14100, signal 238148/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14150, signal 238343/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14200, signal 238496/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14250, signal 238660/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14300, signal 238824/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14350, signal 239020/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14400, signal 239227/241368 (executing program) 2026/01/14 09:51:15 fetching corpus: 14450, signal 239464/241368 (executing program) 2026/01/14 09:51:16 fetching corpus: 14500, signal 239643/241371 (executing program) 2026/01/14 09:51:16 fetching corpus: 14507, signal 239669/241371 (executing program) 2026/01/14 09:51:16 fetching corpus: 14507, signal 239669/241371 (executing program) 2026/01/14 09:51:18 starting 8 fuzzer processes 09:51:18 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0xe9) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x9, 0x0, 0x0) 09:51:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) 09:51:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0xfffffffffffffe64}, 0x0) 09:51:18 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b62, &(0x7f0000000100)=0xa) 09:51:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setpriority(0x1, 0x0, 0x0) [ 89.016869] audit: type=1400 audit(1768384278.783:7): avc: denied { execmem } for pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:51:18 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:18 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x8100006c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 09:51:18 executing program 6: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) [ 90.187111] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.188499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.192765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.195709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.199556] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.201050] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.204295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.206164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.207941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.211025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.212997] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.217503] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.222073] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.234813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.237553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.316010] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.317735] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.319099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.321634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.323346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.387224] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.387233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.390535] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.407457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.407492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.410170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.412814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.414527] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 90.417548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.425984] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.445233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 90.449684] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 90.456754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 90.459532] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.465537] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 90.491995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.494352] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.505133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 90.515802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 90.549557] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.281612] Bluetooth: hci1: command tx timeout [ 92.282426] Bluetooth: hci2: command tx timeout [ 92.282805] Bluetooth: hci0: command tx timeout [ 92.345716] Bluetooth: hci3: command tx timeout [ 92.474712] Bluetooth: hci4: command tx timeout [ 92.475558] Bluetooth: hci5: command tx timeout [ 92.537228] Bluetooth: hci7: command tx timeout [ 92.664966] Bluetooth: hci6: command tx timeout [ 94.329505] Bluetooth: hci2: command tx timeout [ 94.329957] Bluetooth: hci0: command tx timeout [ 94.330334] Bluetooth: hci1: command tx timeout [ 94.392802] Bluetooth: hci3: command tx timeout [ 94.520482] Bluetooth: hci4: command tx timeout [ 94.521991] Bluetooth: hci5: command tx timeout [ 94.586472] Bluetooth: hci7: command tx timeout [ 94.713423] Bluetooth: hci6: command tx timeout [ 96.377794] Bluetooth: hci1: command tx timeout [ 96.378139] Bluetooth: hci0: command tx timeout [ 96.379113] Bluetooth: hci2: command tx timeout [ 96.441442] Bluetooth: hci3: command tx timeout [ 96.570502] Bluetooth: hci5: command tx timeout [ 96.570527] Bluetooth: hci4: command tx timeout [ 96.632486] Bluetooth: hci7: command tx timeout [ 96.761159] Bluetooth: hci6: command tx timeout [ 98.427593] Bluetooth: hci0: command tx timeout [ 98.427649] Bluetooth: hci1: command tx timeout [ 98.428538] Bluetooth: hci2: command tx timeout [ 98.489540] Bluetooth: hci3: command tx timeout [ 98.616477] Bluetooth: hci4: command tx timeout [ 98.618117] Bluetooth: hci5: command tx timeout [ 98.680532] Bluetooth: hci7: command tx timeout [ 98.808630] Bluetooth: hci6: command tx timeout [ 126.749859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.750569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.951720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.952358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.396654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.397266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.428376] audit: type=1400 audit(1768384317.200:8): avc: denied { open } for pid=3838 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.435537] audit: type=1400 audit(1768384317.208:9): avc: denied { kernel } for pid=3838 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.583865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.585686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.757858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.758953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.808063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.808738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.936443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.937063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.991698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.992296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.105120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.105160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.133011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.133047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.296651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.297715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.325023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.325804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.359877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.360481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.364983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.366375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.476163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.476838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.537561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.539855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.662683] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 128.708187] Bluetooth: hci3: ACL packet for unknown connection handle 2745 [ 128.726778] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 128.736026] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 128.741101] Bluetooth: hci3: ACL packet for unknown connection handle 2745 09:51:58 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75b8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9708cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f206"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:58 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x54, 0x0) r0 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r0, &(0x7f0000000640)={0x7}, 0xfdef) 09:51:58 executing program 6: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) 09:51:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b62, &(0x7f0000000100)=0xa) 09:51:58 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x8100006c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 09:51:58 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setpriority(0x1, 0x0, 0x0) 09:51:58 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) [ 128.849050] ======================================================= [ 128.849050] WARNING: The mand mount option has been deprecated and [ 128.849050] and is ignored by this kernel. Remove the mand [ 128.849050] option from the mount to silence this warning. [ 128.849050] ======================================================= [ 128.858733] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 128.865008] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 128.874752] loop1: detected capacity change from 0 to 264192 [ 128.879066] Bluetooth: hci1: ACL packet for unknown connection handle 2745 [ 128.882229] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 128.884641] Bluetooth: hci3: ACL packet for unknown connection handle 2745 [ 128.885836] Bluetooth: hci3: ISO packet for unknown connection handle 1106 09:51:58 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x8100006c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 09:51:58 executing program 6: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) 09:51:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b62, &(0x7f0000000100)=0xa) 09:51:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setpriority(0x1, 0x0, 0x0) 09:51:58 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="03c900009e14e837273701de118d8aad382a2ee9f865767a450b0ce0497a1c7e0977a673802bf56b874c3aea0b1fe4876f06be57ef79f965a7f1cd1fe1bf9d46e29255c8a58c47488ca00c00eba31c89ba1c40cc01a08ed8d37aee0b442f5785ab6dc4342378839eccb5677f44a43dbfcc9bb9375ab873a1cd04b29c15780d1823f686e4bdb209c750cade7ba758bd4f6520c2fd1f9d427d54142daacb9c16270cfa6d8599d58c72f2a4629f75fb238c3929315cca3b888643088fe02670d8c07a5a06e7e8d1ee8ff9a20b5da168f7d6737e0a5d0583471a33fad62a4e3f0a01c8a65466d810ef3d82a57e4c196a2ea8f477fb59036f1e1616cfaa68735835dfdd644f144f4d78da2edb3a32707d1816baa4c603a978c9446174a83b460b15750000000000000401ad72a2a21c71acc3266db81950cfe62039e58113c1c6ef9a122c8d807198c8063f63b205bc1802f4974efdd1d67cf678871103570c794969716898d7da8b57985a1366e97e969b77e73aaf20e75fb1db5bbfb7e4eb1b98d414eb934f3ec319e20f9d281972f1a8d437bafb0e4443638dc1cab538fd67716bd14ead6b6cf5b1ef21468c83b27c883ae192be8c7fc350debf93f41551f77c7d"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75b8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9708cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f206"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:58 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:58 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) [ 129.002232] [ 129.002539] ===================================== [ 129.003204] WARNING: bad unlock balance detected! [ 129.003869] 6.19.0-rc5-next-20260114 #1 Not tainted [ 129.004551] ------------------------------------- [ 129.005200] syz-executor.3/3918 is trying to release lock (rcu_read_lock) at: [ 129.007405] [] __wait_on_freeing_inode+0x105/0x350 [ 129.010725] but there are no more locks to release! [ 129.012904] [ 