Warning: Permanently added '[localhost]:27409' (ECDSA) to the list of known hosts. 2026/01/13 08:55:29 fuzzer started 2026/01/13 08:55:29 dialing manager at localhost:38155 syzkaller login: [ 50.540345] cgroup: Unknown subsys name 'net' [ 50.608482] cgroup: Unknown subsys name 'cpuset' [ 50.621694] cgroup: Unknown subsys name 'rlimit' 2026/01/13 08:55:40 syscalls: 2214 2026/01/13 08:55:40 code coverage: enabled 2026/01/13 08:55:40 comparison tracing: enabled 2026/01/13 08:55:40 extra coverage: enabled 2026/01/13 08:55:40 setuid sandbox: enabled 2026/01/13 08:55:40 namespace sandbox: enabled 2026/01/13 08:55:40 Android sandbox: enabled 2026/01/13 08:55:40 fault injection: enabled 2026/01/13 08:55:40 leak checking: enabled 2026/01/13 08:55:40 net packet injection: enabled 2026/01/13 08:55:40 net device setup: enabled 2026/01/13 08:55:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/13 08:55:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/13 08:55:40 USB emulation: enabled 2026/01/13 08:55:40 hci packet injection: enabled 2026/01/13 08:55:40 wifi device emulation: enabled 2026/01/13 08:55:40 802.15.4 emulation: enabled 2026/01/13 08:55:40 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/13 08:55:40 fetching corpus: 43, signal 17836/21499 (executing program) 2026/01/13 08:55:40 fetching corpus: 82, signal 28793/33963 (executing program) 2026/01/13 08:55:40 fetching corpus: 118, signal 36732/43315 (executing program) 2026/01/13 08:55:40 fetching corpus: 158, signal 43737/51601 (executing program) 2026/01/13 08:55:40 fetching corpus: 206, signal 51466/60439 (executing program) 2026/01/13 08:55:40 fetching corpus: 254, signal 56045/66223 (executing program) 2026/01/13 08:55:40 fetching corpus: 304, signal 61007/72305 (executing program) 2026/01/13 08:55:40 fetching corpus: 354, signal 69713/81669 (executing program) 2026/01/13 08:55:41 fetching corpus: 404, signal 73802/86733 (executing program) 2026/01/13 08:55:41 fetching corpus: 454, signal 75503/89527 (executing program) 2026/01/13 08:55:41 fetching corpus: 504, signal 79148/94032 (executing program) 2026/01/13 08:55:41 fetching corpus: 554, signal 82988/98631 (executing program) 2026/01/13 08:55:41 fetching corpus: 604, signal 85092/101626 (executing program) 2026/01/13 08:55:41 fetching corpus: 654, signal 88014/105304 (executing program) 2026/01/13 08:55:41 fetching corpus: 704, signal 90570/108607 (executing program) 2026/01/13 08:55:41 fetching corpus: 753, signal 92549/111358 (executing program) 2026/01/13 08:55:42 fetching corpus: 802, signal 94461/114117 (executing program) 2026/01/13 08:55:42 fetching corpus: 852, signal 96771/117150 (executing program) 2026/01/13 08:55:42 fetching corpus: 902, signal 98945/119988 (executing program) 2026/01/13 08:55:42 fetching corpus: 952, signal 100475/122245 (executing program) 2026/01/13 08:55:42 fetching corpus: 1002, signal 102426/124852 (executing program) 2026/01/13 08:55:42 fetching corpus: 1052, signal 104761/127655 (executing program) 2026/01/13 08:55:42 fetching corpus: 1100, signal 106094/129688 (executing program) 2026/01/13 08:55:42 fetching corpus: 1150, signal 108038/132159 (executing program) 2026/01/13 08:55:42 fetching corpus: 1197, signal 109177/133969 (executing program) 2026/01/13 08:55:43 fetching corpus: 1246, signal 111012/136316 (executing program) 2026/01/13 08:55:43 fetching corpus: 1296, signal 112391/138255 (executing program) 2026/01/13 08:55:43 fetching corpus: 1345, signal 113631/140075 (executing program) 2026/01/13 08:55:43 fetching corpus: 1395, signal 115260/142140 (executing program) 2026/01/13 08:55:43 fetching corpus: 1445, signal 116767/144079 (executing program) 2026/01/13 08:55:43 fetching corpus: 1494, signal 118099/145913 (executing program) 2026/01/13 08:55:43 fetching corpus: 1544, signal 119517/147750 (executing program) 2026/01/13 08:55:43 fetching corpus: 1594, signal 121274/149800 (executing program) 2026/01/13 08:55:43 fetching corpus: 1642, signal 123838/152283 (executing program) 2026/01/13 08:55:44 fetching corpus: 1692, signal 125253/154010 (executing program) 2026/01/13 08:55:44 fetching corpus: 1742, signal 126820/155857 (executing program) 2026/01/13 08:55:44 fetching corpus: 1792, signal 128087/157425 (executing program) 2026/01/13 08:55:44 fetching corpus: 1841, signal 129885/159329 (executing program) 2026/01/13 08:55:44 fetching corpus: 1890, signal 130786/160673 (executing program) 2026/01/13 08:55:44 fetching corpus: 1939, signal 132493/162408 (executing program) 2026/01/13 08:55:44 fetching corpus: 1989, signal 133354/163674 (executing program) 2026/01/13 08:55:44 fetching corpus: 2038, signal 134455/165079 (executing program) 2026/01/13 08:55:44 fetching corpus: 2087, signal 135416/166346 (executing program) 2026/01/13 08:55:45 fetching corpus: 2137, signal 136679/167822 (executing program) 2026/01/13 08:55:45 fetching corpus: 2187, signal 137990/169265 (executing program) 2026/01/13 08:55:45 fetching corpus: 2237, signal 138714/170323 (executing program) 2026/01/13 08:55:45 fetching corpus: 2287, signal 139746/171574 (executing program) 2026/01/13 08:55:45 fetching corpus: 2337, signal 140477/172670 (executing program) 2026/01/13 08:55:45 fetching corpus: 2387, signal 141303/173773 (executing program) 2026/01/13 08:55:45 fetching corpus: 2437, signal 142181/174861 (executing program) 2026/01/13 08:55:45 fetching corpus: 2487, signal 143531/176196 (executing program) 2026/01/13 08:55:45 fetching corpus: 2537, signal 144448/177284 (executing program) 2026/01/13 08:55:46 fetching corpus: 2587, signal 145596/178405 (executing program) 2026/01/13 08:55:46 fetching corpus: 2637, signal 146289/179324 (executing program) 2026/01/13 08:55:46 fetching corpus: 2687, signal 147032/180252 (executing program) 2026/01/13 08:55:46 fetching corpus: 2737, signal 147824/181208 (executing program) 2026/01/13 08:55:46 fetching corpus: 2787, signal 148599/182165 (executing program) 2026/01/13 08:55:46 fetching corpus: 2837, signal 149278/183041 (executing program) 2026/01/13 08:55:46 fetching corpus: 2887, signal 150103/183975 (executing program) 2026/01/13 08:55:46 fetching corpus: 2937, signal 150806/184814 (executing program) 2026/01/13 08:55:46 fetching corpus: 2987, signal 151269/185541 (executing program) 2026/01/13 08:55:47 fetching corpus: 3037, signal 151977/186402 (executing program) 2026/01/13 08:55:47 fetching corpus: 3087, signal 152558/187147 (executing program) 2026/01/13 08:55:47 fetching corpus: 3137, signal 153430/188046 (executing program) 2026/01/13 08:55:47 fetching corpus: 3187, signal 154029/188792 (executing program) 2026/01/13 08:55:47 fetching corpus: 3237, signal 154693/189591 (executing program) 2026/01/13 08:55:47 fetching corpus: 3287, signal 155176/190293 (executing program) 2026/01/13 08:55:47 fetching corpus: 3337, signal 156022/191088 (executing program) 2026/01/13 08:55:47 fetching corpus: 3387, signal 156753/191818 (executing program) 2026/01/13 08:55:48 fetching corpus: 3437, signal 157352/192513 (executing program) 2026/01/13 08:55:48 fetching corpus: 3487, signal 157879/193186 (executing program) 2026/01/13 08:55:48 fetching corpus: 3537, signal 158434/193869 (executing program) 2026/01/13 08:55:48 fetching corpus: 3587, signal 159076/194553 (executing program) 2026/01/13 08:55:48 fetching corpus: 3637, signal 159920/195228 (executing program) 2026/01/13 08:55:48 fetching corpus: 3687, signal 160725/195975 (executing program) 2026/01/13 08:55:48 fetching corpus: 3737, signal 161546/196641 (executing program) 2026/01/13 08:55:49 fetching corpus: 3787, signal 162519/197359 (executing program) 2026/01/13 08:55:49 fetching corpus: 3837, signal 163129/197923 (executing program) 2026/01/13 08:55:49 fetching corpus: 3887, signal 163589/198456 (executing program) 2026/01/13 08:55:49 fetching corpus: 3937, signal 164070/199031 (executing program) 2026/01/13 08:55:49 fetching corpus: 3987, signal 164803/199641 (executing program) 2026/01/13 08:55:49 fetching corpus: 4037, signal 165353/200208 (executing program) 2026/01/13 08:55:49 fetching corpus: 4087, signal 165792/200730 (executing program) 2026/01/13 08:55:49 fetching corpus: 4137, signal 166268/201229 (executing program) 2026/01/13 08:55:49 fetching corpus: 4187, signal 167086/201780 (executing program) 2026/01/13 08:55:50 fetching corpus: 4237, signal 167530/202313 (executing program) 2026/01/13 08:55:50 fetching corpus: 4287, signal 167960/202776 (executing program) 2026/01/13 08:55:50 fetching corpus: 4337, signal 168367/203251 (executing program) 2026/01/13 08:55:50 fetching corpus: 4387, signal 168832/203707 (executing program) 2026/01/13 08:55:50 fetching corpus: 4437, signal 169648/204196 (executing program) 2026/01/13 08:55:50 fetching corpus: 4487, signal 170137/204624 (executing program) 2026/01/13 08:55:50 fetching corpus: 4537, signal 170470/205031 (executing program) 2026/01/13 08:55:50 fetching corpus: 4587, signal 171094/205451 (executing program) 2026/01/13 08:55:51 fetching corpus: 4637, signal 171513/205874 (executing program) 2026/01/13 08:55:51 fetching corpus: 4687, signal 172273/206305 (executing program) 2026/01/13 08:55:51 fetching corpus: 4737, signal 172774/206685 (executing program) 2026/01/13 08:55:51 fetching corpus: 4787, signal 173243/207064 (executing program) 2026/01/13 08:55:51 fetching corpus: 4837, signal 173698/207455 (executing program) 2026/01/13 08:55:51 fetching corpus: 4887, signal 174399/207841 (executing program) 2026/01/13 08:55:51 fetching corpus: 4937, signal 175383/208194 (executing program) 2026/01/13 08:55:51 fetching corpus: 4987, signal 175803/208544 (executing program) 2026/01/13 08:55:52 fetching corpus: 5037, signal 176288/208873 (executing program) 2026/01/13 08:55:52 fetching corpus: 5087, signal 176671/209142 (executing program) 2026/01/13 08:55:52 fetching corpus: 5137, signal 177187/209142 (executing program) 2026/01/13 08:55:52 fetching corpus: 5187, signal 177644/209142 (executing program) 2026/01/13 08:55:52 fetching corpus: 5237, signal 177906/209145 (executing program) 2026/01/13 08:55:52 fetching corpus: 5287, signal 178320/209162 (executing program) 2026/01/13 08:55:52 fetching corpus: 5337, signal 178676/209162 (executing program) 2026/01/13 08:55:52 fetching corpus: 5386, signal 179117/209162 (executing program) 2026/01/13 08:55:52 fetching corpus: 5436, signal 180042/209198 (executing program) 2026/01/13 08:55:53 fetching corpus: 5486, signal 180536/209221 (executing program) 2026/01/13 08:55:53 fetching corpus: 5536, signal 181023/209224 (executing program) 2026/01/13 08:55:53 fetching corpus: 5585, signal 181543/209234 (executing program) 2026/01/13 08:55:53 fetching corpus: 5635, signal 182003/209239 (executing program) 2026/01/13 08:55:53 fetching corpus: 5685, signal 182521/209248 (executing program) 2026/01/13 08:55:53 fetching corpus: 5734, signal 182998/209269 (executing program) 2026/01/13 08:55:53 fetching corpus: 5784, signal 183377/209301 (executing program) 2026/01/13 08:55:53 fetching corpus: 5834, signal 183746/209301 (executing program) 2026/01/13 08:55:54 fetching corpus: 5884, signal 184231/209313 (executing program) 2026/01/13 08:55:54 fetching corpus: 5934, signal 184550/209318 (executing program) 2026/01/13 08:55:54 fetching corpus: 5984, signal 184852/209319 (executing program) 2026/01/13 08:55:54 fetching corpus: 6034, signal 185333/209319 (executing program) 2026/01/13 08:55:54 fetching corpus: 6084, signal 185983/209319 (executing program) 2026/01/13 08:55:54 fetching corpus: 6134, signal 186310/209340 (executing program) 2026/01/13 08:55:54 fetching corpus: 6184, signal 186683/209371 (executing program) 2026/01/13 08:55:54 fetching corpus: 6234, signal 186967/209371 (executing program) 2026/01/13 08:55:54 fetching corpus: 6284, signal 187504/209374 (executing program) 2026/01/13 08:55:54 fetching corpus: 6333, signal 187881/209374 (executing program) 2026/01/13 08:55:55 fetching corpus: 6383, signal 188241/209375 (executing program) 2026/01/13 08:55:55 fetching corpus: 6433, signal 188585/209375 (executing program) 2026/01/13 08:55:55 fetching corpus: 6483, signal 188975/209400 (executing program) 2026/01/13 08:55:55 fetching corpus: 6532, signal 189374/209401 (executing program) 2026/01/13 08:55:55 fetching corpus: 6580, signal 189836/209424 (executing program) 2026/01/13 08:55:55 fetching corpus: 6630, signal 190122/209426 (executing program) 2026/01/13 08:55:55 fetching corpus: 6680, signal 190547/209426 (executing program) 2026/01/13 08:55:55 fetching corpus: 6730, signal 190889/209427 (executing program) 2026/01/13 08:55:55 fetching corpus: 6780, signal 191171/209427 (executing program) 2026/01/13 08:55:56 fetching corpus: 6830, signal 191656/209434 (executing program) 2026/01/13 08:55:56 fetching corpus: 6879, signal 192041/209436 (executing program) 2026/01/13 08:55:56 fetching corpus: 6929, signal 192348/209437 (executing program) 2026/01/13 08:55:56 fetching corpus: 6979, signal 192706/209437 (executing program) 2026/01/13 08:55:56 fetching corpus: 7026, signal 193023/209473 (executing program) 2026/01/13 08:55:56 fetching corpus: 7076, signal 193818/209473 (executing program) 2026/01/13 08:55:56 fetching corpus: 7126, signal 194112/209525 (executing program) 2026/01/13 08:55:56 fetching corpus: 7176, signal 194549/209526 (executing program) 2026/01/13 08:55:57 fetching corpus: 7226, signal 194930/209532 (executing program) 2026/01/13 08:55:57 fetching corpus: 7276, signal 195299/209532 (executing program) 2026/01/13 08:55:57 fetching corpus: 7326, signal 195538/209533 (executing program) 2026/01/13 08:55:57 fetching corpus: 7376, signal 195869/209533 (executing program) 2026/01/13 08:55:57 fetching corpus: 7426, signal 196107/209535 (executing program) 2026/01/13 08:55:57 fetching corpus: 7476, signal 196343/209562 (executing program) 2026/01/13 08:55:57 fetching corpus: 7526, signal 196647/209562 (executing program) 2026/01/13 08:55:57 fetching corpus: 7576, signal 196982/209566 (executing program) 2026/01/13 08:55:57 fetching corpus: 7626, signal 197320/209566 (executing program) 2026/01/13 08:55:58 fetching corpus: 7676, signal 197658/209567 (executing program) 2026/01/13 08:55:58 fetching corpus: 7725, signal 197999/209569 (executing program) 2026/01/13 08:55:58 fetching corpus: 7775, signal 198333/209569 (executing program) 2026/01/13 08:55:58 fetching corpus: 7824, signal 198700/209580 (executing program) 2026/01/13 08:55:58 fetching corpus: 7874, signal 199052/209580 (executing program) 2026/01/13 08:55:58 fetching corpus: 7924, signal 199418/209580 (executing program) 2026/01/13 08:55:58 fetching corpus: 7974, signal 199669/209596 (executing program) 2026/01/13 08:55:58 fetching corpus: 8024, signal 199888/209626 (executing program) 2026/01/13 08:55:58 fetching corpus: 8074, signal 200400/209646 (executing program) 2026/01/13 08:55:59 fetching corpus: 8124, signal 200662/209646 (executing program) 2026/01/13 08:55:59 fetching corpus: 8174, signal 200942/209646 (executing program) 2026/01/13 08:55:59 fetching corpus: 8224, signal 201300/209646 (executing program) 2026/01/13 08:55:59 fetching corpus: 8273, signal 201570/209646 (executing program) 2026/01/13 08:55:59 fetching corpus: 8323, signal 201877/209653 (executing program) 2026/01/13 08:55:59 fetching corpus: 8373, signal 202222/209653 (executing program) 2026/01/13 08:55:59 fetching corpus: 8423, signal 202549/209653 (executing program) 2026/01/13 08:55:59 fetching corpus: 8472, signal 202799/209684 (executing program) 2026/01/13 08:55:59 fetching corpus: 8522, signal 203016/209701 (executing program) 2026/01/13 08:56:00 fetching corpus: 8571, signal 203266/209704 (executing program) 2026/01/13 08:56:00 fetching corpus: 8621, signal 203704/209706 (executing program) 2026/01/13 08:56:00 fetching corpus: 8671, signal 203938/209707 (executing program) 2026/01/13 08:56:00 fetching corpus: 8721, signal 204489/209902 (executing program) 2026/01/13 08:56:00 fetching corpus: 8771, signal 204873/209902 (executing program) 2026/01/13 08:56:00 fetching corpus: 8820, signal 205357/209960 (executing program) 2026/01/13 08:56:00 fetching corpus: 8870, signal 205796/209960 (executing program) 2026/01/13 08:56:00 fetching corpus: 8920, signal 206046/209960 (executing program) 2026/01/13 08:56:00 fetching corpus: 8969, signal 206365/209963 (executing program) 2026/01/13 08:56:01 fetching corpus: 9019, signal 206779/209963 (executing program) 2026/01/13 08:56:01 fetching corpus: 9068, signal 207125/209963 (executing program) 2026/01/13 