Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:45237' (ECDSA) to the list of known hosts. 2024/12/04 08:53:00 fuzzer started 2024/12/04 08:53:01 dialing manager at localhost:46591 syzkaller login: [ 53.956330] cgroup: Unknown subsys name 'net' [ 54.068132] cgroup: Unknown subsys name 'cpuset' [ 54.099791] cgroup: Unknown subsys name 'rlimit' 2024/12/04 08:53:20 syscalls: 2217 2024/12/04 08:53:20 code coverage: enabled 2024/12/04 08:53:20 comparison tracing: enabled 2024/12/04 08:53:20 extra coverage: enabled 2024/12/04 08:53:20 setuid sandbox: enabled 2024/12/04 08:53:20 namespace sandbox: enabled 2024/12/04 08:53:20 Android sandbox: enabled 2024/12/04 08:53:20 fault injection: enabled 2024/12/04 08:53:20 leak checking: enabled 2024/12/04 08:53:20 net packet injection: enabled 2024/12/04 08:53:20 net device setup: enabled 2024/12/04 08:53:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/04 08:53:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/04 08:53:20 USB emulation: enabled 2024/12/04 08:53:20 hci packet injection: enabled 2024/12/04 08:53:20 wifi device emulation: enabled 2024/12/04 08:53:20 802.15.4 emulation: enabled 2024/12/04 08:53:20 fetching corpus: 0, signal 0/2000 (executing program) 2024/12/04 08:53:20 fetching corpus: 43, signal 21388/24973 (executing program) 2024/12/04 08:53:20 fetching corpus: 91, signal 28466/33613 (executing program) 2024/12/04 08:53:20 fetching corpus: 140, signal 38189/44692 (executing program) 2024/12/04 08:53:20 fetching corpus: 190, signal 45554/53284 (executing program) 2024/12/04 08:53:20 fetching corpus: 240, signal 52253/61146 (executing program) 2024/12/04 08:53:20 fetching corpus: 290, signal 57826/67821 (executing program) 2024/12/04 08:53:20 fetching corpus: 340, signal 62844/73882 (executing program) 2024/12/04 08:53:20 fetching corpus: 390, signal 65761/77902 (executing program) 2024/12/04 08:53:21 fetching corpus: 440, signal 67479/80803 (executing program) 2024/12/04 08:53:21 fetching corpus: 490, signal 70156/84509 (executing program) 2024/12/04 08:53:21 fetching corpus: 540, signal 73949/89173 (executing program) 2024/12/04 08:53:21 fetching corpus: 590, signal 77677/93648 (executing program) 2024/12/04 08:53:21 fetching corpus: 638, signal 81201/97914 (executing program) 2024/12/04 08:53:21 fetching corpus: 688, signal 83462/101045 (executing program) 2024/12/04 08:53:21 fetching corpus: 738, signal 85272/103768 (executing program) 2024/12/04 08:53:21 fetching corpus: 788, signal 87178/106490 (executing program) 2024/12/04 08:53:21 fetching corpus: 838, signal 89400/109507 (executing program) 2024/12/04 08:53:22 fetching corpus: 888, signal 92626/113280 (executing program) 2024/12/04 08:53:22 fetching corpus: 938, signal 93876/115397 (executing program) 2024/12/04 08:53:22 fetching corpus: 988, signal 95512/117774 (executing program) 2024/12/04 08:53:22 fetching corpus: 1038, signal 98375/121085 (executing program) 2024/12/04 08:53:22 fetching corpus: 1088, signal 99432/122903 (executing program) 2024/12/04 08:53:22 fetching corpus: 1138, signal 100798/124910 (executing program) 2024/12/04 08:53:22 fetching corpus: 1188, signal 102220/126984 (executing program) 2024/12/04 08:53:22 fetching corpus: 1238, signal 103728/129127 (executing program) 2024/12/04 08:53:22 fetching corpus: 1288, signal 104799/130863 (executing program) 2024/12/04 08:53:22 fetching corpus: 1338, signal 106725/133206 (executing program) 2024/12/04 08:53:23 fetching corpus: 1387, signal 107779/134929 (executing program) 2024/12/04 08:53:23 fetching corpus: 1437, signal 108783/136566 (executing program) 2024/12/04 08:53:23 fetching corpus: 1487, signal 109900/138269 (executing program) 2024/12/04 08:53:23 fetching corpus: 1537, signal 110989/139978 (executing program) 2024/12/04 08:53:23 fetching corpus: 1587, signal 112033/141584 (executing program) 2024/12/04 08:53:23 fetching corpus: 1637, signal 113164/143244 (executing program) 2024/12/04 08:53:23 fetching corpus: 1687, signal 114356/144905 (executing program) 2024/12/04 08:53:23 fetching corpus: 1737, signal 115294/146423 (executing program) 2024/12/04 08:53:23 fetching corpus: 1787, signal 116297/147921 (executing program) 2024/12/04 08:53:23 fetching corpus: 1837, signal 117621/149629 (executing program) 2024/12/04 08:53:23 fetching corpus: 1887, signal 118706/151085 (executing program) 2024/12/04 08:53:24 fetching corpus: 1937, signal 119250/152283 (executing program) 2024/12/04 08:53:24 fetching corpus: 1987, signal 120714/153925 (executing program) 2024/12/04 08:53:24 fetching corpus: 2037, signal 121426/155157 (executing program) 2024/12/04 08:53:24 fetching corpus: 2087, signal 122427/156554 (executing program) 2024/12/04 08:53:24 fetching corpus: 2137, signal 124160/158366 (executing program) 2024/12/04 08:53:24 fetching corpus: 2187, signal 124797/159515 (executing program) 2024/12/04 08:53:24 fetching corpus: 2237, signal 125951/160879 (executing program) 2024/12/04 08:53:24 fetching corpus: 2287, signal 126655/162071 (executing program) 2024/12/04 08:53:24 fetching corpus: 2337, signal 127165/163077 (executing program) 2024/12/04 08:53:24 fetching corpus: 2387, signal 127752/164134 (executing program) 2024/12/04 08:53:24 fetching corpus: 2437, signal 128443/165236 (executing program) 2024/12/04 08:53:25 fetching corpus: 2487, signal 129547/166515 (executing program) 2024/12/04 08:53:25 fetching corpus: 2537, signal 130969/167933 (executing program) 2024/12/04 08:53:25 fetching corpus: 2587, signal 131696/168970 (executing program) 2024/12/04 08:53:25 fetching corpus: 2636, signal 132347/170004 (executing program) 2024/12/04 08:53:25 fetching corpus: 2685, signal 133103/171073 (executing program) 2024/12/04 08:53:25 fetching corpus: 2735, signal 133855/172078 (executing program) 2024/12/04 08:53:25 fetching corpus: 2785, signal 134900/173196 (executing program) 2024/12/04 08:53:25 fetching corpus: 2835, signal 135729/174257 (executing program) 2024/12/04 08:53:25 fetching corpus: 2885, signal 136753/175362 (executing program) 2024/12/04 08:53:25 fetching corpus: 2935, signal 137501/176320 (executing program) 2024/12/04 08:53:26 fetching corpus: 2985, signal 139153/177651 (executing program) 2024/12/04 08:53:26 fetching corpus: 3034, signal 139963/178621 (executing program) 2024/12/04 08:53:26 fetching corpus: 3083, signal 141031/179663 (executing program) 2024/12/04 08:53:26 fetching corpus: 3133, signal 141569/180435 (executing program) 2024/12/04 08:53:26 fetching corpus: 3183, signal 142395/181343 (executing program) 2024/12/04 08:53:26 fetching corpus: 3232, signal 143014/182148 (executing program) 2024/12/04 08:53:26 fetching corpus: 3282, signal 143687/183012 (executing program) 2024/12/04 08:53:26 fetching corpus: 3332, signal 144395/183829 (executing program) 2024/12/04 08:53:26 fetching corpus: 3382, signal 144968/184607 (executing program) 2024/12/04 08:53:26 fetching corpus: 3432, signal 145771/185464 (executing program) 2024/12/04 08:53:27 fetching corpus: 3482, signal 146466/186219 (executing program) 2024/12/04 08:53:27 fetching corpus: 3532, signal 147099/186992 (executing program) 2024/12/04 08:53:27 fetching corpus: 3582, signal 147454/187676 (executing program) 2024/12/04 08:53:27 fetching corpus: 3632, signal 147897/188381 (executing program) 2024/12/04 08:53:27 fetching corpus: 3682, signal 148397/189031 (executing program) 2024/12/04 08:53:27 fetching corpus: 3731, signal 149064/189761 (executing program) 2024/12/04 08:53:27 fetching corpus: 3780, signal 149487/190375 (executing program) 2024/12/04 08:53:27 fetching corpus: 3829, signal 149900/190982 (executing program) 2024/12/04 08:53:27 fetching corpus: 3879, signal 150362/191598 (executing program) 2024/12/04 08:53:27 fetching corpus: 3929, signal 151004/192257 (executing program) 2024/12/04 08:53:27 fetching corpus: 3979, signal 151551/192897 (executing program) 2024/12/04 08:53:28 fetching corpus: 4029, signal 152048/193507 (executing program) 2024/12/04 08:53:28 fetching corpus: 4078, signal 152662/194072 (executing program) 2024/12/04 08:53:28 fetching corpus: 4128, signal 153120/194622 (executing program) 2024/12/04 08:53:28 fetching corpus: 4178, signal 153519/195155 (executing program) 2024/12/04 08:53:28 fetching corpus: 4228, signal 154000/195706 (executing program) 2024/12/04 08:53:28 fetching corpus: 4277, signal 154323/196254 (executing program) 2024/12/04 08:53:28 fetching corpus: 4327, signal 154801/196808 (executing program) 2024/12/04 08:53:28 fetching corpus: 4377, signal 155282/197345 (executing program) 2024/12/04 08:53:28 fetching corpus: 4427, signal 155722/197868 (executing program) 2024/12/04 08:53:28 fetching corpus: 4477, signal 156024/198397 (executing program) 2024/12/04 08:53:29 fetching corpus: 4527, signal 156603/198918 (executing program) 2024/12/04 08:53:29 fetching corpus: 4577, signal 157033/199419 (executing program) 2024/12/04 08:53:29 fetching corpus: 4627, signal 157533/199929 (executing program) 2024/12/04 08:53:29 fetching corpus: 4677, signal 157953/200407 (executing program) 2024/12/04 08:53:29 fetching corpus: 4727, signal 158363/200832 (executing program) 2024/12/04 08:53:29 fetching corpus: 4777, signal 159003/201329 (executing program) 2024/12/04 08:53:29 fetching corpus: 4827, signal 159643/201809 (executing program) 2024/12/04 08:53:29 fetching corpus: 4877, signal 160262/202262 (executing program) 2024/12/04 08:53:29 fetching corpus: 4927, signal 160682/202720 (executing program) 2024/12/04 08:53:29 fetching corpus: 4977, signal 161016/203139 (executing program) 2024/12/04 08:53:30 fetching corpus: 5027, signal 161333/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5077, signal 161666/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5127, signal 162017/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5177, signal 162609/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5226, signal 163253/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5276, signal 163731/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5326, signal 164128/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5375, signal 164706/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5425, signal 165023/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5475, signal 165621/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5524, signal 165941/203468 (executing program) 2024/12/04 08:53:30 fetching corpus: 5574, signal 166274/203468 (executing program) 2024/12/04 08:53:31 fetching corpus: 5624, signal 166564/203468 (executing program) 2024/12/04 08:53:31 fetching corpus: 5674, signal 166905/203469 (executing program) 2024/12/04 08:53:31 fetching corpus: 5724, signal 168338/203469 (executing program) 2024/12/04 08:53:31 fetching corpus: 5774, signal 168686/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 5824, signal 169021/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 5874, signal 169356/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 5924, signal 169590/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 5973, signal 169871/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 6023, signal 170285/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 6071, signal 170695/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 6121, signal 170963/203473 (executing program) 2024/12/04 08:53:31 fetching corpus: 6170, signal 171351/203473 (executing program) 2024/12/04 08:53:32 fetching corpus: 6220, signal 171742/203473 (executing program) 2024/12/04 08:53:32 fetching corpus: 6270, signal 172191/203473 (executing program) 2024/12/04 08:53:32 fetching corpus: 6320, signal 172562/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6370, signal 172967/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6420, signal 173411/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6469, signal 173765/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6519, signal 174179/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6569, signal 174473/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6619, signal 174885/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6669, signal 175111/203474 (executing program) 2024/12/04 08:53:32 fetching corpus: 6717, signal 175460/203474 (executing program) 2024/12/04 08:53:33 fetching corpus: 6767, signal 175945/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 6817, signal 176414/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 6867, signal 176753/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 6917, signal 177022/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 6967, signal 177542/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 7017, signal 177830/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 7067, signal 178029/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 7117, signal 178342/203483 (executing program) 2024/12/04 08:53:33 fetching corpus: 7166, signal 178607/203487 (executing program) 2024/12/04 08:53:33 fetching corpus: 7216, signal 179037/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7266, signal 179371/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7316, signal 179814/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7366, signal 179999/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7416, signal 180182/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7466, signal 180410/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7516, signal 180805/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7566, signal 181276/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7616, signal 181603/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7666, signal 181879/203487 (executing program) 2024/12/04 08:53:34 fetching corpus: 7716, signal 182229/203487 (executing program) 2024/12/04 08:53:35 fetching corpus: 7766, signal 182484/203487 (executing program) 2024/12/04 08:53:35 fetching corpus: 7816, signal 182737/203487 (executing program) 2024/12/04 08:53:35 fetching corpus: 7866, signal 183022/203487 (executing program) 2024/12/04 08:53:35 fetching corpus: 7915, signal 183364/203487 (executing program) 2024/12/04 08:53:35 fetching corpus: 7965, signal 183699/203487 (executing program) 2024/12/04 08:53:35 fetching corpus: 8014, signal 184052/203498 (executing program) 2024/12/04 08:53:35 fetching corpus: 8064, signal 184340/203498 (executing program) 2024/12/04 08:53:35 fetching corpus: 8114, signal 184609/203498 (executing program) 2024/12/04 08:53:35 fetching corpus: 8164, signal 184875/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8213, signal 185356/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8262, signal 185634/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8312, signal 185961/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8362, signal 186146/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8412, signal 186474/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8462, signal 186801/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8512, signal 187060/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8562, signal 187223/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8612, signal 187486/203498 (executing program) 