129.012904] other info that might help us debug this: [ 129.014755] 4 locks held by syz-executor.3/3918: [ 129.015413] #0: ffff88800f5763f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 129.016636] #1: ffff88801f4f96f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 129.018026] #2: ffff88800f5fa950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 129.019268] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 129.020548] [ 129.020548] stack backtrace: [ 129.021169] CPU: 0 UID: 0 PID: 3918 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 129.021196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.021208] Call Trace: [ 129.021216] [ 129.021224] dump_stack_lvl+0xca/0x120 [ 129.021266] ? __wait_on_freeing_inode+0x105/0x350 [ 129.021293] print_unlock_imbalance_bug+0x118/0x130 [ 129.021320] ? __wait_on_freeing_inode+0x105/0x350 [ 129.021356] lock_release+0x1ee/0x270 [ 129.021384] __wait_on_freeing_inode+0x10a/0x350 [ 129.021412] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 129.021441] ? __pfx_var_wake_function+0x10/0x10 [ 129.021473] ? lock_is_held_type+0x9e/0x120 [ 129.021508] insert_inode_locked+0x25f/0x890 [ 129.021539] __ext4_new_inode+0x223d/0x4cd0 [ 129.021571] ? __pfx___ext4_new_inode+0x10/0x10 [ 129.021598] ? __pfx___dquot_initialize+0x10/0x10 [ 129.021631] ? __pfx_avc_has_perm+0x10/0x10 [ 129.021659] ext4_symlink+0x623/0xb40 [ 129.021693] ? __pfx_ext4_symlink+0x10/0x10 [ 129.021722] ? security_inode_permission+0x72/0xe0 [ 129.021746] vfs_symlink+0x44b/0x840 [ 129.021776] do_symlinkat+0x153/0x440 [ 129.021802] ? __pfx_do_symlinkat+0x10/0x10 [ 129.021826] ? strncpy_from_user+0x21b/0x2f0 [ 129.021856] __x64_sys_symlink+0x79/0xa0 [ 129.021881] do_syscall_64+0xbf/0x420 [ 129.021904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.021926] RIP: 0033:0x7ff13076b427 [ 129.021943] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.021963] RSP: 002b:00007ffcfcd66608 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 129.021983] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff13076b427 [ 129.021997] RDX: 00007ffcfcd666e3 RSI: 00007ff1307c602f RDI: 00007ffcfcd666d0 [ 129.022010] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcfcd664a0 [ 129.022023] R10: 00007ffcfcd66357 R11: 0000000000000202 R12: 0000000000000001 [ 129.022036] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcfcd666d0 [ 129.022055] [ 129.048745] ------------[ cut here ]------------ [ 129.049491] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.3/3918 [ 129.051072] Modules linked in: [ 129.051620] CPU: 0 UID: 0 PID: 3918 Comm: syz-executor.3 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 129.053063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.054277] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 129.055169] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 129.057753] RSP: 0018:ffff88804a7479a0 EFLAGS: 00010286 [ 129.058567] RAX: 00000000ffffffff RBX: ffff888048c59b80 RCX: ffffffff81565a27 [ 129.059631] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff888048c59f7c [ 129.060687] RBP: ffff888048c59b80 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 129.061754] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048c59b80 [ 129.062813] R13: 0000000000000001 R14: ffffffff85c0db00 R15: ffff88801f4f0ca0 [ 129.063873] FS: 000055559509c400(0000) GS:ffff8880e5343000(0000) knlGS:0000000000000000 [ 129.065054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.065941] CR2: 00007ff1307eb543 CR3: 000000000b43e000 CR4: 0000000000350ef0 [ 129.067008] Call Trace: [ 129.067521] [ 129.068774] __wait_on_freeing_inode+0x10f/0x350 [ 129.070047] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 129.072069] ? __pfx_var_wake_function+0x10/0x10 [ 129.074381] ? lock_is_held_type+0x9e/0x120 [ 129.076532] insert_inode_locked+0x25f/0x890 [ 129.080967] __ext4_new_inode+0x223d/0x4cd0 [ 129.086084] ? __pfx___ext4_new_inode+0x10/0x10 [ 129.088472] ? __pfx___dquot_initialize+0x10/0x10 [ 129.089923] ? __pfx_avc_has_perm+0x10/0x10 [ 129.093304] ext4_symlink+0x623/0xb40 [ 129.097819] ? __pfx_ext4_symlink+0x10/0x10 [ 129.102287] ? security_inode_permission+0x72/0xe0 [ 129.105621] vfs_symlink+0x44b/0x840 [ 129.108127] do_symlinkat+0x153/0x440 [ 129.110326] ? __pfx_do_symlinkat+0x10/0x10 [ 129.111954] ? strncpy_from_user+0x21b/0x2f0 [ 129.115803] __x64_sys_symlink+0x79/0xa0 [ 129.117262] do_syscall_64+0xbf/0x420 [ 129.118966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.120046] RIP: 0033:0x7ff13076b427 [ 129.120855] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 129.123770] RSP: 002b:00007ffcfcd66608 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 129.125075] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff13076b427 [ 129.126304] RDX: 00007ffcfcd666e3 RSI: 00007ff1307c602f RDI: 00007ffcfcd666d0 [ 129.127525] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcfcd664a0 [ 129.128749] R10: 00007ffcfcd66357 R11: 0000000000000202 R12: 0000000000000001 [ 129.129986] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffcfcd666d0 [ 129.135616] [ 129.136009] irq event stamp: 435 [ 129.136653] hardirqs last enabled at (435): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 129.138367] hardirqs last disabled at (434): [] _raw_spin_lock_irqsave+0x53/0x60 [ 129.140062] softirqs last enabled at (430): [] kernel_fpu_end+0x59/0x70 [ 129.141584] softirqs last disabled at (428): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 129.143335] ---[ end trace 0000000000000000 ]--- [ 129.161382] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 129.170790] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 129.179585] Bluetooth: hci1: ACL packet for unknown connection handle 2745 [ 129.180215] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 129.198992] Bluetooth: hci3: ACL packet for unknown connection handle 2745 [ 129.200574] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 129.340043] Bluetooth: hci2: unexpected cc 0x2029 length: 16 > 1 [ 129.379487] Bluetooth: hci2: ACL