08:56:01 fetching corpus: 9114, signal 207325/209963 (executing program) 2026/01/13 08:56:01 fetching corpus: 9162, signal 207548/209967 (executing program) 2026/01/13 08:56:01 fetching corpus: 9212, signal 207893/209967 (executing program) 2026/01/13 08:56:01 fetching corpus: 9261, signal 208089/209967 (executing program) 2026/01/13 08:56:01 fetching corpus: 9311, signal 208395/209967 (executing program) 2026/01/13 08:56:01 fetching corpus: 9349, signal 208635/209967 (executing program) 2026/01/13 08:56:01 fetching corpus: 9351, signal 208637/209968 (executing program) 2026/01/13 08:56:01 fetching corpus: 9351, signal 208637/209968 (executing program) 2026/01/13 08:56:03 starting 8 fuzzer processes 08:56:03 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000000)) 08:56:04 executing program 1: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) 08:56:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}]}, 0x1c}], 0x1}, 0x0) 08:56:04 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) getdents64(r0, &(0x7f00000000c0)=""/107, 0x6b) 08:56:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}], 0xff2f) 08:56:04 executing program 7: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 08:56:04 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:56:04 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 84.990580] audit: type=1400 audit(1768294564.200:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 86.119824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.122141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.124184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.128802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.134058] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.197903] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.201904] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.203497] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.204652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.206344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.209546] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.213506] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.214878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.215325] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.220455] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.248697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.256273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.261554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.272554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.275763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.381297] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.383355] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.402368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.402458] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.409616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.410973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.412122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.417023] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.440125] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 86.455565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 86.457873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.491889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.494850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 86.510240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.519279] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.528808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.529840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.539488] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.548896] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.553746] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 88.216124] Bluetooth: hci0: command tx timeout [ 88.280052] Bluetooth: hci1: command tx timeout [ 88.280585] Bluetooth: hci2: command tx timeout [ 88.344537] Bluetooth: hci3: command tx timeout [ 88.536652] Bluetooth: hci4: command tx timeout [ 88.537341] Bluetooth: hci5: command tx timeout [ 88.600462] Bluetooth: hci7: command tx timeout [ 88.600916] Bluetooth: hci6: command tx timeout [ 90.263589] Bluetooth: hci0: command tx timeout [ 90.327489] Bluetooth: hci1: command tx timeout [ 90.327927] Bluetooth: hci2: command tx timeout [ 90.391540] Bluetooth: hci3: command tx timeout [ 90.583493] Bluetooth: hci5: command tx timeout [ 90.583936] Bluetooth: hci4: command tx timeout [ 90.647467] Bluetooth: hci6: command tx timeout [ 90.647884] Bluetooth: hci7: command tx timeout [ 92.315602] Bluetooth: hci0: command tx timeout [ 92.379067] Bluetooth: hci2: command tx timeout [ 92.382583] Bluetooth: hci1: command tx timeout [ 92.443190] Bluetooth: hci3: command tx timeout [ 92.635772] Bluetooth: hci4: command tx timeout [ 92.636202] Bluetooth: hci5: command tx timeout [ 92.698805] Bluetooth: hci7: command tx timeout [ 92.699211] Bluetooth: hci6: command tx timeout [ 94.359505] Bluetooth: hci0: command tx timeout [ 94.424454] Bluetooth: hci2: command tx timeout [ 94.424849] Bluetooth: hci1: command tx timeout [ 94.487476] Bluetooth: hci3: command tx timeout [ 94.679517] Bluetooth: hci5: command tx timeout [ 94.679946] Bluetooth: hci4: command tx timeout [ 94.744439] Bluetooth: hci6: command tx timeout [ 94.744837] Bluetooth: hci7: command tx timeout [ 118.536765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.537459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.815775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.816374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}]}, 0x1c}], 0x1}, 0x0) [ 119.182611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.183198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}]}, 0x1c}], 0x1}, 0x0) [ 119.287823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.288449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.377890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.378540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x4}]}, 0x1c}], 0x1}, 0x0) [ 119.485640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.486246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.510949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.511533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.621053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.621663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.668334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.668920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.721777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.722389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.762608] audit: type=1400 audit(1768294598.971:8): avc: denied { open } for pid=3871 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.766619] audit: type=1400 audit(1768294598.971:9): avc: denied { kernel } for pid=3871 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:56:39 executing program 7: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) [ 119.798247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.798826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:39 executing program 7: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 08:56:39 executing program 1: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) 08:56:39 executing program 7: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) [ 119.937883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.937910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:56:39 executing program 1: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) [ 120.004208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.006473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.083151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.083768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.135756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.136375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.156024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.156624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.204962] loop5: detected capacity change from 0 to 5 [ 120.214229] EXT4-fs (loop5): failed to parse options in superblock: b [ 120.214991] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) [ 120.221352] loop5: detected capacity change from 0 to 5 [ 120.225036] EXT4-fs (loop5): failed to parse options in superblock: b [ 120.225773] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 08:56:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000000)) 08:56:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}], 0x0, &(0x7f0000013c00)=ANY=[]) 08:56:39 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:56:39 executing program 1: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) 08:56:39 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) getdents64(r0, &(0x7f00000000c0)=""/107, 0x6b) 08:56:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}], 0xff2f) [ 120.335269] loop5: detected capacity change from 0 to 5 [ 120.345339] EXT4-fs (loop5): failed to parse options in superblock: b [ 120.345917] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 08:56:39 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) getdents64(r0, &(0x7f00000000c0)=""/107, 0x6b) 08:56:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}], 0x0, &(0x7f0000013c00)=ANY=[]) [ 120.425370] loop5: detected capacity change from 0 to 5 [ 120.428383] EXT4-fs (loop5): failed to parse options in superblock: b [ 120.429357] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 08:56:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000000)) 08:56:39 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) getdents64(r0, &(0x7f00000000c0)=""/107, 0x6b) 08:56:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}], 0xff2f) 08:56:39 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:56:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000280)="6c37077fa0348e7920a53c8c7618c8355b41056832d4253b51937cbbe810f9c56e7e5eef320044d0a8001cf4ed1abf957e34991034b1f9419e2ec448db4335e31ac614bbb1efcf8032fb65625b34c229798c1da34517a6e5b93658217f13fe39472255df6b280ddccd2bf03b800322a02fdd705d3e8832cc2b13ca55baad55e95a980ec99e10cb801fbf56b829e4243ed973fae87e4c83ddb2835d39435eb31262", 0xa1, 0x560}], 0x0, &(0x7f0000013c00)=ANY=[]) [ 120.491001] loop5: detected capacity change from 0 to 5 [ 120.495128] EXT4-fs (loop5): failed to parse options in superblock: b [ 120.495694] EXT4-fs (loop5): bad geometry: block count 128 exceeds size of device (1 blocks) 08:56:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x0, 0x2}], 0xff2f) 08:56:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b40, &(0x7f0000000000)) 08:56:39 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 08:56:39 executing program 2: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 08:56:39 executing program 0: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) 08:56:39 executing program 7: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2011}) 08:56:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 08:56:39 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@broadcast]}) 08:56:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000580)={{r0}, 0x0, 0x0, @inherit={0x0, 0x0}, @name="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"}) 08:56:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:39 executing program 3: syz_io_uring_setup(0x1c2a, &(0x7f0000004700), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000004780), &(0x7f00000047c0)) 08:56:40 executing program 2: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 08:56:40 executing program 7: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2011}) 08:56:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x4040000) 08:56:40 executing program 0: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) 08:56:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000100)) 08:56:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@broadcast]}) [ 120.945778] perf: interrupt took too long (3145 > 3126), lowering kernel.perf_event_max_sample_rate to 63000 [ 120.946653] perf: interrupt took too long (3145 > 3126), lowering kernel.perf_event_max_sample_rate to 63000 08:56:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:40 executing program 2: r0 = epoll_create(0x6) r1 = epoll_create(0x1) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x6) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r5 = dup3(r3, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) [ 120.967841] perf: interrupt took too long (3940 > 3931), lowering kernel.perf_event_max_sample_rate to 50000 08:56:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000100)) 08:56:40 executing program 7: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2011}) [ 121.006314] perf: interrupt took too long (4963 > 4925), lowering kernel.perf_event_max_sample_rate to 40000 08:56:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) [ 121.017498] perf: interrupt took too long (6205 > 6203), lowering kernel.perf_event_max_sample_rate to 32000 08:56:40 executing program 0: modify_ldt$write(0x1, &(0x7f0000000080)={0xb43}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200), 0x10) 08:56:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:56:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@broadcast]}) 08:56:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 7: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2011}) 08:56:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000100)) 08:56:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x4040000) 08:56:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f0000000100)) 08:56:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000040)=' ', 0x1, 0xa00000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x660c, 0x0) 08:56:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x9, r2, r1, 0xfffffffffffffffc, 0x0) 08:56:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x4040000) 08:56:40 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) tee(r0, r1, 0x5, 0x0) 08:56:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000040)=' ', 0x1, 0xa00000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x660c, 0x0) 08:56:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x9, r2, r1, 0xfffffffffffffffc, 0x0) 08:56:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@broadcast]}) 08:56:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) setuid(0x0) lsetxattr$system_posix_acl(&(0x7f0000005480)='./file0\x00', &(0x7f00000054c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 08:56:40 executing program 2: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xca04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xc7, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x3, 0x9e}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) 08:56:40 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1400}], 0x1, 0x0) unshare(0x4040000) 08:56:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) [ 121.494506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.498905] audit: type=1400 audit(1768294600.709:10): avc: denied { watch_reads } for pid=4040 comm="syz-executor.6" path="/syzkaller-testdir665269096/syzkaller.CHIlSl/9/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 [ 121.502551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x9, r2, r1, 0xfffffffffffffffc, 0x0) 08:56:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:56:40 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) setuid(0x0) lsetxattr$system_posix_acl(&(0x7f0000005480)='./file0\x00', &(0x7f00000054c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 08:56:40 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000040)=' ', 0x1, 0xa00000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x660c, 0x0) 08:56:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x9, r2, r1, 0xfffffffffffffffc, 0x0) 08:56:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) 08:56:40 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 08:56:40 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) uname(&(0x7f0000000400)) [ 121.775031] syz-executor.0 (4063) used greatest stack depth: 23728 bytes left [ 122.013278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.014326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:41 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) setuid(0x0) lsetxattr$system_posix_acl(&(0x7f0000005480)='./file0\x00', &(0x7f00000054c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 