2024/12/04 08:53:36 fetching corpus: 8662, signal 187665/203498 (executing program) 2024/12/04 08:53:37 fetching corpus: 8712, signal 187983/203498 (executing program) 2024/12/04 08:53:37 fetching corpus: 8762, signal 188150/203498 (executing program) 2024/12/04 08:53:37 fetching corpus: 8812, signal 188405/203502 (executing program) 2024/12/04 08:53:37 fetching corpus: 8862, signal 188647/203502 (executing program) 2024/12/04 08:53:37 fetching corpus: 8912, signal 188892/203502 (executing program) 2024/12/04 08:53:37 fetching corpus: 8961, signal 189178/203502 (executing program) 2024/12/04 08:53:37 fetching corpus: 9010, signal 189405/203502 (executing program) 2024/12/04 08:53:37 fetching corpus: 9060, signal 189617/203502 (executing program) 2024/12/04 08:53:37 fetching corpus: 9110, signal 189817/203506 (executing program) 2024/12/04 08:53:37 fetching corpus: 9160, signal 190076/203506 (executing program) 2024/12/04 08:53:38 fetching corpus: 9209, signal 190311/203506 (executing program) 2024/12/04 08:53:38 fetching corpus: 9259, signal 190592/203506 (executing program) 2024/12/04 08:53:38 fetching corpus: 9309, signal 191013/203506 (executing program) 2024/12/04 08:53:38 fetching corpus: 9358, signal 191279/203512 (executing program) 2024/12/04 08:53:38 fetching corpus: 9408, signal 191460/203512 (executing program) 2024/12/04 08:53:38 fetching corpus: 9457, signal 191637/203512 (executing program) 2024/12/04 08:53:38 fetching corpus: 9507, signal 191853/203512 (executing program) 2024/12/04 08:53:38 fetching corpus: 9557, signal 192075/203512 (executing program) 2024/12/04 08:53:39 fetching corpus: 9606, signal 192256/203512 (executing program) 2024/12/04 08:53:39 fetching corpus: 9654, signal 192457/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 9704, signal 192702/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 9753, signal 192960/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 9802, signal 193230/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 9852, signal 193432/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 9902, signal 193602/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 9951, signal 193897/203514 (executing program) 2024/12/04 08:53:39 fetching corpus: 10001, signal 194157/203522 (executing program) 2024/12/04 08:53:39 fetching corpus: 10051, signal 194382/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10101, signal 194530/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10151, signal 194700/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10201, signal 194855/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10251, signal 195050/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10300, signal 195258/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10350, signal 195447/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10400, signal 195634/203522 (executing program) 2024/12/04 08:53:40 fetching corpus: 10448, signal 195779/203523 (executing program) 2024/12/04 08:53:40 fetching corpus: 10498, signal 196028/203523 (executing program) 2024/12/04 08:53:41 fetching corpus: 10548, signal 196220/203523 (executing program) 2024/12/04 08:53:41 fetching corpus: 10598, signal 196459/203524 (executing program) 2024/12/04 08:53:41 fetching corpus: 10648, signal 196690/203524 (executing program) 2024/12/04 08:53:41 fetching corpus: 10698, signal 196965/203524 (executing program) 2024/12/04 08:53:41 fetching corpus: 10748, signal 197124/203524 (executing program) 2024/12/04 08:53:41 fetching corpus: 10798, signal 197320/203524 (executing program) 2024/12/04 08:53:41 fetching corpus: 10848, signal 197746/203524 (executing program) 2024/12/04 08:53:41 fetching corpus: 10897, signal 197917/203524 (executing program) 2024/12/04 08:53:42 fetching corpus: 10947, signal 198124/203524 (executing program) 2024/12/04 08:53:42 fetching corpus: 10997, signal 198245/203524 (executing program) 2024/12/04 08:53:42 fetching corpus: 11047, signal 198480/203524 (executing program) 2024/12/04 08:53:42 fetching corpus: 11097, signal 198690/203528 (executing program) 2024/12/04 08:53:42 fetching corpus: 11147, signal 198851/203528 (executing program) 2024/12/04 08:53:42 fetching corpus: 11196, signal 199094/203528 (executing program) 2024/12/04 08:53:42 fetching corpus: 11246, signal 199247/203528 (executing program) 2024/12/04 08:53:42 fetching corpus: 11296, signal 199497/203528 (executing program) 2024/12/04 08:53:42 fetching corpus: 11346, signal 199698/203528 (executing program) 2024/12/04 08:53:42 fetching corpus: 11395, signal 199926/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11445, signal 200173/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11495, signal 200326/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11545, signal 200544/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11595, signal 200731/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11645, signal 200922/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11695, signal 201073/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11744, signal 201260/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11794, signal 201394/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11844, signal 201579/203528 (executing program) 2024/12/04 08:53:43 fetching corpus: 11892, signal 201774/203535 (executing program) 2024/12/04 08:53:43 fetching corpus: 11940, signal 201956/203535 (executing program) 2024/12/04 08:53:43 fetching corpus: 11945, signal 201962/203535 (executing program) 2024/12/04 08:53:43 fetching corpus: 11945, signal 201962/203535 (executing program) 2024/12/04 08:53:46 starting 8 fuzzer processes 08:53:46 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/256, 0x100, 0x10000) 08:53:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x10040a8, &(0x7f00000000c0)={[{@data_journal}]}) 08:53:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) [ 98.910173] audit: type=1400 audit(1733302426.577:7): avc: denied { execmem } for pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:53:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000800), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) 08:53:46 executing program 5: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81002e1b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 08:53:46 executing program 4: syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}, 0x65) 08:53:46 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f0000000840)) 08:53:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) fcntl$notify(r0, 0x402, 0x8000003c) r1 = dup(r0) dup2(r1, r0) [ 100.243586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.245188] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.246530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.249081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.250718] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.251605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.305560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.309784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.318131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.324310] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.331950] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.334197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.376578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.378469] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.380035] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.381259] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.382987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.387203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.392884] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.394299] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.396957] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.401768] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.404955] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.415799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.455856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.463989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.482720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.495016] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.506372] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.508665] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 100.515988] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 100.525894] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.545973] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.600510] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 100.601920] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.606001] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.608141] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.614982] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 100.622012] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 100.626922] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 100.630736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 100.633872] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 100.636167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 100.637978] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 100.642136] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 100.722913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 100.741996] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 100.749334] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 102.277210] Bluetooth: hci0: command tx timeout [ 102.404755] Bluetooth: hci1: command tx timeout [ 102.468793] Bluetooth: hci3: command tx timeout [ 102.469257] Bluetooth: hci2: command tx timeout [ 102.597074] Bluetooth: hci4: command tx timeout [ 102.660849] Bluetooth: hci6: command tx timeout [ 102.724797] Bluetooth: hci5: command tx timeout [ 102.788794] Bluetooth: hci7: command tx timeout [ 104.325339] Bluetooth: hci0: command tx timeout [ 104.452753] Bluetooth: hci1: command tx timeout [ 104.517687] Bluetooth: hci3: command tx timeout [ 104.517719] Bluetooth: hci2: command tx timeout [ 104.646757] Bluetooth: hci4: command tx timeout [ 104.708715] Bluetooth: hci6: command tx timeout [ 104.774654] Bluetooth: hci5: command tx timeout [ 104.836752] Bluetooth: hci7: command tx timeout [ 106.373804] Bluetooth: hci0: command tx timeout [ 106.500765] Bluetooth: hci1: command tx timeout [ 106.564988] Bluetooth: hci3: command tx timeout [ 106.565779] Bluetooth: hci2: command tx timeout [ 106.693680] Bluetooth: hci4: command tx timeout [ 106.757687] Bluetooth: hci6: command tx timeout [ 106.821708] Bluetooth: hci5: command tx timeout [ 106.885677] Bluetooth: hci7: command tx timeout [ 108.421155] Bluetooth: hci0: command tx timeout [ 108.550663] Bluetooth: hci1: command tx timeout [ 108.612871] Bluetooth: hci2: command tx timeout [ 108.613309] Bluetooth: hci3: command tx timeout [ 108.743649] Bluetooth: hci4: command tx timeout [ 108.804885] Bluetooth: hci6: command tx timeout [ 108.868719] Bluetooth: hci5: command tx timeout [ 108.932741] Bluetooth: hci7: command tx timeout [ 163.093568] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.096534] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.100225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.107483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.111038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.113232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.171699] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.174502] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.176485] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.180511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.189292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.196023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.199989] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.207135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 163.212115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.223316] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.233058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.236303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.242039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.249498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.257076] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.259230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.262503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.264506] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.280015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.293893] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.299974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.301343] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.306073] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.308286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.311423] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.315009] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.317086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.317899] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.320123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.330145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.365093] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.370179] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.384059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.384457] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.393910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.393955] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.418253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.420265] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.422366] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.426117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.428064] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.429876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 165.124718] Bluetooth: hci0: command tx timeout [ 165.316822] Bluetooth: hci2: command tx timeout [ 165.380739] Bluetooth: hci3: command tx timeout [ 165.380870] Bluetooth: hci1: command tx timeout [ 165.381490] Bluetooth: hci5: command tx timeout [ 165.444920] Bluetooth: hci4: command tx timeout [ 165.508710] Bluetooth: hci7: command tx timeout [ 165.509290] Bluetooth: hci6: command tx timeout [ 167.173239] Bluetooth: hci0: command tx timeout [ 167.365870] Bluetooth: hci2: command tx timeout [ 167.430779] Bluetooth: hci3: command tx timeout [ 167.431246] Bluetooth: hci1: command tx timeout [ 167.432200] Bluetooth: hci5: command tx timeout [ 167.493872] Bluetooth: hci4: command tx timeout [ 167.557771] Bluetooth: hci6: command tx timeout [ 167.558227] Bluetooth: hci7: command tx timeout [ 169.222813] Bluetooth: hci0: command tx timeout [ 169.413824] Bluetooth: hci2: command tx timeout [ 169.476702] Bluetooth: hci3: command tx timeout [ 169.477836] Bluetooth: hci5: command tx timeout [ 169.477996] Bluetooth: hci1: command tx timeout [ 169.540686] Bluetooth: hci4: command tx timeout [ 