packet for unknown connection handle 2745 [ 129.381442] Bluetooth: hci2: ISO packet for unknown connection handle 1106 09:51:59 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="03c900009e14e837273701de118d8aad382a2ee9f865767a450b0ce0497a1c7e0977a673802bf56b874c3aea0b1fe4876f06be57ef79f965a7f1cd1fe1bf9d46e29255c8a58c47488ca00c00eba31c89ba1c40cc01a08ed8d37aee0b442f5785ab6dc4342378839eccb5677f44a43dbfcc9bb9375ab873a1cd04b29c15780d1823f686e4bdb209c750cade7ba758bd4f6520c2fd1f9d427d54142daacb9c16270cfa6d8599d58c72f2a4629f75fb238c3929315cca3b888643088fe02670d8c07a5a06e7e8d1ee8ff9a20b5da168f7d6737e0a5d0583471a33fad62a4e3f0a01c8a65466d810ef3d82a57e4c196a2ea8f477fb59036f1e1616cfaa68735835dfdd644f144f4d78da2edb3a32707d1816baa4c603a978c9446174a83b460b15750000000000000401ad72a2a21c71acc3266db81950cfe62039e58113c1c6ef9a122c8d807198c8063f63b205bc1802f4974efdd1d67cf678871103570c794969716898d7da8b57985a1366e97e969b77e73aaf20e75fb1db5bbfb7e4eb1b98d414eb934f3ec319e20f9d281972f1a8d437bafb0e4443638dc1cab538fd67716bd14ead6b6cf5b1ef21468c83b27c883ae192be8c7fc350debf93f41551f77c7d"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:59 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:59 executing program 5: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) 09:51:59 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b62, &(0x7f0000000100)=0xa) 09:51:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) setpriority(0x1, 0x0, 0x0) 09:51:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:59 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x8100006c) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 09:51:59 executing program 6: syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x3, 0x5, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0) [ 129.524271] Bluetooth: hci3: unexpected cc 0x2029 length: 16 > 1 [ 129.527168] Bluetooth: hci3: ACL packet for unknown connection handle 2745 [ 129.529572] Bluetooth: hci3: ISO packet for unknown connection handle 1106 [ 129.584466] Bluetooth: hci2: unexpected cc 0x2029 length: 16 > 1 [ 129.596498] Bluetooth: hci1: unexpected cc 0x2029 length: 16 > 1 [ 129.614609] Bluetooth: hci1: ACL packet for unknown connection handle 2745 [ 129.622439] Bluetooth: hci2: ACL packet for unknown connection handle 2745 [ 129.625574] Bluetooth: hci1: ISO packet for unknown connection handle 1106 [ 129.635446] Bluetooth: hci2: ISO packet for unknown connection handle 1106 09:51:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:59 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) statx(r0, &(0x7f0000000240)='\x00', 0x1000, 0x0, &(0x7f0000000280)) 09:51:59 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x304, @multicast}, 0x0, {0x2, 0x0, @loopback}}) 09:51:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) [ 129.739465] loop5: detected capacity change from 0 to 264192 09:51:59 executing program 6: r0 = epoll_create(0x403) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20101) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 129.814505] Bluetooth: hci2: unexpected cc 0x2029 length: 16 > 1 [ 129.820992] Bluetooth: hci2: ACL packet for unknown connection handle 2745 09:51:59 executing program 2: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54) syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17) syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11) r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"]) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91) [ 129.823572] Bluetooth: hci2: ISO packet for unknown connection handle 1106 09:51:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:59 executing program 4: r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xc1, 0x8a, 0x0, 0xe0, 0x0, 0x0, 0x45, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x4, 0x5}, 0x8, 0xb896, 0x3, 0x8, 0xe000000000000000, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x96e}, r1, 0x8, r0, 0x8) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x5, 0xff, 0x200) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x80, 0x5, 0xff, 0x0, 0x100000001, 0x4020, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x95, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x12000, 0x400, 0x8, 0x3, 0x4, 0x1000, 0x8001, 0x0, 0x4, 0x0, 0x401}, 0x0, 0x9, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x729) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in6=@empty, 0x400, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:51:59 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x15, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) [ 129.883489] netlink: 'syz-executor.7': attribute type 21 has an invalid length. 09:51:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="6caf", 0xfffffdef}], 0x1, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}], 0x20}, 0x0) 09:51:59 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r1 = dup(r0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) [ 129.976066] audit: type=1400 audit(1768384319.748:10): avc: denied { tracepoint } for pid=3969 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.986376] audit: type=1400 audit(1768384319.749:11): avc: denied { write } for pid=3969 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 09:51:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0xfe}, 0x0) 09:51:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000012) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r1, 0x402, 0x80000012) 09:51:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@sco, 0xfffffffffffffdc9) 09:51:59 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001d00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000001640)=[@hoplimit_2292={{0x14}}, @dstopts={{0x10}}], 0x30}}, {{&(0x7f0000000300)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x2, 0x0) 09:51:59 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00') openat(r0, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffffc, 0x0, &(0x7f0000000200), 0x8882f, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000640)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, 