08:56:41 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000040)=' ', 0x1, 0xa00000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x660c, 0x0) 08:56:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xfb}) 08:56:41 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 08:56:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:56:41 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) uname(&(0x7f0000000400)) 08:56:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) 08:56:41 executing program 2: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xca04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xc7, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x3, 0x9e}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) [ 122.080600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.083884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:41 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 08:56:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x3}, 0x20) 08:56:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xfb}) 08:56:41 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) uname(&(0x7f0000000400)) 08:56:41 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) inotify_rm_watch(r0, r1) setuid(0x0) lsetxattr$system_posix_acl(&(0x7f0000005480)='./file0\x00', &(0x7f00000054c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 08:56:41 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x3}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 08:56:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) 08:56:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xfb}) 08:56:41 executing program 2: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xca04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xc7, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x3, 0x9e}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) 08:56:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) 08:56:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in=@remote}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 08:56:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1b, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38383037323533333400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000713aa3a4ba984e5d8a0373c06ca5ba29010000000c00000000000000ddf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000ddf4655fddf4655fddf4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000ddf4655fdef4655fdef4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="2000000060ed753160ed753100000000ddf4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000ddf4655fddf4655fddf4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000ddf4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000011100)="ed4100003c000000def4655fdef4655fdef4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000322728ea0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000def4655fdef4655fdef4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feb0eba70000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3838303732353333342f66696c65302f66696c653000000000000000000000000000000000000000000000e06e12cc0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="ed8100000a000000def4655fdef4655fdef4655f000000000000010000000000000000100100000073797a6b616c6c6572730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eb4061bc0000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000000002ea040700000000000000000000000000006461746106015400000000000600000000000000786174747231000006014c000000000006000000000000007861747472320000000000000000000078617474723200007861747472310000ed81000028230000def4655fdef4655fdef4655f00000000000002001200000000000000010000001b0000001c0000001d0000001e0000001f0000002000000021000000220000002300000000000000000000000000000000000000000000000000000036e05f080000000000000000000000000000000000000000000000002000000060ed753160ed753160ed7531def4655f60ed75310000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011600)="ed81000064000000def4655fdef4655fdef4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cea6ae86100000000000000000000000000000000000000000000000020000000b0116a32b0116a3260ed7531def4655f60ed75310000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x4400}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x4800}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x4c00}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x5000}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x5400}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x5800}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000012300)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x6400}], 0x0, &(0x7f0000012800)) 08:56:41 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) 08:56:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 08:56:41 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000580)) uname(&(0x7f0000000400)) [ 122.698139] [ 122.698465] ===================================== [ 122.699137] WARNING: bad unlock balance detected! [ 122.699811] 6.19.0-rc5-next-20260113 #1 Not tainted [ 122.700573] ------------------------------------- [ 122.701284] syz-executor.4/4108 is trying to release lock (rcu_read_lock) at: [ 122.705387] [] __wait_on_freeing_inode+0x105/0x350 [ 122.708939] but there are no more locks to release! [ 122.709640] [ 122.709640] other info that might help us debug this: [ 122.710619] 4 locks held by syz-executor.4/4108: [ 122.711341] #0: ffff88800fb1e3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 122.712717] #1: ffff888049a24698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 122.714275] #2: ffff88800fd02950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 122.715650] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 122.717076] [ 122.717076] stack backtrace: [ 122.717771] CPU: 1 UID: 0 PID: 4108 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 122.717807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.717822] Call Trace: [ 122.717832] [ 122.717841] dump_stack_lvl+0xca/0x120 [ 122.717889] ? __wait_on_freeing_inode+0x105/0x350 [ 122.717915] print_unlock_imbalance_bug+0x118/0x130 [ 122.717941] ? __wait_on_freeing_inode+0x105/0x350 [ 122.717968] lock_release+0x1ee/0x270 [ 122.718004] __wait_on_freeing_inode+0x10a/0x350 [ 122.718032] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.718061] ? __pfx_var_wake_function+0x10/0x10 [ 122.718094] ? lock_is_held_type+0x9e/0x120 [ 122.718115] insert_inode_locked+0x25f/0x890 [ 122.718147] __ext4_new_inode+0x223d/0x4cd0 [ 122.718180] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.718215] ? __pfx___dquot_initialize+0x10/0x10 [ 122.718249] ? __pfx_avc_has_perm+0x10/0x10 [ 122.718278] ext4_symlink+0x406/0xb40 [ 122.718314] ? __pfx_ext4_symlink+0x10/0x10 [ 122.718344] ? security_inode_permission+0x72/0xe0 [ 122.718367] vfs_symlink+0x44b/0x840 [ 122.718398] do_symlinkat+0x153/0x440 [ 122.718424] ? __pfx_do_symlinkat+0x10/0x10 [ 122.718449] ? strncpy_from_user+0x21b/0x2f0 [ 122.718482] __x64_sys_symlink+0x79/0xa0 [ 122.718507] do_syscall_64+0xbf/0x420 [ 122.718536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.718566] RIP: 0033:0x7fd7f2eea427 [ 122.718587] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.718613] RSP: 002b:00007ffcd3b0bc38 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 122.718638] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7f2eea427 [ 122.718651] RDX: ffffffffffffffbc RSI: 00007fd7f2f4500e RDI: 00007fd7f2f441dd [ 122.718665] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcd3b0b6b0 [ 122.718678] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 122.718691] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcd3b0bd00 [ 122.718710] [ 122.749479] ------------[ cut here ]------------ [ 122.750170] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/4108 [ 122.751685] Modules linked in: [ 122.752276] CPU: 1 UID: 0 PID: 4108 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 122.753731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 122.754961] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 122.755837] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 122.758505] RSP: 0018:ffff88806cf08cb8 