169.605761] Bluetooth: hci7: command tx timeout [ 169.605787] Bluetooth: hci6: command tx timeout [ 171.268671] Bluetooth: hci0: command tx timeout [ 171.461490] Bluetooth: hci2: command tx timeout [ 171.524813] Bluetooth: hci1: command tx timeout [ 171.525026] Bluetooth: hci5: command tx timeout [ 171.525354] Bluetooth: hci3: command tx timeout [ 171.588958] Bluetooth: hci4: command tx timeout [ 171.652675] Bluetooth: hci6: command tx timeout [ 171.653705] Bluetooth: hci7: command tx timeout [ 219.780220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.781706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.164406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.165730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.533181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.534345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.757400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.758119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.859378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.860135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.044703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.045343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.149956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.150695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.263005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.263740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.436191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.436893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.717390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.718033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.722201] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 224.725735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 224.734782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 224.748126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 224.754476] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 224.757118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 224.985087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.996109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.001244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.006864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.014041] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.016834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.067002] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.086767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.089523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.109255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.110924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.124053] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.136985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.140377] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 225.143274] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.145906] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.161802] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.166472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.210562] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 225.214497] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 225.224225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 225.271040] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 225.287193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 225.290470] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 225.308432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.316329] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.322059] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.329116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.347108] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.350795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.364946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.373210] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 225.388278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.400298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.417214] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 225.453099] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.822681] Bluetooth: hci1: command tx timeout [ 227.076829] Bluetooth: hci2: command tx timeout [ 227.205825] Bluetooth: hci3: command tx timeout [ 227.268669] Bluetooth: hci4: command tx timeout [ 227.396717] Bluetooth: hci5: command tx timeout [ 227.588734] Bluetooth: hci6: command tx timeout [ 227.844724] Bluetooth: hci7: command tx timeout [ 228.868666] Bluetooth: hci1: command tx timeout [ 229.124685] Bluetooth: hci2: command tx timeout [ 229.252743] Bluetooth: hci3: command tx timeout [ 229.316749] Bluetooth: hci4: command tx timeout [ 229.444667] Bluetooth: hci5: command tx timeout [ 229.638625] Bluetooth: hci6: command tx timeout [ 229.892754] Bluetooth: hci7: command tx timeout [ 230.916810] Bluetooth: hci1: command tx timeout [ 231.172792] Bluetooth: hci2: command tx timeout [ 231.300722] Bluetooth: hci3: command tx timeout [ 231.364752] Bluetooth: hci4: command tx timeout [ 231.492826] Bluetooth: hci5: command tx timeout [ 231.684789] Bluetooth: hci6: command tx timeout [ 231.940776] Bluetooth: hci7: command tx timeout [ 232.964851] Bluetooth: hci1: command tx timeout [ 233.220671] Bluetooth: hci2: command tx timeout [ 233.348681] Bluetooth: hci3: command tx timeout [ 233.412685] Bluetooth: hci4: command tx timeout [ 233.540660] Bluetooth: hci5: command tx timeout [ 233.733299] Bluetooth: hci6: command tx timeout [ 233.988663] Bluetooth: hci7: command tx timeout [ 271.595984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.596753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.852992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.853779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.084257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.084957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.276700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.277371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.832615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.833282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.991659] EXT4-fs: Cannot change data mode on remount [ 272.995980] EXT4-fs: Cannot change data mode on remount [ 273.126948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.127600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.187679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.188318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.281710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.282336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.375954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.377150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.470912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.471550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.647465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.648244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.751160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.751919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.852844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.879540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.880208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.988328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.989061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.168404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.467998] audit: type=1400 audit(1733302602.134:8): avc: denied { open } for pid=10552 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 274.482109] audit: type=1400 audit(1733302602.134:9): avc: denied { kernel } for pid=10552 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 08:56:42 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="2037f1375c88"}, 0x14) 08:56:42 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0xc, &(0x7f0000000040)={0x0, 0x8000}, 0x4) 08:56:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) setpriority(0x0, 0x0, 0x0) 08:56:42 executing program 5: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81002e1b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 08:56:42 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000540)=""/225, 0xe1, 0x800) 08:56:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000056c0)='syz1\x00', 0x0, 0x0, 0x0) 08:56:42 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff8000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0xcf3caed3d8c7cb92) shmctl$IPC_RMID(r1, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) 08:56:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) socket$packet(0x11, 0x0, 0x300) syz_io_uring_setup(0x3392, &(0x7f0000000740)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 08:56:42 executing program 7: clone3(&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001480)=""/58, 0x3a, 0x0, 0x0}, 0x58) 08:56:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000140), 0x4) 08:56:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001680)='/sys/class/dma', 0x0, 0x0) mkdirat(r0, &(0x7f00000016c0)='./file0\x00', 0x0) 08:56:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) 08:56:42 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) timer_create(0x0, 0x0, &(0x7f0000000080)) timer_gettime(0x0, &(0x7f0000000000)) 08:56:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="84", 0x1}], 0x1}, 0x81) 08:56:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0xd, 0x0, 0x0) 08:56:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0) 08:56:43 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000080)) 08:56:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x48, &(0x7f0000000100)={0x0, 0x0}, 0x10) 08:56:43 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) stat(&(0x7f0000000180)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, r1, r0, 0xffffffffffffffff, 0x40, 0x1000}, 0x0, 0x0, 0x3f, 0x8, 0x9, 0x6, 0x0, 0x7, 0x41, 0x7d3b}) 08:56:43 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffd2}]) 08:56:43 executing program 5: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81002e1b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 08:56:43 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0xd, 0x0, 0x0) 08:56:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0xe0, 0x29, 0x0, 0x0) 08:56:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@private}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:44 executing program 7: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ff6000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 08:56:44 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0xffffffe0}, 0x8) 08:56:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x5b, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @local, @local, {[], @ndisc_ra={0x5}}}}}}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:56:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0xd, 0x0, 0x0) [ 276.745066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:56:44 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0/file0\x00') 08:56:44 executing program 6: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x1c00, 0x1f}) 08:56:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@private}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000057ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 08:56:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 08:56:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b4b, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) 08:56:44 executing program 6: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x1c00, 0x1f}) 08:56:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind(r0, &(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80) 08:56:44 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="3611b094646f7766d8a02b00080101000440002800f001", 0x17}, {0x0, 0x0, 0x80000000002800}], 0x0, &(0x7f0000000140)=ANY=[]) 08:56:44 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0xd, 0x0, 0x0) 08:56:44 executing program 5: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81002e1b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 08:56:44 executing program 6: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x1c00, 0x1f}) 08:56:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x1c5100, 0x0) 08:56:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed}, 0xe) 08:56:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@private}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) [ 277.395719] loop7: detected capacity change from 0 to 264192 08:56:45 executing program 7: personality(0x400000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x80032, 0xffffffffffffffff, 0x0) 08:56:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee01}}]}) 08:56:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@private}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:45 executing program 6: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLY\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x17\xa2\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\x92#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x06L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x84\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\xd00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xfe\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\xd6\xcf\xf6\xb5\x82\xb7\x9dA\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/L\x01\xe2\xba|\xf0\x01)PP\xcdl\x06\xfc\x15;qZ\xb1u\xc9\xd0\xd16~JEGm\xe4\x1e@\x9dG\xe4@\xdf\xba\'\x8b\x1cD\xc7\xec\xd1@}tR\xd9P\xf4N\xe3\xd8x\xa0\x91\x17\xc2}\x13\b\xca\t(Z\xa3_\xa1\x90\x15T\x93\xe7%\x98\xa7\xfb\x8bp/eq\x93\xbf\x1f =|\xf3\xb1\xfcR\xd8\nM,\xcb%@\'\x15\x88\xd8\xad\f\x91|\x95\x8fq+\x98\x81W\xba\x9f\xe0elOt\xbd\by\r\x87\x1c\xba\xbd\x8e+S>\xb8\xe29\x91h^x\xfb`\x00\xdd/\xa6\xb1\x16=\xa1bw\xc5I\xb1\x00'/549, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x0, 0x0, 0x1c00, 0x1f}) 08:56:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000000)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)='\f', 0x1}], 0x1, 0x7fffff8, 0x0) acct(0x0) 08:56:45 executing program 0: syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x800, 0x7, 0x2}}}, 0xa) 08:56:45 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={[{@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) 08:56:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x1c5100, 0x0) [ 278.326222] Bluetooth: hci0: Malformed Event: 0x02 [ 278.327050] Bluetooth: hci0: Malformed Event: 0x02 08:56:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xf98, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1ffffffffffffd46, &(0x7f00000000c0)) io_destroy(r0) [ 278.419026] No source specified [ 278.424532] loop1: detected capacity change from 0 to 40 [ 278.427565] No source specified [ 278.442853] cgroup: release_agent respecified 08:56:46 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 08:56:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x1c5100, 0x0) 