0x0, 0x0) dup3(r3, r2, 0x0) r4 = getpid() r5 = pidfd_open(r4, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f0000000040)) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r6, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3f, 0x7f, 0x8, 0x83, 0x0, 0xd1eb, 0x42207, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x3}, 0x4, 0x5, 0x6, 0x7, 0x9, 0x8, 0x1, 0x0, 0x7, 0x0, 0x7ff}, 0x0, 0x3, r6, 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00010000000000"]) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:51:59 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x16b000) close_range(r0, 0xffffffffffffffff, 0x0) 09:51:59 executing program 4: r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xc1, 0x8a, 0x0, 0xe0, 0x0, 0x0, 0x45, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x4, 0x5}, 0x8, 0xb896, 0x3, 0x8, 0xe000000000000000, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x96e}, r1, 0x8, r0, 0x8) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x5, 0xff, 0x200) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x80, 0x5, 0xff, 0x0, 0x100000001, 0x4020, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x95, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x12000, 0x400, 0x8, 0x3, 0x4, 0x1000, 0x8001, 0x0, 0x4, 0x0, 0x401}, 0x0, 0x9, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x729) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in6=@empty, 0x400, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 130.098497] audit: type=1400 audit(1768384319.871:12): avc: denied { watch } for pid=3985 comm="syz-executor.6" path="/proc/3985/task" dev="proc" ino=6269 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 09:51:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000012) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r1, 0x402, 0x80000012) 09:51:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) dup2(r0, r1) 09:52:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000012) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r1, 0x402, 0x80000012) 09:52:00 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba97959e6072d659, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5414, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) sendmmsg$sock(r1, &(0x7f0000000580)=[{{&(0x7f0000000140)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf22, 0x1}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x2}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000003c0)="94a11d9f6be5f83211a98ea9c28e777537a398837ee2de7c4e5ec4bdd196771fb3d91414cf31e9e2bb15c28446c2a661f051facdd8dad02cdee9e5a249b205024150995b0cf2b1b8e8c041ce39bd494bb62dcc44ec4deb91d568e13e34884db2d0e4c7", 0x63}, {&(0x7f0000000440)="0edc0ad6cec2840b5b8abe152f2288b8f55ad3231e0c467596a2948cc435b4240f9723ecf2ef6fc03d29ff727a61c12cb55e61eada62ae7701fdddb7d1a7313e8599ebb682869210a9871d191b866673df1cb396306855b285a7d25b0233103bdc2432f21e3d8a8583d2ef522d3ab04b58e4f49b77db97d5bcf299dd7f2a369e6ad72ac1246c72ac2592a5079719e682d7f2f015b64d3bd7474f4403f4e111954ba9de637b877239f1ae85872901", 0xae}], 0x3, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff6d}}, @txtime={{0x18, 0x1, 0x3d, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}], 0x2, 0x4811) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x477e, 0xac3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x1}) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x10100000000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0x0, 0x5, 0x8, 0x0, 0xff, 0x14184, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0x0, 0x10000}, 0x10, 0xffffffff, 0x7ff, 0x7, 0x81, 0x8, 0x3, 0x0, 0x81, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 09:52:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0xfe}, 0x0) 09:52:00 executing program 4: r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xc1, 0x8a, 0x0, 0xe0, 0x0, 0x0, 0x45, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x4, 0x5}, 0x8, 0xb896, 0x3, 0x8, 0xe000000000000000, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x96e}, r1, 0x8, r0, 0x8) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x5, 0xff, 0x200) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x80, 0x5, 0xff, 0x0, 0x100000001, 0x4020, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x95, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x12000, 0x400, 0x8, 0x3, 0x4, 0x1000, 0x8001, 0x0, 0x4, 0x0, 0x401}, 0x0, 0x9, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x729) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in6=@empty, 0x400, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:52:00 executing program 2: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 09:52:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x99, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/34}, 0x2a, 0x0, 0x3c00) 09:52:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0x4) 09:52:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000012) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r1, 0x402, 0x80000012) 09:52:00 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x4) 09:52:00 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/27, &(0x7f00000000c0)=0x1b) 09:52:00 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100) fcntl$setstatus(r1, 0x4, 0x4c000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100) sendfile(r4, r5, 0x0, 0x10000) close_range(r2, 0xffffffffffffffff, 0x0) 09:52:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0x4) 09:52:00 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/27, &(0x7f00000000c0)=0x1b) 09:52:00 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x99, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/34}, 0x2a, 0x0, 0x3c00) 09:52:00 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x7c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 09:52:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0xfe}, 0x0) 09:52:00 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x84b, 0x4) 