EFLAGS: 00010086 [ 122.759300] RAX: 00000000ffffffff RBX: ffff88800b78b700 RCX: ffffffff81893b34 [ 122.760384] RDX: 0000000000000000 RSI: ffffffff81893b4b RDI: ffff88800b78bafc [ 122.761471] RBP: ffff88800b78b700 R08: 0000000000000000 R09: 0000000000000000 [ 122.762521] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88800b78b700 [ 122.763569] R13: 0000000000000001 R14: ffff88806cf379c0 R15: ffff88806cf37a20 [ 122.764624] FS: 000055557b43b400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 122.765816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.766663] CR2: 000055557b43b708 CR3: 000000004d837000 CR4: 0000000000350ef0 [ 122.767709] Call Trace: [ 122.768183] [ 122.769339] sched_tick+0x232/0x6e0 [ 122.771725] update_process_times+0x116/0x210 [ 122.773586] tick_nohz_handler+0x4ff/0x8c0 [ 122.775171] ? __pfx_tick_nohz_handler+0x10/0x10 [ 122.776179] ? enqueue_task_fair+0x45e/0x20a0 [ 122.777110] ? lock_release+0x1c7/0x270 [ 122.778614] ? __pfx_tick_nohz_handler+0x10/0x10 [ 122.780262] __hrtimer_run_queues+0x654/0xbb0 [ 122.783780] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 122.784652] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 122.787770] hrtimer_interrupt+0x369/0x830 [ 122.791595] __sysvec_apic_timer_interrupt+0xbb/0x300 [ 122.793054] sysvec_apic_timer_interrupt+0x6b/0x80 [ 122.794114] [ 122.794459] [ 122.795114] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.796075] RIP: 0010:__report_bug+0x49d/0x5b0 [ 122.796901] Code: 00 00 00 00 00 fc ff df 48 81 c3 c0 7c 67 86 48 89 de e8 b6 80 b0 fc 49 39 dc 48 c7 c3 c0 7c 67 86 75 3e eb 5e e8 13 86 b0 fc <48> 89 d8 48 c1 e8 03 42 0f b6 14 28 48 89 d8 83 e0 07 83 c0 03 38 [ 122.799492] RSP: 0018:ffff888051067750 EFLAGS: 00000293 [ 122.800263] RAX: 0000000000000000 RBX: ffffffff8667c410 RCX: ffffffff84c4fbdf [ 122.801320] RDX: ffff88800b78b700 RSI: ffffffff84c4fbad RDI: 0000000000000006 [ 122.802388] RBP: ffffffff814244da R08: 0000000000000000 R09: 0000000000000000 [ 122.803426] R10: ffffffff814244da R11: 0000000000000000 R12: ffffffff815d780f [ 122.804557] R13: dffffc0000000000 R14: 0000000000000002 R15: 000000000000000b [ 122.806091] ? __rcu_read_unlock+0x25f/0x5c0 [ 122.806877] ? rescuer_thread+0xcea/0x11b0 [ 122.807938] ? rescuer_thread+0xcea/0x11b0 [ 122.809208] ? __report_bug+0x4cf/0x5b0 [ 122.810078] ? __report_bug+0x49d/0x5b0 [ 122.812440] ? _printk+0xbe/0xf0 [ 122.813378] ? __pfx___report_bug+0x10/0x10 [ 122.815904] ? __is_insn_slot_addr+0x140/0x290 [ 122.817366] ? __is_insn_slot_addr+0x11b/0x290 [ 122.819146] ? __rcu_read_unlock+0x25f/0x5c0 [ 122.820427] report_bug+0x7c/0x120 [ 122.821312] ? __rcu_read_unlock+0x25f/0x5c0 [ 122.822239] handle_bug+0x2e8/0x4f0 [ 122.823113] ? trace_hardirqs_off_finish+0xe3/0x110 [ 122.824946] exc_invalid_op+0x35/0x80 [ 122.826190] asm_exc_invalid_op+0x1a/0x20 [ 122.826987] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 122.827834] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 122.830493] RSP: 0018:ffff8880510679a0 EFLAGS: 00010286 [ 122.831283] RAX: 00000000ffffffff RBX: ffff88800b78b700 RCX: ffffffff815664c7 [ 122.832376] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88800b78bafc [ 122.833437] RBP: ffff88800b78b700 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 122.834507] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800b78b700 [ 122.835585] R13: 0000000000000001 R14: ffffffff85c0f400 R15: ffff888049821628 [ 122.838372] ? nbcon_cpu_emergency_exit+0x117/0x1c0 [ 122.839402] ? nbcon_cpu_emergency_exit+0x120/0x1c0 [ 122.842079] __wait_on_freeing_inode+0x10f/0x350 [ 122.843277] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 122.845134] ? __pfx_var_wake_function+0x10/0x10 [ 122.847125] ? lock_is_held_type+0x9e/0x120 [ 122.848890] insert_inode_locked+0x25f/0x890 [ 122.851614] __ext4_new_inode+0x223d/0x4cd0 [ 122.855735] ? __pfx___ext4_new_inode+0x10/0x10 [ 122.857842] ? __pfx___dquot_initialize+0x10/0x10 [ 122.859186] ? __pfx_avc_has_perm+0x10/0x10 [ 122.862206] ext4_symlink+0x406/0xb40 [ 122.865948] ? __pfx_ext4_symlink+0x10/0x10 [ 122.867642] ? security_inode_permission+0x72/0xe0 [ 122.870360] vfs_symlink+0x44b/0x840 [ 122.872578] do_symlinkat+0x153/0x440 [ 122.874429] ? __pfx_do_symlinkat+0x10/0x10 [ 122.875675] ? strncpy_from_user+0x21b/0x2f0 [ 122.878804] __x64_sys_symlink+0x79/0xa0 [ 122.880110] do_syscall_64+0xbf/0x420 [ 122.881498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.882444] RIP: 0033:0x7fd7f2eea427 [ 122.883114] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 122.885790] RSP: 002b:00007ffcd3b0bc38 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 122.886921] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd7f2eea427 [ 122.887988] RDX: ffffffffffffffbc RSI: 00007fd7f2f4500e RDI: 00007fd7f2f441dd [ 122.889079] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcd3b0b6b0 [ 122.890137] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 122.891197] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcd3b0bd00 [ 122.895514] [ 122.895882] irq event stamp: 623 [ 122.896385] hardirqs last enabled at (623): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 122.897906] hardirqs last disabled at (622): [] _raw_spin_lock_irqsave+0x53/0x60 [ 122.899324] softirqs last enabled at (618): [] kernel_fpu_end+0x59/0x70 [ 122.900660] softirqs last disabled at (616): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 122.902064] ---[ end trace 0000000000000000 ]--- 08:56:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="67ea8efae2a16b8d4d002001040009001f"], 0x20}}, 0x0) [ 122.958233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 08:56:42 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xfb}) [ 122.964606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:42 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="97", 0x1}], 0x1) 08:56:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) [ 123.000166] loop6: detected capacity change from 0 to 512 [ 123.016235] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:56:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) [ 123.070620] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.149205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:56:42 executing program 2: syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xca04, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0xc7, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x0, 0x3, 0x9e}}]}}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4}}]}) 08:56:42 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="97", 0x1}], 0x1) 08:56:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfdef) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r3, 0x0, 0xfdef) 08:56:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 08:56:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 08:56:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="67ea8efae2a16b8d4d002001040009001f"], 0x20}}, 0x0) [ 123.522951] process 'syz-executor.5' launched './file1' with NULL argv: empty string added 08:56:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in=@remote}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) [ 123.548271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.549707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="67ea8efae2a16b8d4d002001040009001f"], 0x20}}, 0x0) 08:56:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 08:56:42 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="97", 0x1}], 0x1) 08:56:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="67ea8efae2a16b8d4d002001040009001f"], 0x20}}, 0x0) 08:56:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in=@remote}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 08:56:42 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="97", 0x1}], 0x1) 08:56:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 08:56:42 executing program 3: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 08:56:42 executing program 0: kexec_load(0x97, 0x1, &(0x7f0000000f80)=[{0x0}], 0x1) 08:56:43 executing program 3: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 08:56:43 executing program 0: kexec_load(0x97, 0x1, &(0x7f0000000f80)=[{0x0}], 0x1) 08:56:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in, @in=@remote}}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) 