08:56:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="d40000000000000055fc"]) 08:56:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x0, r0+60000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) 08:56:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) [ 278.726480] kworker/u9:6: attempt to access beyond end of device [ 278.726480] loop1: rw=1, sector=124, nr_sectors = 4 limit=40 [ 278.728546] Buffer I/O error on dev loop1, logical block 31, lost async page write [ 278.740651] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x1c5100, 0x0) 08:56:46 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x3ff, 0x0, 0x0, 0x60010, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x602000) accept(r1, 0x0, &(0x7f0000000200)) setresuid(0x0, r0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000002240)=""/4109, 0x100d}], 0x1, 0x0, 0x0) 08:56:46 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r0, &(0x7f00000033c0)=[{&(0x7f0000000180)=""/35, 0x23}], 0x1, 0x0, 0x0) 08:56:46 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000003f80), 0xffffffffffffffff) 08:56:46 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40485404, &(0x7f00000000c0)={0x1}) 08:56:46 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4bfb, 0x0) [ 279.179360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.183296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 08:56:46 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) 08:56:46 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fstat(r0, &(0x7f00000000c0)) 08:56:46 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202eff"], 0xa4) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:56:46 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000240)={0x1c, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x9, 0x0, 0x0, 0x1, [@generic="c2e06c27ef"]}]}, 0x1c}], 0x1}, 0x0) 08:56:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="9c08c10a5e769fca815874eaf5ece38a1f8cc5a85857c94ad2624a8833900e2dc09b45daf46dc7c4", 0x28}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x2, 0x0) 08:56:46 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4bfb, 0x0) 08:56:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)={0x24, 0x10, 0x101, 0x0, 0x0, "", [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}]}, 0x24}], 0x1}, 0x0) 08:56:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000200), 0x1) 08:56:46 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4bfb, 0x0) 08:56:47 executing program 3: capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000580)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4bfb, 0x0) 08:56:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @link_local, @void, {@arp={0x8100, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @empty, @broadcast, @remote, @loopback}}}}, 0x0) 08:56:47 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) dup2(r1, r0) fork() 08:56:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='securityfs\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/101, 0x65) getdents64(r0, 0x0, 0x0) 08:56:47 executing program 6: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @link_local, @remote, @link_local, @loopback}}}}, 0x0) [ 279.445115] process 'syz-executor.7' launched './file1' with NULL argv: empty string added 08:56:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) 08:56:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f0000012c00)) 08:56:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) [ 279.586793] loop1: detected capacity change from 0 to 4 [ 279.604534] EXT4-fs (loop1): unsupported inode size: 0 [ 279.605146] EXT4-fs (loop1): blocksize: 2048 [ 279.611203] loop1: detected capacity change from 0 to 4 [ 279.618093] EXT4-fs (loop1): unsupported inode size: 0 [ 279.618636] EXT4-fs (loop1): blocksize: 2048 [ 279.839101] loop1: detected capacity change from 0 to 4 [ 279.869721] EXT4-fs (loop1): unsupported inode size: 0 [ 279.870269] EXT4-fs (loop1): blocksize: 2048 08:56:47 executing program 2: r0 = add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f00000008c0)=""/115, 0x73) 08:56:47 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs_stats\x00') 08:56:47 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="dd", 0x1}], 0x1, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 08:56:47 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000, 0x0) 08:56:47 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)) 08:56:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r0, 0xc0185879, 0x0) 08:56:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f0000012c00)) 08:56:47 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee00, 0x0) keyctl$chown(0x4, r0, 0x0, 0xee00) 08:56:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x60881, 0x0) pwrite64(r2, &(0x7f0000000140)="01", 0x1, 0x0) write$binfmt_script(r1, 0x0, 0xffff8000) [ 279.929632] audit: type=1400 audit(1733302607.573:10): avc: denied { map } for pid=10770 comm="syz-executor.0" path="/proc/10770/mounts" dev="proc" ino=9926 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 279.931759] audit: type=1400 audit(1733302607.573:11): avc: denied { execute } for pid=10770 comm="syz-executor.0" path="/proc/10770/mounts" dev="proc" ino=9926 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 08:56:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f0000012c00)) [ 280.031136] loop1: detected capacity change from 0 to 4 [ 280.040748] EXT4-fs (loop1): unsupported inode size: 0 [ 280.041248] EXT4-fs (loop1): blocksize: 2048 08:56:47 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) 08:56:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="00007632c95804cc5c94b62adbcc44f60000"], 0x18}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f00000001c0)=0xfc5, 0x4) fallocate(r3, 0x0, 0x0, 0x120000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x22, &(0x7f0000000000)={0x77359400}, 0x10) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000001480)=""/4111, 0x7ffff000}], 0x1, 0x0, 0x0) 08:56:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b", 0x55, 0x400}], 0x0, &(0x7f0000012c00)) 08:56:47 executing program 7: r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x2, &(0x7f0000000180)='devpts\x00', &(0x7f00000001c0)='K\x00', 0x0) 08:56:47 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0xffffff9a) [ 280.096592] hrtimer: interrupt took 29706 ns 08:56:47 executing program 3: inotify_init1(0x80400) 08:56:47 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) lseek(r0, 0x0, 0x1) 08:56:47 executing program 5: truncate(0x0, 0xfffffffffffffffc) 08:56:48 executing program 2: perf_event_open(&(0x7f0000000600)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:56:48 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'wlan1\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) 08:56:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0x1267, &(0x7f0000000000)) 08:56:48 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2, &(0x7f0000000000)=0xfff, 0x9, 0x0) mbind(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040)=0x3, 0x7ff, 0x0) 08:56:48 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cb00)={0xf2, [], 0x0, "2dbae8f8a25191"}) sendfile(r1, r0, 0x0, 0xfffffdef) 08:56:48 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) ioctl$FITRIM(r0, 0x4004662b, &(0x7f0000000180)) bind$bt_hci(r0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 08:56:48 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x10, 0x8}, {0xc4, 0x9, 0x6, 0x80}}}}, 0x15) [ 280.573101] Bluetooth: Wrong link type (-22) [ 280.578065] Bluetooth: Wrong link type (-22) 08:56:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) fstat(r0, &(0x7f0000000040)) 08:56:48 executing program 2: semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, 0x0) 08:56:48 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10040aa, &(0x7f0000000180)={[{@commit}, {@grpquota}]}) 08:56:48 executing program 3: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000056}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) 08:56:48 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@rand_addr, @broadcast}, 0x10) 08:56:48 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/110, 0x6e) [ 280.930494] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 280.946000] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 281.516292] syz-executor.7 (10836) used greatest stack depth: 23424 bytes left 08:56:49 executing program 6: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x12) rmdir(&(0x7f0000000040)='./file1\x00') 08:56:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chroot(&(0x7f0000000280)='./file0\x00') 08:56:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:49 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x400000000000005, 0x1) 08:56:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)=""/235) 08:56:49 executing program 0: syz_mount_image$nfs(&(0x7f0000003c40), &(0x7f0000003c80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={[{'\x06\x00\x00\x00ntext'}]}) 08:56:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 08:56:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cb00)={0xf2, [], 0x0, "2dbae8f8a25191"}) sendfile(r1, r0, 0x0, 0xfffffdef) 08:56:49 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7c7de", 0x7, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 08:56:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) 08:56:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 08:56:49 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:49 executing program 1: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) 08:56:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x9, 0x0) 08:56:50 executing program 1: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) 08:56:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 08:56:50 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 08:56:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x70) 08:56:50 executing program 6: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x12) rmdir(&(0x7f0000000040)='./file1\x00') 08:56:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x9, 0x0) 08:56:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 08:56:50 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cb00)={0xf2, [], 0x0, "2dbae8f8a25191"}) sendfile(r1, r0, 0x0, 0xfffffdef) [ 282.705231] audit: type=1326 audit(1733302610.366:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10874 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ad8432b19 code=0x0 08:56:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) [ 282.750684] audit: type=1326 audit(1733302610.416:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10874 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f8ad83e572b code=0x0 08:56:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000d40)={0x0, 0x3, 0x0, 0x0, 0x0, "8bdd51ed4a9635c73aa668eb9678156266738e"}) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfffffcf1) 08:56:50 executing program 3: prctl$PR_GET_PDEATHSIG(0x25, &(0x7f0000000000)) 08:56:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x9, 0x0) 08:56:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000280)="000000000000000000000000000000c7d500000000000000000000002000eaa3000000000000000000001d00002000000000000000000000310000000000000052f2f026bb8da948184e299578cd5db942f0c1fd9460c44a9c5dae94e9b0b6b96828dd3eb837893d324e0c369459eccc909e52096df8809d5932bf3b8d066c4167a7940db5f1646baa81f2cf360c3c0b7e844d0b730429912316426e5113924b5b62139df6ef25187cf76f248cc95d935a61052f4437911de634d82027ccb9a110", 0xc1, 0x540}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000013800)=ANY=[]) [ 283.082082] loop4: detected capacity change from 0 to 512 [ 283.088203] EXT4-fs (loop4): failed to parse options in superblock:  [ 283.097386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.144166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:56:51 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 08:56:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) 08:56:51 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write$binfmt_aout(r1, &(0x7f0000001180)=ANY=[], 0x220) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cb00)={0xf2, [], 0x0, "2dbae8f8a25191"}) sendfile(r1, r0, 0x0, 0xfffffdef) 08:56:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) 08:56:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) ptrace$getsig(0x4202, 0x0, 0x9, 0x0) 08:56:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:56:51 executing program 6: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x12) rmdir(&(0x7f0000000040)='./file1\x00') 08:56:51 executing program 1: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) [ 284.155323] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 284.171799] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. 08:56:51 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@broadcast}, 0x0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f00000000c0)=[{}], 0x20000000000000b4, 0x0) 08:56:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) 08:56:51 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) 08:56:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:56:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) 08:56:52 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) [ 284.494355] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 284.496103] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. 08:56:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:56:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) 08:56:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) [ 284.776767] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 284.817490] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. 08:56:52 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 08:56:52 executing program 1: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) 08:56:52 executing program 3: setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) 08:56:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:56:52 executing program 6: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000080)='./file1\x00', 0x12) rmdir(&(0x7f0000000040)='./file1\x00') 08:56:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) 08:56:52 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@max_dir_size_kb}]}) [ 285.008683] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 285.043188] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. 