09:52:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0x4) 09:52:01 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/27, &(0x7f00000000c0)=0x1b) 09:52:01 executing program 2: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 09:52:01 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000014c0), 0x0, 0x60102) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000001580)={0x0, 0xaf58}) 09:52:01 executing program 4: r0 = perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xc1, 0x8a, 0x0, 0xe0, 0x0, 0x0, 0x45, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x4, 0x5}, 0x8, 0xb896, 0x3, 0x8, 0xe000000000000000, 0xfff, 0x3, 0x0, 0x4, 0x0, 0x96e}, r1, 0x8, r0, 0x8) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/203, 0xcb}], 0x5, 0xff, 0x200) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x80, 0x5, 0xff, 0x0, 0x100000001, 0x4020, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x95, 0x1, @perf_bp={&(0x7f0000000040), 0x7}, 0x12000, 0x400, 0x8, 0x3, 0x4, 0x1000, 0x8001, 0x0, 0x4, 0x0, 0x401}, 0x0, 0x9, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x729) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in6=@empty, 0x400, 0x0, 0x0, 0x8}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:52:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x99, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/34}, 0x2a, 0x0, 0x3c00) 09:52:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) 09:52:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0xfe}, 0x0) 09:52:01 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/27, &(0x7f00000000c0)=0x1b) 09:52:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 09:52:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xf, &(0x7f0000000300), &(0x7f0000000340)=0x4) 09:52:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x401) write$evdev(r0, &(0x7f00000000c0), 0x1800) 09:52:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x4, &(0x7f0000000040)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000040)=ANY=[], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x0) 09:52:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)=ANY=[], 0x99, 0x0) msgrcv(0x0, &(0x7f00000001c0)={0x0, ""/34}, 0x2a, 0x0, 0x3c00) 09:52:01 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) [ 132.221890] loop4: detected capacity change from 0 to 512 09:52:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 09:52:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000d5f4655fd5f4655fd5f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)) 09:52:01 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) 09:52:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 09:52:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r3, &(0x7f0000000080)=""/203, 0xcb, 0x0) 09:52:01 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x4, &(0x7f0000000040)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000040)=ANY=[], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x0) 09:52:01 executing program 2: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 132.256584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 09:52:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 132.302939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 09:52:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}]}) 09:52:02 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) [ 132.351794] journal_path: Non-blockdev passed as './file0' [ 132.352805] EXT4-fs: error: could not find journal device path [ 132.357503] journal_path: Non-blockdev passed as './file0' [ 132.360536] EXT4-fs: error: could not find journal device path 09:52:02 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) signalfd(0xffffffffffffffff, &(0x7f0000001740), 0x8) 09:52:02 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x4, &(0x7f0000000040)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000040)=ANY=[], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x0) 09:52:02 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x60, 0x0, 0x0, 0xfffffffffffffffd}) 09:52:02 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 09:52:02 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)) 09:52:02 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xb9}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) [ 132.566852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.570624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.665092] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 132.666386] Bluetooth: hci3: Injecting HCI hardware error event [ 132.668261] Bluetooth: hci3: hardware error 0x00 [ 132.921631] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.922999] Bluetooth: hci1: Injecting HCI hardware error event [ 132.924206] Bluetooth: hci1: hardware error 0x00 [ 133.075289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.077079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:52:02 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_setup(0x4, &(0x7f0000000040)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x24, &(0x7f0000000040)=ANY=[], 0x90) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf241db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x0) 09:52:02 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) statx(r0, &(0x7f0000007740)='./file0\x00', 0x0, 0x800, &(0x7f0000000100)) 09:52:02 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 09:52:02 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() r1 = getpgid(0x0) kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 09:52:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000a80)={&(0x7f0000000900), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) 09:52:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 09:52:02 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xb9}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 09:52:02 executing program 2: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 133.203870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.209068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:52:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) 