08:56:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 08:56:43 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 08:56:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0) 08:56:43 executing program 3: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 08:56:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 08:56:43 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b63, 0x4) 08:56:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="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", 0x66a) [ 124.189725] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 0: kexec_load(0x97, 0x1, &(0x7f0000000f80)=[{0x0}], 0x1) [ 124.230778] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 08:56:43 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 3: prctl$PR_SET_MM(0x29, 0x7, &(0x7f0000ffa000/0x4000)=nil) 08:56:43 executing program 0: kexec_load(0x97, 0x1, &(0x7f0000000f80)=[{0x0}], 0x1) 08:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) [ 124.283479] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.343517] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 6: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="d39b705ca526011afca51e21d95b6f3fda83d08e2dbea1807ad7943201c4fa6100dde5b2ece5dffbef17dddf1ce7edd283906646f0b62349443fbc1e19b3fd0928bc27a1f41ca50d7d4a0b98a5220cb71027c63d7af01abfbe2ff9e46305900e37a83b0e881b631acecc2c3971394a525768ee1caadec89afe9fe8bbe5d0355e3bf5f7d8fd02cf8f834ba5593fa63e9fbd1c9142c395ccc2bfa74fc3d1382997166db3fb66b9fe1c432996a1541d5eaf0017d9935ea7608b224ed8d9486e365085446b8fa33aab0468bdae776dcfb8264012b96aa21abb15c5dd0a540961be1c745439bbf84cc79fc05d43b6b4fdf9d4a01ed77752df7053596e2635442b94852e8b7e31c9d1a90b3196e186ce2a987c626eae0356f478e89e76922518da216a6251b4507d36d22d5cb2efb551ff455a129063353556113227bfb68e8876e2b4ebdee4bef6b213871f216c070dd3a67cc624213146e5a99ddbd42275c4be2bfe51e7f817d203f2dfee79784ad6367a9f471c319aa13c44e2078067f8ca7e52202a2c6f28db6d380f3ede85f46aa46e1a9e1176ac44293d354c940db120969050ff825bb8e091345bd2667cd4016b2d4699a2aef5113690a1ed5c632570576a7f8ba0e0c36b3d7705a0999bba7a597c3548ee52e43d110f17b8c9a2424dc05feee35efaf50ca34dda0b9172f3a6b43a4dd545a7267f8db2d5f00213500b6c0112098471768ab5c2871d52dce503f88811e7468dbb0f9a112eaee809ff02901369f1adb7170c77f8206fc4c3e33c9ae12715a9ecb4cdd7f8d719d530025243ee5bd0f6b3dac33a37c57c5787121b3764bf5ff8e0c9ccab59fa30269227cfbad179173680c6584700a643f9f6fcd033fe0681227525d674836db782ab790ed0987b7d2cce1e7f803834f9e45f83dfb850d6b0907260deffb77d4efafc9ea767ae97d6c5b26bc8e936ba7f582cb3d42d4ea077c5c0d5a8fb50f28bcb4bdfda917a65eed4b0371075505f6e1996d55ebaa9c1e77abc8ba233d776a48955818bafb8b82a40c650e60ca092625e22e2e88c5f1d0a74a0be8bd9660d825a54442ccf4b50bb89410de07ea9f6fe86a3676d691c0129e318cf1eeb41e5d5f62b25533a480e5652d630f5ba9e7aeb5d6076cfbab6537bab175a31c78cbdfe7918cd45fbb6567c4f65e4019577b8355d8be5004c178e7aa86e05b9348d9133a38dcb3db0bd924bdd2aaa9b76b68b9112ac6051683734e8c53ad7bbd12f9e1cd61e0ed6f29e60573672f25ca9a1e01fa638fd79542bab0ce062047491b360f4b073e7f9c26c3bb4954e6912f186d69eba010a724de474bbf8f7f8517187128fa2cdf172002ca0876fdd93d89ada3f6c031522165531c2821f6e5273555857dfd5116153b1dbd4ed57a298f8db4316542a7dc025faca56c9a1ec0b7a2342ed276f10437979dc5f9f652c804fbf343873fe2f55b05915e4f36a7e5344701f975362ab14bed7e8a8a20aa7830d96f0e17f71b1a67ed07091fca937144205d157438e9fad362ea89ab176a123fd7fa2974e706dbf8180488c9b2376e571b46a67ba48ad9752015f2113ec1ff9bb7bbbaae3108991c4c6c1a4d9d8983944aca465739a11aef164d128e19fdd464eb3f29e63e0ba5ba9b819b30a43eb40c95480bbb550a98b4167b0fca2bfba263eac572fb87bc38e1f5d82cb34955e1b146cecb7fc31e2d0c444c7fbaa3cbf4f405118cb0b869e9d247006adc3fd95b3075b0791c1187d24f2afd0afef513deed3ac8a523c3e58f019a3878c6460b78097af59921051c82427d491a11c7c0cb4f4b1dec1455422e470c7195424603ad57ba0b2bf03bfde0ae72bbf04b9a4a18fc995cf8eb0ea370acf6899d0225e954ab7e50c956bd4f23c5536889ad2c3f91e20e29733b56570883a964bb20e51342cfd638c24f2a3b4998eccd00416dd3156631bab69ee5eaf1b006f0389052cbc3de4fc6090a10f36ddcb0dd418f7af088ef4e2268fc2d411e169a8b84cd4f8f90f0edb71f0187badff56600e95037028ecd6400cb6184035aad858f62ba410c5745acc3d8bd34647013eddf0cda95e3ff991cbf77dc9a9923338fb78afc1e5137a206ff034a12995758fc2d05ee436eff15ca93c2738fa15f7781e5add905155b280860d7e02af2652b286de3c21b3c9c9721e86f74d125b3b720c484c9913755d267bc36e63124594e49c68a1c401f3137056df1ec319e1f45f19ed422327f615e421edae63c14b8abcaa3c8727c4f78d25fafb61bfe8951736208d513cbece734262cfbea3c5a8ea0116f5eb183bd284eb319b002321", 0x66a) 08:56:43 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDRT(r0, 0x80108906, 0x0) 08:56:43 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b63, 0x4) 08:56:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="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", 0x66a) 08:56:43 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.461801] Bluetooth: Unexpected continuation frame (len 12) [ 124.484485] Bluetooth: Unexpected continuation frame (len 12) [ 124.501480] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 6: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.525325] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="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", 0x66a) [ 124.578501] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="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", 0x66a) 08:56:43 executing program 6: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.585607] Bluetooth: Unexpected continuation frame (len 12) [ 124.607526] Bluetooth: Unexpected continuation frame (len 12) [ 124.627504] Bluetooth: Unexpected continuation frame (len 12) [ 124.648506] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b63, 0x4) 08:56:43 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:43 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.723159] Bluetooth: Unexpected continuation frame (len 12) 08:56:43 executing program 7: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.725462] Bluetooth: Unexpected continuation frame (len 12) [ 124.733510] Bluetooth: Unexpected continuation frame (len 12) [ 124.744509] Bluetooth: Unexpected continuation frame (len 12) [ 124.824570] Bluetooth: Unexpected continuation frame (len 12) [ 124.876518] Bluetooth: Unexpected continuation frame (len 12) [ 124.881554] Bluetooth: Unexpected continuation frame (len 12) 08:56:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="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", 0x66a) 08:56:44 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:44 executing program 1: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000240)="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", 0x66a) 08:56:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c00)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local}, 0xa, @in=@dev, 0x0, 0x4c3843049ffc25cc}}, 0xe8) 08:56:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan1\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x12}}) 08:56:44 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:44 executing program 2: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b63, 0x4) 08:56:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c00)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local}, 0xa, @in=@dev, 0x0, 0x4c3843049ffc25cc}}, 0xe8) 08:56:44 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) [ 124.963608] Bluetooth: Unexpected continuation frame (len 12) [ 124.968488] Bluetooth: Unexpected continuation frame (len 12) [ 125.015540] Bluetooth: Unexpected continuation frame (len 12) [ 125.084008] Bluetooth: Unexpected continuation frame (len 12) 08:56:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan1\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x12}}) 08:56:44 executing program 5: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x9bc, 0x0, &(0x7f0000000180), 0x0, 0x0) 08:56:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c00)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local}, 0xa, @in=@dev, 0x0, 0x4c3843049ffc25cc}}, 0xe8) 08:56:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 08:56:44 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x4, 0x7f, 0x2) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/98) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xcd, 0xc9, 0xe1}}}, 