08:56:52 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 08:56:52 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 08:56:52 executing program 3: kexec_load(0x0, 0x0, 0x0, 0x2) 08:56:52 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @broadcast, r2}, 0xc) 08:56:52 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) 08:56:53 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}]}}) 08:56:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:56:53 executing program 5: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:56:53 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) [ 286.021024] Bluetooth: hci0: command 0x0406 tx timeout 08:56:54 executing program 0: clock_adjtime(0xa, &(0x7f0000000000)) 08:56:54 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:56:54 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 08:56:54 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) 08:56:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:56:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x401a012, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x401a012, r1, 0x0) 08:56:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x22042, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xc0ba}) 08:56:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$link(0x8, r0, r1) 08:56:54 executing program 0: r0 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r0, &(0x7f0000ff0000/0x3000)=nil, 0x4000) remap_file_pages(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf00a000, 0x0, 0x0, 0x0) 08:56:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c042, 0x0) fallocate(r0, 0x0, 0x0, 0x120000) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) 08:56:54 executing program 7: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) pread64(r0, &(0x7f00000012c0)=""/4093, 0xffd, 0x0) 08:56:54 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@multicast2}}, [@policy_type={0xa}]}, 0x5c}}, 0x0) 08:56:54 executing program 2: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:54 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 286.777950] mmap: syz-executor.0 (11008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 08:56:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 08:56:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000030c0)={&(0x7f00000006c0), 0xc, 0x0}, 0x0) [ 286.840101] loop6: detected capacity change from 0 to 40 08:56:54 executing program 0: ioperm(0x0, 0xfff, 0x7) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 08:56:54 executing program 1: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) [ 286.956250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.970622] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 286.993771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 286.994341] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 287.008610] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 287.021823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.022390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 287.045413] kworker/u9:6: attempt to access beyond end of device [ 287.045413] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 287.046463] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 287.048947] Bluetooth: hci2: Opcode 0x0406 failed: -4 08:56:54 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c042, 0x0) fallocate(r0, 0x0, 0x0, 0x120000) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) [ 287.061901] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.062812] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 287.077824] Bluetooth: hci3: Opcode 0x0406 failed: -4 08:56:54 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 287.084910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.088943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 287.096683] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 287.105485] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 287.107823] Bluetooth: hci5: Opcode 0x0406 failed: -4 08:56:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="060000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000000)={[{@jqfmt_vfsold}]}) [ 287.121967] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 287.129785] Bluetooth: hci6: Opcode 0x0c1a failed: -4 08:56:54 executing program 0: syz_emit_ethernet(0x76, &(0x7f0000000a00)={@local, @random="c737b1938a6a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "05848c", 0x40, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7fc56540a253f13af8f9d4c917af911e"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "ea2cea2f056f833f1d8857e8857464f1"}]}}}}}}}}, 0x0) 08:56:54 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) [ 287.136968] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 287.147683] Bluetooth: hci6: Opcode 0x0406 failed: -4 08:56:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ad) [ 287.157210] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 287.165660] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 287.175037] Bluetooth: hci7: Opcode 0x0406 failed: -4 08:56:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10000000000, 0xffffffffffffffff, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x40201, 0x24) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = mq_open(&(0x7f00000056c0)='syz1\x00', 0x842, 0x0, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r5, &(0x7f00000003c0)="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", 0x14b, 0x10000000000006, &(0x7f0000000140)={r6, r7+10000000}) fchmod(r4, 0x20) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 287.196241] loop4: detected capacity change from 0 to 512 [ 287.201323] loop6: detected capacity change from 0 to 40 [ 287.235267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.324557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.357430] kworker/u9:6: attempt to access beyond end of device [ 287.357430] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 287.358625] Buffer I/O error on dev loop6, logical block 31, lost async page write 08:56:55 executing program 2: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:55 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x33, 0x2d, 0x35, 0x2f]}}}}]}) 08:56:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c042, 0x0) fallocate(r0, 0x0, 0x0, 0x120000) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) 08:56:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="060000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000000)={[{@jqfmt_vfsold}]}) 08:56:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000003d80)=[{r0}], 0x1, &(0x7f0000003e00)={0x0, 0x3938700}, 0x0, 0x0) 08:56:55 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 08:56:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 08:56:55 executing program 5: clock_adjtime(0x0, &(0x7f0000000000)) [ 287.520379] loop6: detected capacity change from 0 to 40 [ 287.532791] tmpfs: Bad value for 'mpol' [ 287.533813] loop4: detected capacity change from 0 to 512 [ 287.540011] tmpfs: Bad value for 'mpol' [ 287.558731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:56:55 executing program 5: r0 = epoll_create1(0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng, 0x2, 0x0) [ 287.622058] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.622975] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.623836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.624471] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.625211] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.625952] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 287.626754] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 287.627452] Bluetooth: hci7: Opcode 0x0c1a failed: -4 08:56:55 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 08:56:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x24004001, &(0x7f0000000400)=@tipc, 0x80) 08:56:55 executing program 2: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:55 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0x0, 0xee01) [ 287.694531] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.770363] kworker/u10:2: attempt to access beyond end of device [ 287.770363] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 287.771455] Buffer I/O error on dev loop6, logical block 31, lost async page write [ 287.807399] loop0: detected capacity change from 0 to 40 [ 287.869632] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.870353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.872890] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.874198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.874958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 287.876430] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 287.877345] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 287.878429] Bluetooth: hci7: Opcode 0x0c1a failed: -4 08:56:55 executing program 2: r0 = syz_io_uring_setup(0x1117, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0x0, {0x2, 0x0, @broadcast}, 'lo\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:55 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000740)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4c042, 0x0) fallocate(r0, 0x0, 0x0, 0x120000) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) 08:56:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) copy_file_range(r0, &(0x7f0000000040), r0, 0x0, 0x0, 0x0) 08:56:55 executing program 7: r0 = epoll_create1(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) 08:56:55 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40505331, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) 08:56:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@broadcast, 0x0, 0x3c}}}, 0xe8) 08:56:55 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000003d80)=[{r0}], 0x1, &(0x7f0000003e00)={0x0, 0x3938700}, 0x0, 0x0) 08:56:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="060000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000000)={[{@jqfmt_vfsold}]}) [ 287.995475] loop6: detected capacity change from 0 to 40 [ 288.025375] loop4: detected capacity change from 0 to 512 08:56:55 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000)=0x7f, 0x4) 08:56:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "caa5d21ee1a82d685acb8d78d2388fbdbd1406"}) [ 288.117097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:56:55 executing program 7: syz_io_uring_setup(0x6216, &(0x7f0000000b00)={0x0, 0x0, 0x20}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) [ 288.145695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.146410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.147264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.149704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.150366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.151114] Bluetooth: hci5: Opcode 0x0c1a failed: -4 08:56:55 executing program 5: ioperm(0x0, 0xfff, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 288.153864] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 288.154519] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 288.229030] kworker/u10:2: attempt to access beyond end of device [ 288.229030] loop6: rw=1, sector=124, nr_sectors = 4 limit=40 [ 288.230082] Buffer I/O error on dev loop6, logical block 31, lost async page write 08:56:55 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, 0x0, 0x0) 08:56:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="060000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000000)={[{@jqfmt_vfsold}]}) 08:56:55 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001080), 0x8, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000013c0)) [ 288.328170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.435420] loop4: detected capacity change from 0 to 512 [ 288.448372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 08:56:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000003d80)=[{r0}], 0x1, &(0x7f0000003e00)={0x0, 0x3938700}, 0x0, 0x0) 08:56:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "caa5d21ee1a82d685acb8d78d2388fbdbd1406"}) 08:56:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x7e, 0x0, @empty}, 0x1c) 08:56:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5409, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "d4a89354cdc0e1d1ad0964940f221679708fb7"}) 08:56:56 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 08:56:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 08:56:56 executing program 6: perf_event_open$cgroup(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 288.510202] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 08:56:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0xffffffffffffffff) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004080)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}}], 0x1, 0x0) dup3(r0, r2, 0x0) 08:56:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000003d80)=[{r0}], 0x1, &(0x7f0000003e00)={0x0, 0x3938700}, 0x0, 0x0) 08:56:56 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x3d13, 0x0) 08:56:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x0) 08:56:56 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x3d13, 0x0) 08:56:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "caa5d21ee1a82d685acb8d78d2388fbdbd1406"}) 08:56:56 executing program 5: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2800) 08:56:56 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x737}) 08:56:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000280)='./file1\x00', 0x7423, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}], [{@hash}]}) 08:56:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 288.920443] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:56:56 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x3d13, 0x0) [ 288.964013] tmpfs: Unknown parameter 'hash' 08:56:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "caa5d21ee1a82d685acb8d78d2388fbdbd1406"}) [ 289.003045] tmpfs: Unknown parameter 'hash' 08:56:56 executing program 5: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xcc042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x4004662b, &(0x7f0000000000)) 08:56:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 08:56:56 executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x3d13, 0x0) 08:56:56 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x227e, &(0x7f00000000c0)) 08:56:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x1a, 0x0, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 08:56:56 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x541b, 0x0) 08:56:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_elf64(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c46"], 0x60f) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 08:56:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = socket$inet6(0xa, 0x801, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) read(r0, &(0x7f00000001c0)=""/152, 0x98) 08:56:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 289.261525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.263181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:57 executing program 4: ioperm(0x0, 0x6d1f, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) read$eventfd(r0, 0x0, 0x0) [ 289.774874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.777292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 08:56:57 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x13, 0x0, &(0x7f0000000140)) 08:56:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x8, 0x0, 0x7000) 08:56:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) 08:56:57 executing program 7: prctl$PR_SET_MM(0x2, 0xf0ff1f00000000, &(0x7f0000ffe000/0x1000)=nil) 08:56:57 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:56:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:56:57 executing program 1: mlock(&(0x7f0000dc3000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x0) 08:56:57 executing program 5: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5385, &(0x7f0000000100)={"12766ecc2476f2abefdd0081", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:56:57 executing program 7: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 08:56:57 executing program 1: mlock(&(0x7f0000dc3000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x0) 08:56:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000009740)) 08:56:57 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1f, &(0x7f0000000640)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 08:56:57 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x8, 0x0, 0x7000) [ 290.116960] Bluetooth: hci0: command 0x0406 tx timeout 08:56:57 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @private=0xac141400}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="94031c855deb"}, 0x14) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 290.182973] Bluetooth: hci7: command 0x0405 tx timeout [ 290.184679] Bluetooth: hci6: command 0x0c1a tx timeout [ 290.185304] Bluetooth: hci5: command 0x0c1a tx timeout [ 290.186008] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.186506] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.187019] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.187497] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.229016] lo: entered promiscuous mode [ 290.229611] lo: entered allmulticast mode 08:56:57 executing program 1: mlock(&(0x7f0000dc3000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x0) 08:56:57 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505331, &(0x7f0000000040)={0x80}) 08:56:58 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x14) 08:56:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x8, 0x0, 0x7000) 08:56:58 executing program 1: mlock(&(0x7f0000dc3000/0x1000)=nil, 0x1000) mlock2(&(0x7f0000dc2000/0x1000)=nil, 0x1000, 0x0) 08:56:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x7, 0x0, 0x0) 08:56:58 executing program 4: mlock2(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x12) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 08:56:58 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x40102, 0x0) write$vga_arbiter(r0, 0x0, 0x15) 08:56:58 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/9p', 0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [], 0xa, "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"}, 0xff9) write$rfkill(r1, &(0x7f0000000000), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 08:56:58 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x80084504, &(0x7f0000000240)) 08:56:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000011c0)=""/4078, 0xfee}], 0x1, 0x0, 0x0) 08:56:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)={0x10, 0x1d, 0x1}, 0x10}], 0x1}, 0x0) 08:56:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1) r1 = epoll_create(0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 08:56:58 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(r0, &(0x7f0000008c80)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)='\"!', 0x2}], 0x1}}], 0x1, 0x8080) close(r0) 08:56:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000300)={0x0, {{0x9, 0x0, @multicast1}}}, 0x90) 08:56:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x2c00) shutdown(r1, 0x2) 08:56:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = fork() ptrace(0x10, r0) ptrace(0x11, r0) 08:56:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x8, 0x0, 0x7000) [ 291.171383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 08:56:58 executing program 5: r0 = memfd_create(&(0x7f0000000040)='/dev/vcsa\x00', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x401a012, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 08:56:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="84", 0xfffffdef}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x97b) 08:56:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000d00)={&(0x7f0000000a40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x28}}, 0x0) 08:56:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a40)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@mark={0xc}]}, 0xcc}}, 0x0) 08:56:59 executing program 7: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$link(0x8, r0, r1) 08:56:59 executing program 3: clone3(&(0x7f0000004c00)={0x422ca980, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:59 executing program 2: request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 08:56:59 executing program 5: r0 = syz_io_uring_setup(0x7644, &(0x7f0000000140), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_FILES(r0, 0x13, 0x0, 0x0) 08:56:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121242, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001180)=ANY=[], 0x220) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffdef) 08:56:59 executing program 1: pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4000) 08:56:59 executing program 2: setreuid(0xee00, 0xee00) setreuid(0x0, 0x0) 08:56:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000001f00)=@phonet, 0x80) 08:56:59 executing program 5: perf_event_open(&(0x7f0000000280)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x6) 08:56:59 executing program 7: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$link(0x8, r0, r1) 08:56:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x10000c1, &(0x7f0000000040)=ANY=[]) [ 291.885348] loop1: detected capacity change from 0 to 512 [ 291.888194] ======================================================= [ 291.888194] WARNING: The mand mount option has been deprecated and [ 291.888194] and is ignored by this kernel. Remove the mand [ 291.888194] option from the mount to silence this warning. [ 291.888194] ======================================================= [ 291.897607] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 291.898446] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 291.899262] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 291.904881] EXT4-fs error (device loop1): __ext4_get_inode_loc:4434: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 291.906820] EXT4-fs (loop1): get root inode failed [ 291.907292] EXT4-fs (loop1): mount failed [ 292.125010] loop1: detected capacity change from 0 to 512 [ 292.131656] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 292.132522] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 292.133540] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 292.137306] EXT4-fs error (device loop1): __ext4_get_inode_loc:4434: comm syz-executor.1: Invalid inode table block 0 in block_group 0 [ 292.140008] EXT4-fs (loop1): get root inode failed [ 292.140511] EXT4-fs (loop1): mount failed [ 292.164711] Bluetooth: hci0: command 0x0406 tx timeout 08:56:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000001200)=@known='system.sockprotoname\x00', &(0x7f0000001280)=""/102400, 0x19000) 08:56:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000038f}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) 08:56:59 executing program 3: clone3(&(0x7f0000004c00)={0x422ca980, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:56:59 executing program 7: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$link(0x8, r0, r1) 08:56:59 executing program 6: rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000240)) 08:56:59 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x804) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) 08:56:59 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './cgroup.net/cgroup.procs'}, 0x1d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f00000001c0)=0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') connect$802154_dgram(r2, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) 08:56:59 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) [ 292.260850] Bluetooth: hci1: command 0x0c1a tx timeout [ 292.261437] Bluetooth: hci2: command 0x0c1a tx timeout [ 292.262167] Bluetooth: hci3: command 0x0c1a tx timeout [ 292.262768] Bluetooth: hci4: command 0x0c1a tx timeout [ 292.263312] Bluetooth: hci5: command 0x0c1a tx timeout [ 292.264126] Bluetooth: hci6: command 0x0c1a tx timeout [ 292.264745] Bluetooth: hci7: command 0x0405 tx timeout 08:56:59 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) unshare(0x40400) 08:57:00 executing program 3: clone3(&(0x7f0000004c00)={0x422ca980, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1'}, 0xb) r2 = socket$packet(0x11, 0x3, 0x300) sendfile(r2, r0, 0x0, 0x80000001) 08:57:00 executing program 2: getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fork() mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007, 0x6c032, 0xffffffffffffffff, 0x0) 08:57:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@empty}}, 0xe8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}], 0x2, 0x0) 08:57:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x42a02) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) dup3(r1, r0, 0x0) 08:57:00 executing program 7: r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$link(0x8, r0, r1) 08:57:00 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x1, 0x1, 0x7fff, 0xeaf, 0xffffffffffffffff}) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = open_tree(r2, &(0x7f0000000300)='./file0\x00', 0x8000) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x8955, &(0x7f0000002440)={{0x2, 0x0, @loopback}, {0x306, @dev}, 0x18, {0x2, 0x0, @broadcast}, 'lo\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x8001}}, './file0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) pwrite64(r0, &(0x7f0000000780)="75c5d2f2aa03f05d254d5e1c670541bfe919ae6a6d92c416fc85b2f43b461d5c83e12a951001fcb3fc88dfa2494f68576a77bd0b08b9357d94bfb4108e4c3988c9927c9a4ff016", 0x47, 0x8) 08:57:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r2 = fcntl$dupfd(r1, 0x0, r1) setns(r2, 0x0) [ 292.781384] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.783258] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.784681] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.787197] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.787870] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.789668] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.790274] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.792689] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.794507] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.795133] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 292.832195] syz-executor.6 uses obsolete (PF_INET,SOCK_PACKET) [ 293.610796] ------------[ cut here ]------------ [ 293.611352] WARNING: CPU: 1 PID: 11341 at net/ipv4/ipmr.c:440 ipmr_rules_exit+0x13a/0x1c0 [ 293.612149] Modules linked in: [ 293.612456] CPU: 1 UID: 0 PID: 11341 Comm: syz-executor.3 Not tainted 6.13.0-rc1-next-20241203 #1 [ 293.613245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 293.614255] RIP: 0010:ipmr_rules_exit+0x13a/0x1c0 [ 293.615388] Code: ff df 48 c1 ea 03 80 3c 02 00 75 7d 48 c7 83 00 08 00 00 00 00 00 00 5b 5d 41 5c 41 5d 41 5e e9 ac 13 a3 00 e8 97 fd 6d fd 90 <0f> 0b 90 eb 93 e8 8c fd 6d fd 0f b6 2d 57 10 59 02 31 ff 89 ee e8 [ 293.621297] RSP: 0018:ffff888015e878b8 EFLAGS: 00010216 [ 293.623163] RAX: 0000000000017a5a RBX: ffff888033da8000 RCX: ffffc900045e6000 [ 293.623822] RDX: 0000000000040000 RSI: ffffffff83e3e2b9 RDI: 0000000000000005 [ 293.624438] RBP: ffff8880408d6000 R08: 0000000000000000 R09: ffffed10067b5028 [ 293.625086] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 293.625732] R13: ffff888033da8800 R14: ffff888033da8000 R15: fffffbfff0c50e80 [ 293.626361] FS: 00007f8ad59a8700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 293.627088] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.627632] CR2: 0000000020000080 CR3: 000000003a764000 CR4: 0000000000350ef0 [ 293.628254] Call Trace: [ 293.628498] [ 293.628749] ? __warn+0xea/0x380 [ 293.629115] ? ipmr_rules_exit+0x13a/0x1c0 [ 293.629520] ? report_bug+0x2f5/0x3f0 [ 293.629943] ? ipmr_rules_exit+0x13a/0x1c0 [ 293.630352] ? ipmr_rules_exit+0x13b/0x1c0 [ 293.630780] ? handle_bug+0xe5/0x180 [ 293.631152] ? exc_invalid_op+0x35/0x80 [ 293.631542] ? asm_exc_invalid_op+0x1a/0x20 [ 293.632028] ? ipmr_rules_exit+0x139/0x1c0 [ 293.632430] ? ipmr_rules_exit+0x13a/0x1c0 [ 293.632866] ? ipmr_rules_exit+0x139/0x1c0 [ 293.633275] ipmr_net_exit_batch+0x53/0xa0 [ 293.633704] ? __pfx_ipmr_net_exit_batch+0x10/0x10 [ 293.634164] ? __pfx_ipmr_net_exit+0x10/0x10 [ 293.634645] ops_exit_list+0x12b/0x180 [ 293.635034] setup_net+0x492/0x7a0 [ 293.635397] ? __pfx_setup_net+0x10/0x10 [ 293.635821] ? __pfx_down_read_killable+0x10/0x10 [ 293.636272] ? __raw_spin_lock_init+0x3a/0x110 [ 293.636756] ? srso_return_thunk+0x5/0x5f [ 293.637147] ? debug_mutex_init+0x37/0x70 [ 293.637593] copy_net_ns+0x2e3/0x6f0 [ 293.637972] create_new_namespaces+0x3f6/0xaf0 [ 293.638464] copy_namespaces+0x45c/0x580 [ 293.638886] copy_process+0x26c0/0x70e0 [ 293.639282] ? srso_return_thunk+0x5/0x5f [ 293.639698] ? lock_release+0x20f/0x6f0 [ 293.640106] ? __pfx_copy_process+0x10/0x10 [ 293.640538] ? srso_return_thunk+0x5/0x5f [ 293.640955] ? _copy_from_user+0x5b/0xd0 [ 293.641378] kernel_clone+0xeb/0x850 [ 293.641782] ? __pfx_kernel_clone+0x10/0x10 [ 293.642221] ? srso_return_thunk+0x5/0x5f [ 293.642633] ? srso_return_thunk+0x5/0x5f [ 293.643019] ? perf_trace_lock+0xb6/0x5e0 [ 293.643423] __do_sys_clone3+0x1d9/0x260 [ 293.644139] ? __pfx___do_sys_clone3+0x10/0x10 [ 293.644795] ? __pfx_lock_release+0x10/0x10 [ 293.645198] ? trace_lock_acquire+0x13b/0x1b0 [ 293.645769] ? srso_return_thunk+0x5/0x5f [ 293.646156] ? lock_acquire+0x32/0xc0 [ 293.646557] do_syscall_64+0xbf/0x1d0 [ 293.647050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.647542] RIP: 0033:0x7f8ad8432b19 [ 293.648070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 293.649708] RSP: 002b:00007f8ad59a8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 293.650386] RAX: ffffffffffffffda RBX: 00007f8ad8545f60 RCX: 00007f8ad8432b19 [ 293.651075] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020004c00 [ 293.651719] RBP: 00007f8ad848cf6d R08: 0000000000000000 R09: 0000000000000000 [ 293.652337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.652972] R13: 00007ffeca79aa8f R14: 00007f8ad59a8300 R15: 0000000000022000 [ 293.653640] [ 293.653866] irq event stamp: 7589 [ 293.654175] hardirqs last enabled at (7599): [] __up_console_sem+0x78/0x80 [ 293.654964] hardirqs last disabled at (7610): [] __up_console_sem+0x5d/0x80 [ 293.655730] softirqs last enabled at (7528): [] handle_softirqs+0x50c/0x770 [ 293.656478] softirqs last disabled at (7509): [] __irq_exit_rcu+0xc4/0x100 [ 293.657255] ---[ end trace 0000000000000000 ]--- 08:57:01 executing program 0: r0 = memfd_create(&(0x7f0000000000)='B\xdb/\x89\x03l\xdeb\xcb\xb54\xed\xbeLK\xa4g?K)\xa0\xf0\x9b8Y\xb5Z\xe1\x12S\xf5G\xcc\xf3\xe9\x02h\v\xca(\x96\xe1C\xdf\x1c\xea\x85C\xfb\x10\x13\xfa\x03\x16\xcd\x05\x00\x80\xa1z\xb4r\x95\xc3@\x9d\xa6\xf1\xff#}g\xd3`\xf7\xcez\xcb\xb3\x1a\xbb\xc48e\x8e\xb1&\xd1\x8a\xe6!