09:52:03 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 09:52:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_destroy(r0) 09:52:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) [ 133.368448] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 133.369616] Bluetooth: hci2: Injecting HCI hardware error event [ 133.370577] Bluetooth: hci2: hardware error 0x00 09:52:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 09:52:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() clone3(&(0x7f00000013c0)={0x10000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x2c}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f0000000240)=""/136, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) tgkill(r0, r1, 0x31) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = accept(0xffffffffffffffff, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x80) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x5) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x1, 0xa4, 0xff, 0x0, 0x1, 0x80002, 0xb, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x114c0, 0xf29, 0x81, 0x7, 0x80000000, 0x80, 0x100, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xd, r2, 0x3) io_setup(0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 09:52:03 executing program 3: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r0, 0x0) clone3(&(0x7f00000009c0)={0x110000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff], 0x1}, 0x58) 09:52:03 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/softnet_stat\x00') lseek(r0, 0x1ff, 0x0) 09:52:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9) 09:52:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 09:52:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) write(r0, &(0x7f0000000140)="d70a5bdd9e4ad1241fcc94d4cbeb089cd3f25e70064c711c2a647b268253307e5b7d29a4f4e0a0cf33fcf019dd9464e0c1cf98ff18c946765eb1034ae0e9f2ef21ba8f937f27ba04733aa909e7fbb9e14eaf1e9b508997aa568495d45863d02c3773e2ae4b9475310e3919ac435c090ed10d313678224401d630235f6eaa8e8ea62182b3969d7907725e1aead33e216a1163aa1a82b40944b484707f5eb15897eff7e93bb49440fcef55", 0xaa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 09:52:03 executing program 7: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff9648613cf5ad74457b1ff00000000645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0xa, [@link_local, @dev, @multicast, @local, @empty, @dev, @empty, @broadcast, @link_local, @dev]}) 09:52:03 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000480), 0xa2942, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5320, &(0x7f0000000200)={"1b1114298d7418f7b4ef1f4f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:52:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 09:52:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) clock_gettime(0x0, 0x0) 09:52:03 executing program 3: rename(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') 09:52:03 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, '\x00'}]}]}, 0x38}}, 0x0) 09:52:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 09:52:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 09:52:03 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xb9}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 09:52:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00') pread64(r0, &(0x7f0000000100)=""/196, 0xc4, 0x300) 09:52:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x30}}, 0x0) [ 134.047037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.052290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 09:52:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x3, r3}]}]}, 0x20}}, 0x0) 09:52:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:52:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'nr0\x00', 0x0}) 09:52:03 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:52:03 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3007}, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r1, r0) 09:52:03 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000000)={{}, {0x0, r1/1000+10000}}, 0x0) setitimer(0x2, &(0x7f00000001c0)={{}, {0x0, 0xea60}}, 0x0) setitimer(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x7, &(0x7f0000000100)=[{0x3, 0x7f, 0x1f, 0x4}, {0x47, 0x3f, 0x9, 0x5}, {0x101, 0x8, 0x6, 0x9}, {0x5, 0x7f, 0xf9, 0x7f}, {0x6e04, 0x20, 0x5, 0xffff}, {0x9, 0x20, 0x3, 0x1}, {0x8, 0x81, 0x5, 0x1}]}) setitimer(0x1, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}, 0x0) setitimer(0x0, 0x0, 0x0) io_setup(0x402, &(0x7f0000000080)) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x5, 0x8, 0x81, 0x6, 0x0, 0x401, 0xa, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x2, 0x9, 0x8, 0x7, 0xffffffffffffffe0, 0x16c, 0xfffd, 0x0, 0x2, 0x0, 0x1ff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/netlink\x00') pread64(r2, &(0x7f0000000140)=""/187, 0xbb, 0x1) signalfd(r0, &(0x7f0000000200)={[0x9]}, 0x8) syz_io_uring_setup(0x7d14, &(0x7f0000000380)={0x0, 0xed4c, 0x7, 0x0, 0x3b, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) [ 134.168208] syz-executor.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 09:52:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 09:52:03 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 134.202094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 09:52:03 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:52:03 executing program 3: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) timer_create(0x8, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 09:52:04 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet6_udp_int(r1, 0x11, 0x0, 0x0, 0x0) 09:52:04 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:52:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {0x2c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 09:52:04 executing program 3: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) timer_create(0x8, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 09:52:04 