0x7) syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x15}, "3a17fc28d0c77d8cfb67c73eb7ee925d2406525e22"}}, 0x18) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0xcd, 0x1000, 0x3) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "94cf098190378f1199ada0a0e68393dee58eb3785c255ebc5ac1c7ddd8e19ea08f4314344363feb05df1f5f0ef5cf98692baca898be239240a9ce6e3c7cff1e1c22c4301224bd976a37ead4c408bbfef4d0ab5c906de850c018fe8ad54e80443ec8cd9fcede98aeef82ea24ba516bcedfba8e17f154ff2e610d027d6a5d281e0ea0106ba48958e2986210b3c48792f4f8e4bcf667647a5b7767f3f438d5fb1805a2a89d49111d60ee259f2b788630d584bff8187eca6cbb6431db2"}, 0xbf) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x33}, @l2cap_cid_signaling={{0x2f}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x5a, 0x2}, {0x80}}, @l2cap_conn_req={{0x2, 0x1, 0x4}, {0x4, 0x1ff}}, @l2cap_info_req={{0xa, 0x2, 0x2}, {0x81}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0xe9, 0x1}}, @l2cap_conf_req={{0x4, 0x5, 0xf}, {0x3, 0x100, [@l2cap_conf_mtu={0x1, 0x2, 0xdd8b}, @l2cap_conf_flushto={0x2, 0x2, 0xdffa}, @l2cap_conf_fcs={0x5, 0x1}]}}]}}, 0x38) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xd9, 0x4}, {0x7, 0xff81}}}}, 0x11) 08:56:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) ioctl$BLKROSET(r0, 0x801070cf, 0x0) [ 125.247421] loop1: detected capacity change from 0 to 4 08:56:44 executing program 4: shmctl$IPC_INFO(0x0, 0x3, 0x0) [ 125.275591] Bluetooth: Unexpected continuation frame (len 12) 08:56:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan1\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x12}}) [ 125.302676] Bluetooth: Unexpected continuation frame (len 12) 08:56:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) readlink(0x0, 0x0, 0x0) 08:56:44 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) ioctl$BLKROSET(r0, 0x801070cf, 0x0) 08:56:44 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c00)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local}, 0xa, @in=@dev, 0x0, 0x4c3843049ffc25cc}}, 0xe8) 08:56:44 executing program 4: shmctl$IPC_INFO(0x0, 0x3, 0x0) 08:56:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) readlink(0x0, 0x0, 0x0) 08:56:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[], [{@defcontext={'defcontext', 0x3d, 'root'}, 0x22}]}) 08:56:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan1\x00', &(0x7f0000000300)=@ethtool_pauseparam={0x12}}) 08:56:44 executing program 4: shmctl$IPC_INFO(0x0, 0x3, 0x0) 08:56:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000280)) [ 125.447765] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 [ 125.451576] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 08:56:44 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) readlink(0x0, 0x0, 0x0) 08:56:44 executing program 5: syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[], [{@defcontext={'defcontext', 0x3d, 'root'}, 0x22}]}) [ 125.522579] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 08:56:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) ioctl$BLKROSET(r0, 0x801070cf, 0x0) 08:56:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000280)) 08:56:45 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) readlink(0x0, 0x0, 0x0) 08:56:45 executing program 4: shmctl$IPC_INFO(0x0, 0x3, 0x0) 08:56:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[], [{@defcontext={'defcontext', 0x3d, 'root'}, 0x22}]}) 08:56:45 executing program 7: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 08:56:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) [ 125.870356] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 08:56:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)={[], [{@defcontext={'defcontext', 0x3d, 'root'}, 0x22}]}) 08:56:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 08:56:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x101e) 08:56:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(0x0, r1, 0x0) ioctl$BLKROSET(r0, 0x801070cf, 0x0) 08:56:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000280)) [ 125.954344] SELinux: security_context_str_to_sid (root,errors=continue) failed with errno=-22 08:56:45 executing program 7: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 5: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') lseek(r0, 0x0, 0x2) 08:56:45 executing program 7: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x10, 0x0, &(0x7f0000000280)) 08:56:45 executing program 5: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x101e) 08:56:45 executing program 5: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB="2321202e2f66696c653020207b20242a2a2c20295c48202e28294023250a663fe7b89caf2253632352aa781568a42f51dff242c4f5ad67ca81cb4404dce84259aac48045cf02f2a81bf40ac23c319ab26a3f01cc6634b83584d3754e49e2b115c25523f45ac9bbdfd8e7cb4af165daba43b3ecaeaf9f8bdb6f4eef2b1a01fff3c1f53cbc6d13da5aab77adb40410234b9befeeb52202d847edd2bd9f4769e42654a5f425317255bd497a405612d8426df8634ca286252773005f5dcd0fca35ad559fac5b29e773c074b009e7e6426e300936c852873d37b67e10d0d85195468c038be556118b85c7476b97ffd76e4763ad1dc2710b7f6c5a500b4cbb8d3e4d768cbf414c36123e78f8a281de37d4407f04f50ecbec278dc71550cf665aeae11ea279589069f10070b94d6676e03a5b7d7748bd141258d3b618b4f34889e2ae79e8f18d30ac1614111afb03450c2ba9066d3be75be34c4eb902607b76f96161ea7478ff2077b5158412d0a9af463f203a76a06f2d239c5a484d0066290e77bed2ff803272b0a5eb9daec2fc51c3a3e118d7f64e7560284f939add29cf3eeb59689c4bb01b82e36697f7e35ac7b3d6f455c763c1fdebd07fc4613aeb664baeabcd051b0d5b5757b84ea643d5c8478a994c0e7edb36497fc27585e5013cdddc0a6c505a5b8d678161032857cc05d23bd86116e1f76f6447ef75d29800223b65d595af683413303dc3f47b2208551294fd74a472a9b37fad4e1c791926fa99c5a7dd8c39f67de4c438f7cf322f258270682431394e7de6e1584bdab8d71979ec98c0a2ab2d4a65f0050b92e97652d08f81ce739abad80a6254cd3b764789b16f2d4682834b11a3838496119902667bbea34a0cd5f624be984bcd43aa3f8ef9ad7e08f31350918186c0acf2c616cfce3dc89ec44244271f17706d68f3c7d83906fc8bdc573c1e7852d06a88a4a06500d89ec3a79e1816503b19ea6b6c32a3aa64ecb6aaea581bc7a7b057ab2d85dccc2568ee81f2c9bdfbe232279d966ef0ca467e5a424a3b494923d96eed339a064c0128a65c3e0f7e903fc84ed6e6f7146eb6622c070a0628e1b90538ef12ef13fa7dd3cdf8fb0bbb385830c354d9f0171f4841521451ced29bf26dc2cc82000d3c07f5b114548b7eba1c7bb608a00aa1bac9fc6bb0168f60096ca8a0b671b7ae88c04f45de651c38cad24b5617dfa503911d050e8db4e7f0ea48db4c6fbd547e5ef2ef323c904e3738304a99e6e0ff5d515ddc46c365665f16bf08051aaa2020c8552af651b02862ea553dd860e60ea0b27cb7b1905173f03e34298a686b38d304e30c6ac6c4b31f6ac60bd2ca031a9ac761c3123ba6be8fcc65bf2bbb141b78e2cb9e635619187bb721effd58125793538bf8686eb3647a62e67fe1e999e73293ab5f555091c09b71"], 0x101e) [ 126.231769] Bluetooth: hci1: command 0x0406 tx timeout 08:56:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') lseek(r0, 0x0, 0x2) [ 126.488481] Bluetooth: hci6: command 0x0406 tx timeout [ 126.488490] Bluetooth: hci4: command 0x0406 tx timeout 08:56:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 08:56:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r2, r3, 0x0, 0xfdef) 08:56:45 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x541b, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:56:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000001b80)=ANY=[@ANYBLOB="2321202e2f66696c653020207b20242a2a2c20295c48202e28294023250a663fe7b89caf2253632352aa781568a42f51dff242c4f5ad67ca81cb4404dce84259aac48045cf02f2a81bf40ac23c319ab26a3f01cc6634b835 VM DIAGNOSIS: 08:56:42 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888050317950 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff1100a062f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888050317988 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555592338400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007efc41e37546 CR3=000000000c230000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82977eb0 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff888051067450 R8 =0000000000000000 R9 =ffffed10016dc046 R10=00000000000fe503 R11=6666666666663c5b R12=0000000000000823 R13=0000000000000020 R14=fffffbfff1138392 R15=dffffc0000000000 RIP=ffffffff82977f05 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557b43b400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557b43b708 CR3=000000004d837000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000