\x7f\x8d\xea,qx\xa28\xbf\"\xc7e\x80L\xb06\xeb<$\xd7\xba\xe5\x01\x03\x94r\xab\xd4J\x03s\xaf\xf6A\xbfV\xfa\x1ew\x8d\xbf\x99I\x97\xd8\xd2\xe8\x11\xc4\x04\x00\x04\xd5i\xee\xaf\xae[E\x1f\xdd\xd7#rT+\xb621p\xaf[\x99\" 1\xeb\xc7)\xd2\x1dh\xf2\xd5s\xfd?\fa>\x9f;\xe5r\xe5\xbd\xb0|=\x8eZcPY\xf8\xbd\x13\xaa\x8b\xdf\xbc\x93u\xd5\xb0r\xfb\xde\xe7\xd9k\xe2\xc6\x1b\xf2o@&>\xf2M\xe7\x8c\xeb\xee\xf5\x02~\x85\x14\xf3\xc6v\xf15PE\x8c\xca\x16$\xc2\x01#\xb563\rbq\xbf64\xfaW\x17\xdfa\xe6\xca\x86\xd7\xf8\x81X\x9bg4\xc1\xdam\xcf=Rq6\xb0\xd4D=I\x1a\x0e\xd0\xabz\xe2\x19\x0fM\xad\xdco\xa4\xb2\x8c?\xc1\x10\xf273\x01\x00\xb3_\xe8\x9a*\xfcL\xea;\xc0\x9a\xdbx!N;\xb5x\t\xa4E\xbe\x93r\x04\xf5\xf0\xf5\x7f\x9a)\xf5\x1b\"\xa1\xd8\x06>\xc9\xe2r\xe9_\xee\xc0\b\x81\x98\x1c\xe2\xe0?\x8f\xa1\xbel\aN\x83@\xb1\x03)4A\x83\x01\x01\x00\x00\x00\x00\x00\x00\b$\xa2x\x8a@\xfaj~\xef\x93\xb1/\\\x01\xe2\xba\x0e\xe3\xf95\x1d\x10\xa7\x97\xbf\x8e\xac\x81\xc9\x13\x8e\xb3\xf3\xb5d\xa1\xcf\x1d\x92\x9b\x9b\xa7\x12F\xa0\xe0\xff\x1a\x8e\xe2ae^=\n\xe1\xa6\xb8\xe9v\x8f2\xf4\xac\xe5\xdf\xffi`Mo\x1e\x1cMN<\x1b\xd8\xfe\xd6P\xcdQ\x83\xfa\xe7\x1d\xd5\x01n\xa7~\x8b\x90/62\xff;.S\xf7\x0flwa\x16\xf0\xf2(\x96V,\xd7s\xaaOE\xd3H\xfd`}\xd8\xbc\x9a\xca\xe3\n\xd7fCe\xd8\xbb\xdao\xb0\x85\xcc\xedv\x94\xb5\xc4\xb6[>\xb9,\xfch_-s\x94,F\x15\xd8m5>\x94\x84\xf5\x00\xc3\xf6m\xc7B\t{\xe0d\xc65(\x18\x9c\xad\x13b6\xca\x16\x95\xcb^zF\xd0\x1a\x8dP\x94\x19\xa4\xbfr=\xb6\xae', 0x0) ftruncate(r0, 0x2000000) ftruncate(r0, 0x0) 08:57:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x1}, @queue}], 0x1c) 08:57:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000d80)) 08:57:01 executing program 5: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) io_uring_setup(0x66d6, &(0x7f0000000380)={0x0, 0x9b66, 0x2, 0x3, 0x38b}) 08:57:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r2 = fcntl$dupfd(r1, 0x0, r1) setns(r2, 0x0) 08:57:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setns(r1, 0x0) 08:57:01 executing program 3: clone3(&(0x7f0000004c00)={0x422ca980, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 08:57:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0x220) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) 08:57:01 executing program 0: r0 = syz_io_uring_setup(0x1a8a, &(0x7f0000000100), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x18, &(0x7f0000000300), 0x0) 08:57:01 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x1}, @queue}], 0x1c) [ 293.981946] loop5: detected capacity change from 0 to 40 [ 294.276748] Bluetooth: hci7: command 0x0405 tx timeout [ 294.277275] Bluetooth: hci6: command 0x0c1a tx timeout [ 294.277318] Bluetooth: hci5: command 0x0c1a tx timeout [ 294.278032] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.278247] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.278860] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.279173] Bluetooth: hci1: command 0x0c1a tx timeout 08:57:03 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) 08:57:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r2 = fcntl$dupfd(r1, 0x0, r1) setns(r2, 0x0) 08:57:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') 08:57:03 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ftruncate(r0, 0x0) 08:57:03 executing program 0: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:03 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x1}, @queue}], 0x1c) 08:57:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0xde, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)="d2adf4b3dd6a2967d46876e4dfbb5127d38a75cd3ffea47ad6660a6399455c895f4008624da6b0116dffcf1fd1401db393", 0x31}, {&(0x7f00000007c0)="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", 0x242, 0x1000000fb0}], 0x30f001b, &(0x7f0000000600)={[{@nogrpid}, {@barrier}, {@acl}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'veth1_vlan\x00'}}, {@smackfsfloor}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'barri\x04r\xb8\x13\x90\xcb\xb4G\xe8*\xe0N\xd6U\xf1\biBx\xb2r\xae\b\xa2\x02t\xcc|;\fR`G\x13\xb5\x83v\xb4\xa9\xf7<\t\xb1\x13\x17I\x98gC\x0e)\xa2\x83N\xdf\xf4\xed\xff\x0f\xfb\xbe\xaa\xd5F\'\xea\x99\xdb\n{\xf3]\x8ct\xce\xbb.|\x92\n\xb3\x03\x14\x8a\xf73\xdc/\x00\x00\x00\x00'}}]}) io_setup(0xd29, &(0x7f0000000780)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1255c2, 0x0) socket$unix(0x1, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r1, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000000)='\x00', 0xf}]) 08:57:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x10000a8, &(0x7f00000000c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}) [ 295.650983] loop3: detected capacity change from 0 to 40 [ 295.695088] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. [ 295.709891] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: writeback. 08:57:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 08:57:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000009c0)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x90', &(0x7f0000000a00)='/U\xec\x8d\x11\xef\x98=\x0e\xecI\xc5\xe3\x14\xc8\xcb\xcc\x90\xa5\xdd@MaVV\xc3&\x85\xe8=\xa1\xcf\xf7\v\xb2iie\xfeq\xf3\'\n(m\xc5\x97\xf5\x15-\xe0\x19;\xb29\xb9\t\au\x94-\xe6\x9d[\xf4\xc5\xfclpP(vI\xd4\xd4s\x98\xac*7\x82\xa7y7h\xfcC\x1f#\x1cp\x9f|\xcb\xf3\x18]G \x9e\x1f\xbf$\xb9\x12@M\x8f\xbc\x062\xf5s{}\x12\xd8\xf4o\xceo\xb9Q|\xab\xdc\xfa\x19S\aflA\xfe\x80\xe9\xb1e{\xbc\x96\xdfP\xc1\xf8\x14l\\q\x92\xc7\\\t\xfdq\xbb\xc90\xbc0Y!\x84b\xdb\xc3+k\x7fQ1\xb5\n\x8a\xb1\x15\xd8\x9d\xc0Rnr\xd5x\x1fB\'i\xa7\x00\xbd\xb7\xbb\x97\xe0\xdb\xaa\xb4Lt\x98H\xe2$s\xc3\xb6\xe8|\x01\x8fg\x03\xf3v\x93\x1a\x90HU\x17\xf3\a%\xbf\x0fR\xb8\x9c\xedG\xe3I\xd62em\xbbxa\x9cQ{\xd7\xa6.Q\xb1\xa0L\x15\xf3H\xfb1k|o\a\xee\xec\xca\xab\x1a2A\xf1\xf2\xa6d\x89\x99n\xce`\xfa\xe9\xa3\xf2J~\x14\xe5?\xcf>sq.\xc0T\xd3\x05\x7f\xe0\xdb\xf7fx|4\x1a\xe4&\xe6\xc3\x16\xd9\x94\xac\x85\x193\b\x9b\xe1\xb1\xde\xe5\t`\x873\\=\x88\xb4\xab\x04\x9a\xb1\xa4o\xc4\xe5\xfbK\x91\x05\x908\x1dj\xcbe\xde\x17Ty\xfd\xe0[\x96z&\xdc|\xc72D*\x1b\xcfD)g\n+\xec\x99\n\x92\x88m\a\xba\x1e\xff\xd7\xc0%\x11i3\xfaRG\xc8Z\xe1\xe2<\xe1\xb1\xf3\xc1G\x8f\x85\x85\xeb\x86 \x8c\x05a\xb0\xacY+\xd9\xd4\x87]\xb2\x90\r\xc7\xdfG\xffpA\x12\x96\xab\xb8?\f6\xd9\x05\x80s$N\xef\xb9\x80v\xeeXk\x11D\x85\xfbf\xdaX\x86', 0x0) read(r0, 0x0, 0x0) 08:57:03 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000002380), 0x121800, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x530e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018"]) 08:57:03 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x1}, @queue}], 0x1c) 08:57:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r2 = fcntl$dupfd(r1, 0x0, r1) setns(r2, 0x0) 08:57:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 08:57:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') 08:57:03 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f0000000380)) pipe(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/tcp6\x00') pread64(r0, &(0x7f0000000040)=""/170, 0xaa, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 08:57:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 08:57:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000009c0)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x90', &(0x7f0000000a00)='/U\xec\x8d\x11\xef\x98=\x0e\xecI\xc5\xe3\x14\xc8\xcb\xcc\x90\xa5\xdd@MaVV\xc3&\x85\xe8=\xa1\xcf\xf7\v\xb2iie\xfeq\xf3\'\n(m\xc5\x97\xf5\x15-\xe0\x19;\xb29\xb9\t\au\x94-\xe6\x9d[\xf4\xc5\xfclpP(vI\xd4\xd4s\x98\xac*7\x82\xa7y7h\xfcC\x1f#\x1cp\x9f|\xcb\xf3\x18]G \x9e\x1f\xbf$\xb9\x12@M\x8f\xbc\x062\xf5s{}\x12\xd8\xf4o\xceo\xb9Q|\xab\xdc\xfa\x19S\aflA\xfe\x80\xe9\xb1e{\xbc\x96\xdfP\xc1\xf8\x14l\\q\x92\xc7\\\t\xfdq\xbb\xc90\xbc0Y!\x84b\xdb\xc3+k\x7fQ1\xb5\n\x8a\xb1\x15\xd8\x9d\xc0Rnr\xd5x\x1fB\'i\xa7\x00\xbd\xb7\xbb\x97\xe0\xdb\xaa\xb4Lt\x98H\xe2$s\xc3\xb6\xe8|\x01\x8fg\x03\xf3v\x93\x1a\x90HU\x17\xf3\a%\xbf\x0fR\xb8\x9c\xedG\xe3I\xd62em\xbbxa\x9cQ{\xd7\xa6.Q\xb1\xa0L\x15\xf3H\xfb1k|o\a\xee\xec\xca\xab\x1a2A\xf1\xf2\xa6d\x89\x99n\xce`\xfa\xe9\xa3\xf2J~\x14\xe5?\xcf>sq.\xc0T\xd3\x05\x7f\xe0\xdb\xf7fx|4\x1a\xe4&\xe6\xc3\x16\xd9\x94\xac\x85\x193\b\x9b\xe1\xb1\xde\xe5\t`\x873\\=\x88\xb4\xab\x04\x9a\xb1\xa4o\xc4\xe5\xfbK\x91\x05\x908\x1dj\xcbe\xde\x17Ty\xfd\xe0[\x96z&\xdc|\xc72D*\x1b\xcfD)g\n+\xec\x99\n\x92\x88m\a\xba\x1e\xff\xd7\xc0%\x11i3\xfaRG\xc8Z\xe1\xe2<\xe1\xb1\xf3\xc1G\x8f\x85\x85\xeb\x86 \x8c\x05a\xb0\xacY+\xd9\xd4\x87]\xb2\x90\r\xc7\xdfG\xffpA\x12\x96\xab\xb8?\f6\xd9\x05\x80s$N\xef\xb9\x80v\xeeXk\x11D\x85\xfbf\xdaX\x86', 0x0) read(r0, 0x0, 0x0) 08:57:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000009c0)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x90', &(0x7f0000000a00)='/U\xec\x8d\x11\xef\x98=\x0e\xecI\xc5\xe3\x14\xc8\xcb\xcc\x90\xa5\xdd@MaVV\xc3&\x85\xe8=\xa1\xcf\xf7\v\xb2iie\xfeq\xf3\'\n(m\xc5\x97\xf5\x15-\xe0\x19;\xb29\xb9\t\au\x94-\xe6\x9d[\xf4\xc5\xfclpP(vI\xd4\xd4s\x98\xac*7\x82\xa7y7h\xfcC\x1f#\x1cp\x9f|\xcb\xf3\x18]G \x9e\x1f\xbf$\xb9\x12@M\x8f\xbc\x062\xf5s{}\x12\xd8\xf4o\xceo\xb9Q|\xab\xdc\xfa\x19S\aflA\xfe\x80\xe9\xb1e{\xbc\x96\xdfP\xc1\xf8\x14l\\q\x92\xc7\\\t\xfdq\xbb\xc90\xbc0Y!\x84b\xdb\xc3+k\x7fQ1\xb5\n\x8a\xb1\x15\xd8\x9d\xc0Rnr\xd5x\x1fB\'i\xa7\x00\xbd\xb7\xbb\x97\xe0\xdb\xaa\xb4Lt\x98H\xe2$s\xc3\xb6\xe8|\x01\x8fg\x03\xf3v\x93\x1a\x90HU\x17\xf3\a%\xbf\x0fR\xb8\x9c\xedG\xe3I\xd62em\xbbxa\x9cQ{\xd7\xa6.Q\xb1\xa0L\x15\xf3H\xfb1k|o\a\xee\xec\xca\xab\x1a2A\xf1\xf2\xa6d\x89\x99n\xce`\xfa\xe9\xa3\xf2J~\x14\xe5?\xcf>sq.\xc0T\xd3\x05\x7f\xe0\xdb\xf7fx|4\x1a\xe4&\xe6\xc3\x16\xd9\x94\xac\x85\x193\b\x9b\xe1\xb1\xde\xe5\t`\x873\\=\x88\xb4\xab\x04\x9a\xb1\xa4o\xc4\xe5\xfbK\x91\x05\x908\x1dj\xcbe\xde\x17Ty\xfd\xe0[\x96z&\xdc|\xc72D*\x1b\xcfD)g\n+\xec\x99\n\x92\x88m\a\xba\x1e\xff\xd7\xc0%\x11i3\xfaRG\xc8Z\xe1\xe2<\xe1\xb1\xf3\xc1G\x8f\x85\x85\xeb\x86 \x8c\x05a\xb0\xacY+\xd9\xd4\x87]\xb2\x90\r\xc7\xdfG\xffpA\x12\x96\xab\xb8?\f6\xd9\x05\x80s$N\xef\xb9\x80v\xeeXk\x11D\x85\xfbf\xdaX\x86', 0x0) read(r0, 0x0, 0x0) 08:57:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 08:57:03 executing program 2: getitimer(0x0, 0x0) 08:57:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') 08:57:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000009c0)='\x00\x01\x00\x00\x00\x00\x00\x00\x00\x90', &(0x7f0000000a00)='/U\xec\x8d\x11\xef\x98=\x0e\xecI\xc5\xe3\x14\xc8\xcb\xcc\x90\xa5\xdd@MaVV\xc3&\x85\xe8=\xa1\xcf\xf7\v\xb2iie\xfeq\xf3\'\n(m\xc5\x97\xf5\x15-\xe0\x19;\xb29\xb9\t\au\x94-\xe6\x9d[\xf4\xc5\xfclpP(vI\xd4\xd4s\x98\xac*7\x82\xa7y7h\xfcC\x1f#\x1cp\x9f|\xcb\xf3\x18]G \x9e\x1f\xbf$\xb9\x12@M\x8f\xbc\x062\xf5s{}\x12\xd8\xf4o\xceo\xb9Q|\xab\xdc\xfa\x19S\aflA\xfe\x80\xe9\xb1e{\xbc\x96\xdfP\xc1\xf8\x14l\\q\x92\xc7\\\t\xfdq\xbb\xc90\xbc0Y!\x84b\xdb\xc3+k\x7fQ1\xb5\n\x8a\xb1\x15\xd8\x9d\xc0Rnr\xd5x\x1fB\'i\xa7\x00\xbd\xb7\xbb\x97\xe0\xdb\xaa\xb4Lt\x98H\xe2$s\xc3\xb6\xe8|\x01\x8fg\x03\xf3v\x93\x1a\x90HU\x17\xf3\a%\xbf\x0fR\xb8\x9c\xedG\xe3I\xd62em\xbbxa\x9cQ{\xd7\xa6.Q\xb1\xa0L\x15\xf3H\xfb1k|o\a\xee\xec\xca\xab\x1a2A\xf1\xf2\xa6d\x89\x99n\xce`\xfa\xe9\xa3\xf2J~\x14\xe5?\xcf>sq.\xc0T\xd3\x05\x7f\xe0\xdb\xf7fx|4\x1a\xe4&\xe6\xc3\x16\xd9\x94\xac\x85\x193\b\x9b\xe1\xb1\xde\xe5\t`\x873\\=\x88\xb4\xab\x04\x9a\xb1\xa4o\xc4\xe5\xfbK\x91\x05\x908\x1dj\xcbe\xde\x17Ty\xfd\xe0[\x96z&\xdc|\xc72D*\x1b\xcfD)g\n+\xec\x99\n\x92\x88m\a\xba\x1e\xff\xd7\xc0%\x11i3\xfaRG\xc8Z\xe1\xe2<\xe1\xb1\xf3\xc1G\x8f\x85\x85\xeb\x86 \x8c\x05a\xb0\xacY+\xd9\xd4\x87]\xb2\x90\r\xc7\xdfG\xffpA\x12\x96\xab\xb8?\f6\xd9\x05\x80s$N\xef\xb9\x80v\xeeXk\x11D\x85\xfbf\xdaX\x86', 0x0) read(r0, 0x0, 0x0) 08:57:03 executing program 7: semget$private(0x0, 0x5, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x8000}], 0x1, &(0x7f0000000040)) 08:57:03 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x138) 08:57:03 executing program 4: pselect6(0x40, &(0x7f0000004900), &(0x7f0000004940), 0x0, &(0x7f00000049c0)={0x0, 0x989680}, 0x0) 08:57:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/pids.max\x00', 0x0, 0x0) fdatasync(r0) [ 296.324773] Bluetooth: hci7: command 0x0405 tx timeout 08:57:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') syz_open_procfs(0x0, &(0x7f0000000740)='net/protocols\x00') 08:57:04 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000fef000/0x3000)=nil) shmat(r0, &(0x7f0000ff6000/0x1000)=nil, 0xfc2c6db4856dafa) mremap(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) 08:57:04 executing program 1: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) 08:57:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000005cc0)={'mangle\x00', 0x4, "8b4a7e9d"}, &(0x7f0000005d40)=0x28) 08:57:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 08:57:04 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00') ioctl$BTRFS_IOC_ADD_DEV(r0, 0x8004b706, 0x0) 08:57:04 executing program 2: prctl$PR_SET_MM_MAP(0x39, 0xe, &(0x7f00000078c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xe000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) 08:57:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x1f) 08:57:04 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 08:57:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000000000002fbcb9b1b026d81d"]) 08:57:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xe042, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x801c581f, &(0x7f0000000180)) 08:57:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)) io_submit(r0, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r1, &(0x7f00000001c0)="10", 0x1}]) r3 = dup(0xffffffffffffffff) sendmsg$nl_xfrm(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001d00010028bd7000fddbdf2508000b00010100000a0010"], 0x30}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$dupfd(r4, 0x0, r4) r5 = fork() ptrace$poke(0x5, r5, &(0x7f00000001c0), 0x99) r6 = fork() ptrace$poke(0x5, r6, &(0x7f00000001c0), 0x99) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$dupfd(r7, 0x0, r7) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r4, &(0x7f0000000040)={r3, r7, 0x8}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x11}}) 08:57:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x0, 0xfff, 0x4}) 08:57:04 executing program 7: prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) syz_io_uring_setup(0xfa7, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) 08:57:04 executing program 5: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0) clone3(&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r0, r1, 0x0, 0x3) [ 296.806148] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:57:04 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)='\x00', 0x1, 0x1000) 08:57:04 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04ff"], 0xd) 08:57:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 08:57:04 executing program 2: get_mempolicy(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x3) 08:57:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 08:57:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000180)) 08:57:04 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04ff"], 0xd) [ 297.129045] audit: type=1326 audit(1733302624.785:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11486 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f505b19 code=0x0 [ 297.135754] audit: type=1326 audit(1733302624.791:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11486 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f2f505b19 