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xb9}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 09:52:04 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 09:52:04 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x1c, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wlan1\x02'}]}, 0x1c}], 0x1}, 0x0) 09:52:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 09:52:04 executing program 5: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0xf) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000540)={0x7}, 0x7) 09:52:04 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x12, 0xfffffffffffffffe, 0x0) 09:52:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 134.606056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.608179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.713078] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 134.968445] Bluetooth: hci1: Opcode 0x0c03 failed: -110 09:52:04 executing program 3: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) timer_create(0x8, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 09:52:04 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[0x0]) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:52:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 09:52:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r1, 0x21, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 09:52:04 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r0, r1, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)="e5", 0x1}], 0x1) 09:52:04 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) io_setup(0xfff, &(0x7f0000000080)=0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 09:52:04 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:52:04 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 09:52:05 executing program 3: ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000080)) timer_create(0x8, &(0x7f0000000100)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 09:52:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r1, 0x21, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 09:52:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') read(r0, 0x0, 0x0) 09:52:05 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="fe", 0x178}]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 09:52:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r1, 0x402, 0x14) getdents(r0, &(0x7f0000000000)=""/65, 0x41) 09:52:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r1, 0x21, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) [ 135.418603] Bluetooth: hci2: Opcode 0x0c03 failed: -110 09:52:05 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000000400)) [ 135.521921] audit: type=1400 audit(1768384325.295:13): avc: denied { watch_reads } for pid=4303 comm="syz-executor.6" path="/syzkaller-testdir509442613/syzkaller.c9LpJL/28/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 09:52:05 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[0x0]) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:52:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') read(r0, 0x0, 0x0) 09:52:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0xffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 09:52:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_destroy(0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:52:05 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x4) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 09:52:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r1, 0x21, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 09:52:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') read(r0, 0x0, 0x0) 09:52:05 executing program 4: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="fe", 0x178}]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 09:52:05 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="fe", 0x178}]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 09:52:05 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="fe", 0x178}]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 09:52:05 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000240)=[0x0]) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 09:52:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') read(r0, 0x0, 0x0) 09:52:05 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x7f) 09:52:05 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="fe", 0x178}]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 09:52:05 executing program 3: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="d3", 0x1}]) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="fe", 0x178}]) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r6) 09:52:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r2, 0xb) 09:52:05 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={ VM DIAGNOSIS: 09:51:58 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82973870 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88804a747410 R8 =0000000000000000 R9 =ffffed10016a8046 R10=00000000000fe503 R11=6666666666663c5b R12=0000000000000823 R13=0000000000000060 R14=fffffbfff113817e R15=dffffc0000000000 RIP=ffffffff829738c5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055559509c400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff1307eb543 CR3=000000000b43e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a4ffb50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff1100349ff6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a4ffb88 RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055558907e400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555865c6708 CR3=000000000d120000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff000000000000000000 XMM02=7269762f736563697665642f7379732f XMM03=747269762f736563697665642f737973 XMM04=00000000000000000000000000000000 XMM05=0000564e84e853700000564e84e85350 XMM06=0000564e84eaf5d0ffffffff00000002 XMM07=00000002000000030000564e84e85330 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000