code=0x0 08:57:04 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x20440) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'geneve1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) r3 = dup(r1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00n']) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000000)) 08:57:04 executing program 4: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:57:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) 08:57:04 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="06", 0x1}], 0x1) 08:57:05 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04ff"], 0xd) 08:57:05 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="06", 0x1}], 0x1) 08:57:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)='\x00', 0x1, 0x1000) 08:57:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x540f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "215084fc1d4a485c3fc401fed5a594e0f988ea"}) 08:57:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) 08:57:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x20440) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'geneve1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) r3 = dup(r1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00n']) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000000)) 08:57:05 executing program 4: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) 08:57:05 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r0, &(0x7f0000001840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 08:57:05 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="06", 0x1}], 0x1) 08:57:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)='c', 0x1}], 0x1}}, {{&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0xb, &(0x7f0000000940)=[{&(0x7f0000000840)="92", 0x1}], 0x1}}], 0x2, 0x0) 08:57:05 executing program 2: pkey_mprotect(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff8000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) 08:57:05 executing program 3: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04ff"], 0xd) 08:57:05 executing program 0: add_key$fscrypt_v1(&(0x7f0000009940), 0x0, &(0x7f00000099c0)={0x0, "a8f9a608d3a483815139eb4ed371ee29e2802c97093a79f1318f6e31c78ad6849e290c5c2ba6575c51aaa4bc3222803ad2837ef6dedb2f98e81432a6fe8b04b4"}, 0x48, 0xffffffffffffffff) 08:57:05 executing program 6: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, r1+10000000}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 08:57:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x20440) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'geneve1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) r3 = dup(r1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00n']) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000000)) [ 297.705528] audit: type=1400 audit(1733302625.371:16): avc: denied { execstack } for pid=11541 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:57:05 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="06", 0x1}], 0x1) 08:57:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)='\x00', 0x1, 0x1000) 08:57:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x8) 08:57:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000480), &(0x7f00000004c0)={'enc=', 'raw', ' hash=', {'xcbc-aes-ce\x00'}}, &(0x7f0000000540), 0x0) 08:57:05 executing program 6: r0 = fsopen(&(0x7f00000000c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat2(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x40, 0x0, 0xd}, 0x18) 08:57:05 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x400, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_open_dev$mouse(0x0, 0x0, 0x0) 08:57:05 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r2, &(0x7f0000000180)='\x00', 0x1, 0x0) 08:57:05 executing program 4: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 08:57:05 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0x20440) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'geneve1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040), 0x4) r3 = dup(r1) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00n']) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000000)) 08:57:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40305839, &(0x7f0000000080)=ANY=[@ANYBLOB="0600000000007cd181000000000000000089"]) pwrite64(r0, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r0, &(0x7f0000000180)='\x00', 0x1, 0x1000) 08:57:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "cbc3e8d2c58aec8c82e118e4bc5b436e2d0189a71d463bc67cd0054af8440fdc", "b96bd92a8bec47f0f27ded178376ae7df458bdd490d676f8dcce53d572c854ce5ac2d3fb76003d389686c293c5c00cd3", "38606fa368a164ac2d82b03f63cfa6e436920b3e2c695c9a43843043", {"091d92ec355330eae0d68e2f2dd056bb", "58c47f0a8dcc4ff61e8c970e2f7d9803"}}}}}}}, 0x0) 08:57:05 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 08:57:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x4}}, 0x24, 0x0) 08:57:05 executing program 2: semtimedop(0x0, &(0x7f0000000140)=[{0x0, 0x9e36}, {}], 0x2, 0x0) semop(0x0, &(0x7f0000001ac0)=[{0x0, 0x2368, 0x1000}], 0x1) 08:57:05 executing program 0: futex(0x0, 0x8a, 0x0, 0x0, 0x0, 0x0) 08:57:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ptrace(0xffffffffffffffff, r0) 08:57:06 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r2, &(0x7f0000000180)='\x00', 0x1, 0x0) 08:57:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="3bb1470a41b80272efd9e465ee3bb204bb768b358502152f3689921febae9f2be89ff0ed49aad9dd19e5ba31c340da2bc21d5aec02b5f7830de23a318731fc7916f8c0c198bde7d91097139513ae74184f4ed6794cde38dcad8bf61ecc91dffa4da3743c147453f6427b2b4ac473426ce9d3b2af9c92b1f7b37e74307df9f76f55870bfcfbc8d4bd17eed730e07df05b4bac14a1ab0b9cf9ace19c24414d695061c5a2950ea71929f0bf187c9924c7eb59a5e0641dc763", 0xb7}], 0x1) 08:57:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x401}, {}]}}) 08:57:06 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee00, 0xee01, 0xee01) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) 08:57:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000002c0), 0x10, 0x0, 0x0, &(0x7f0000001840)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14}}], 0x28}, 0x0) 08:57:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 08:57:06 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @parameter_prob={0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) 08:57:06 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r2, &(0x7f0000000180)='\x00', 0x1, 0x0) 08:57:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 08:57:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x16, 0x0, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 08:57:06 executing program 6: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 08:57:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000001c0)={0x9ffc, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 08:57:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0) 08:57:06 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000280), 0x8, 0x0) inotify_init() socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 08:57:06 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/183) 08:57:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000000000)={0x24, 0x11, 0x401, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x35}]}, 0x24}], 0x1}, 0x0) 08:57:06 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="c0be54f2a4c388a7b8cf0fe4fa915d9b", 0x10) close(r0) 08:57:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x1630009be) inotify_rm_watch(r0, r1) read(r0, &(0x7f0000000200)=""/224, 0xe0) 08:57:06 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89b1, &(0x7f0000007c40)={'sit0\x00', 0x0}) 08:57:06 executing program 0: r0 = io_uring_setup(0x395f, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PROBE(r0, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="d8"], 0x20) [ 299.052967] audit: type=1400 audit(1733302626.716:17): avc: denied { watch_reads } for pid=11633 comm="syz-executor.4" path="/syzkaller-testdir384537259/syzkaller.dRQtwI/57" dev="sda" ino=15976 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 08:57:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 08:57:06 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) 08:57:06 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/183) 08:57:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) 08:57:06 executing program 0: perf_event_open(&(0x7f0000003c80)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000040)='}\x00', 0x40, 0x0, &(0x7f0000000080)={0x2, 0x40800000000, 0xbb58, 0x895}) 08:57:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./file1\x00', 0x0, 0x281814, 0x0) mount$9p_unix(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1005002, 0x0) umount2(&(0x7f0000000140)='./file1\x00', 0x0) 08:57:06 executing program 7: r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)="01", 0x1, 0x7fff) pwrite64(r2, &(0x7f0000000180)='\x00', 0x1, 0x0) 08:57:06 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x54a1, 0x0) 08:57:06 executing program 6: ioperm(0x0, 0x6d1f, 0x8) unlinkat(0xffffffffffffffff, 0x0, 0x200) 08:57:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="db", 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) write$binfmt_aout(r1, 0x0, 0x820) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000340)={0x0, 0x6a1}) 08:57:07 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x0) 08:57:07 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/183) 08:57:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) fallocate(r1, 0x10, 0x5, 0x7ffc) lseek(r0, 0x0, 0x4) 08:57:07 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 08:57:07 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 08:57:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 08:57:07 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 08:57:07 executing program 1: mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff8000/0x4000)=nil) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/183) 08:57:07 executing program 0: clock_gettime(0x0, &(0x7f0000004840)) 08:57:07 executing program 7: r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 08:57:07 executing program 5: syz_emit_ethernet(0xff76, 0x0, 0x0) 08:57:07 executing program 2: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x3d, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000040)=0x54) 08:57:08 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 08:57:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @initial, {0x9}}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x10}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}, 0x65) syz_80211_inject_frame(&(0x7f0000000400), 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) 08:57:08 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/resume', 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 08:57:08 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)='W', 0x1}], 0x1, 0x0, 0x0, 0x0) 08:57:08 executing program 6: poll(&(0x7f00000002c0)=[{}], 0x300, 0x0) 08:57:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0xee5}) [ 300.574071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.589178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:57:08 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000001480)=""/4111, 0x7ffff000}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x1000000) 08:57:08 executing program 1: r0 = getpid() r1 = pidfd_open(r0, 0x0) setns(r1, 0x20000) 08:57:08 executing program 0: membarrier(0x10, 0x0) membarrier(0x8, 0x0) 08:57:08 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 08:57:08 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)="81", 0x1, r0) keyctl$describe(0xb, r1, 0x0, 0x0) 08:57:08 executing program 0: r0 = getpid() r1 = pidfd_open(r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r1, r1, 0x0) 08:57:08 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() r1 = gettid() sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}], 0x20}}], 0x2, 0x0) 08:57:08 executing program 0: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x44032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x246240, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) 08:57:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0xee5}) [ 301.063066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:57:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x0) 08:57:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80585414, &(0x7f0000000100)) 08:57:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0xee5}) 08:57:09 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000001380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x8, 0x3a, 0x0, @private1, @local, {[], @echo_reply}}}}}, 0x0) 08:57:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0xfa, 0x5, 0x0) 08:57:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000340)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @initial, {0x9}}, 0x0, @random, 0x0, @void, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x10}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}, 0x65) syz_80211_inject_frame(&(0x7f0000000400), 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) 08:57:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4842, 0x0) 08:57:09 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)='9', 0x1, 0x8040000) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001400)=[{&(0x7f0000001480)=""/4111, 0x7ffff000}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r2, 0x10, 0x0, 0x1000000) [ 301.727887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.737355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:57:09 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x8, 0xffff}, {0x1}]}}) 08:57:09 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') ioctl$NS_GET_USERNS(r0, 0xb702, 0x0) VM DIAGNOSIS: 08:57:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff85c6dd60 RCX=ffffffff81525f2f RDX=ffff888009dd9b80 RSI=ffffffff81526035 RDI=0000000000000005 RBP=0000000000000001 RSP=ffff88806ce09600 R8 =0000000000000000 R9 =fffffbfff0fde1e4 R10=0000000000000001 R11=00000000000c3a26 R12=00007fc9b9bc9c64 R13=0000000000000000 R14=ffff888009dd9b80 R15=0000000000082820 RIP=ffffffff813934e0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc9b9310900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055556555fc98 CR3=000000000c5d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=c08122862372bfdd00000000001721e8 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=4ab38b495dcfb94100000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000008a74fa16 RBX=00000000e70b5dac RCX=0000000000000017 RDX=0000000000000017 RSI=ffff88806cf09724 RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88806cf09610 R8 =000000008f1d070c R9 =00000000ed5f2891 R10=ffffffff863fac97 R11=00000000000c3a26 R12=0000000000092820 R13=0000000000000000 R14=ffff88806cf09670 R15=0000000000092820 RIP=ffffffff823817c9 RFL=00000a97 [-OS-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f8ad59a8700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000080 CR3=000000003a764000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000