Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:9104' (ECDSA) to the list of known hosts. 2024/12/16 16:17:49 fuzzer started 2024/12/16 16:17:49 dialing manager at localhost:44605 syzkaller login: [ 55.978494] cgroup: Unknown subsys name 'net' [ 56.095228] cgroup: Unknown subsys name 'cpuset' [ 56.126384] cgroup: Unknown subsys name 'rlimit' 2024/12/16 16:18:09 syscalls: 2217 2024/12/16 16:18:09 code coverage: enabled 2024/12/16 16:18:09 comparison tracing: enabled 2024/12/16 16:18:09 extra coverage: enabled 2024/12/16 16:18:09 setuid sandbox: enabled 2024/12/16 16:18:09 namespace sandbox: enabled 2024/12/16 16:18:09 Android sandbox: enabled 2024/12/16 16:18:09 fault injection: enabled 2024/12/16 16:18:09 leak checking: enabled 2024/12/16 16:18:09 net packet injection: enabled 2024/12/16 16:18:09 net device setup: enabled 2024/12/16 16:18:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/16 16:18:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/16 16:18:09 USB emulation: enabled 2024/12/16 16:18:09 hci packet injection: enabled 2024/12/16 16:18:09 wifi device emulation: enabled 2024/12/16 16:18:09 802.15.4 emulation: enabled 2024/12/16 16:18:09 fetching corpus: 0, signal 0/2000 (executing program) 2024/12/16 16:18:09 fetching corpus: 50, signal 19945/23483 (executing program) 2024/12/16 16:18:10 fetching corpus: 100, signal 37222/41932 (executing program) 2024/12/16 16:18:10 fetching corpus: 150, signal 42550/48571 (executing program) 2024/12/16 16:18:10 fetching corpus: 200, signal 50191/57253 (executing program) 2024/12/16 16:18:10 fetching corpus: 250, signal 53942/62141 (executing program) 2024/12/16 16:18:10 fetching corpus: 300, signal 58445/67621 (executing program) 2024/12/16 16:18:10 fetching corpus: 350, signal 61039/71288 (executing program) 2024/12/16 16:18:10 fetching corpus: 400, signal 65014/76117 (executing program) 2024/12/16 16:18:10 fetching corpus: 450, signal 69102/80961 (executing program) 2024/12/16 16:18:11 fetching corpus: 500, signal 75197/87468 (executing program) 2024/12/16 16:18:11 fetching corpus: 550, signal 79242/92055 (executing program) 2024/12/16 16:18:11 fetching corpus: 600, signal 82082/95516 (executing program) 2024/12/16 16:18:11 fetching corpus: 650, signal 84761/98839 (executing program) 2024/12/16 16:18:11 fetching corpus: 700, signal 87688/102271 (executing program) 2024/12/16 16:18:11 fetching corpus: 750, signal 89329/104540 (executing program) 2024/12/16 16:18:11 fetching corpus: 800, signal 91640/107251 (executing program) 2024/12/16 16:18:11 fetching corpus: 850, signal 93690/109769 (executing program) 2024/12/16 16:18:12 fetching corpus: 900, signal 95866/112421 (executing program) 2024/12/16 16:18:12 fetching corpus: 950, signal 97658/114629 (executing program) 2024/12/16 16:18:12 fetching corpus: 1000, signal 98919/116439 (executing program) 2024/12/16 16:18:12 fetching corpus: 1050, signal 100652/118571 (executing program) 2024/12/16 16:18:12 fetching corpus: 1100, signal 101595/120142 (executing program) 2024/12/16 16:18:12 fetching corpus: 1150, signal 102728/121735 (executing program) 2024/12/16 16:18:12 fetching corpus: 1200, signal 105300/124390 (executing program) 2024/12/16 16:18:12 fetching corpus: 1250, signal 106270/125827 (executing program) 2024/12/16 16:18:12 fetching corpus: 1300, signal 107550/127395 (executing program) 2024/12/16 16:18:13 fetching corpus: 1350, signal 108732/128968 (executing program) 2024/12/16 16:18:13 fetching corpus: 1400, signal 109913/130473 (executing program) 2024/12/16 16:18:13 fetching corpus: 1450, signal 110982/131862 (executing program) 2024/12/16 16:18:13 fetching corpus: 1500, signal 112679/133651 (executing program) 2024/12/16 16:18:13 fetching corpus: 1550, signal 113826/135057 (executing program) 2024/12/16 16:18:13 fetching corpus: 1600, signal 115061/136497 (executing program) 2024/12/16 16:18:13 fetching corpus: 1650, signal 116532/138010 (executing program) 2024/12/16 16:18:13 fetching corpus: 1700, signal 118088/139540 (executing program) 2024/12/16 16:18:14 fetching corpus: 1750, signal 119268/140850 (executing program) 2024/12/16 16:18:14 fetching corpus: 1800, signal 120872/142336 (executing program) 2024/12/16 16:18:14 fetching corpus: 1850, signal 121455/143255 (executing program) 2024/12/16 16:18:14 fetching corpus: 1900, signal 122133/144182 (executing program) 2024/12/16 16:18:14 fetching corpus: 1950, signal 122822/145087 (executing program) 2024/12/16 16:18:14 fetching corpus: 2000, signal 124889/146689 (executing program) 2024/12/16 16:18:14 fetching corpus: 2050, signal 125689/147571 (executing program) 2024/12/16 16:18:14 fetching corpus: 2100, signal 126533/148513 (executing program) 2024/12/16 16:18:15 fetching corpus: 2150, signal 127480/149519 (executing program) 2024/12/16 16:18:15 fetching corpus: 2200, signal 128442/150485 (executing program) 2024/12/16 16:18:15 fetching corpus: 2250, signal 129120/151269 (executing program) 2024/12/16 16:18:15 fetching corpus: 2300, signal 130185/152214 (executing program) 2024/12/16 16:18:15 fetching corpus: 2350, signal 130820/152944 (executing program) 2024/12/16 16:18:15 fetching corpus: 2400, signal 131431/153676 (executing program) 2024/12/16 16:18:15 fetching corpus: 2450, signal 133100/154818 (executing program) 2024/12/16 16:18:15 fetching corpus: 2500, signal 134396/155803 (executing program) 2024/12/16 16:18:15 fetching corpus: 2550, signal 135144/156528 (executing program) 2024/12/16 16:18:16 fetching corpus: 2600, signal 135700/157168 (executing program) 2024/12/16 16:18:16 fetching corpus: 2650, signal 136178/157757 (executing program) 2024/12/16 16:18:16 fetching corpus: 2700, signal 136737/158342 (executing program) 2024/12/16 16:18:16 fetching corpus: 2750, signal 137524/158993 (executing program) 2024/12/16 16:18:16 fetching corpus: 2800, signal 138148/159578 (executing program) 2024/12/16 16:18:16 fetching corpus: 2850, signal 138578/160084 (executing program) 2024/12/16 16:18:16 fetching corpus: 2900, signal 139055/160578 (executing program) 2024/12/16 16:18:16 fetching corpus: 2950, signal 139595/161114 (executing program) 2024/12/16 16:18:16 fetching corpus: 3000, signal 140555/161753 (executing program) 2024/12/16 16:18:16 fetching corpus: 3050, signal 141165/162274 (executing program) 2024/12/16 16:18:17 fetching corpus: 3100, signal 141731/162750 (executing program) 2024/12/16 16:18:17 fetching corpus: 3150, signal 142338/163230 (executing program) 2024/12/16 16:18:17 fetching corpus: 3200, signal 142856/163676 (executing program) 2024/12/16 16:18:17 fetching corpus: 3250, signal 143397/164099 (executing program) 2024/12/16 16:18:17 fetching corpus: 3300, signal 144043/164539 (executing program) 2024/12/16 16:18:17 fetching corpus: 3350, signal 144707/164988 (executing program) 2024/12/16 16:18:17 fetching corpus: 3400, signal 145422/165409 (executing program) 2024/12/16 16:18:17 fetching corpus: 3450, signal 146108/165797 (executing program) 2024/12/16 16:18:17 fetching corpus: 3500, signal 146605/166162 (executing program) 2024/12/16 16:18:17 fetching corpus: 3550, signal 147246/166541 (executing program) 2024/12/16 16:18:18 fetching corpus: 3600, signal 147830/166894 (executing program) 2024/12/16 16:18:18 fetching corpus: 3650, signal 148252/167230 (executing program) 2024/12/16 16:18:18 fetching corpus: 3700, signal 148756/167541 (executing program) 2024/12/16 16:18:18 fetching corpus: 3750, signal 149731/167900 (executing program) 2024/12/16 16:18:18 fetching corpus: 3800, signal 150306/168181 (executing program) 2024/12/16 16:18:18 fetching corpus: 3850, signal 150942/168457 (executing program) 2024/12/16 16:18:18 fetching corpus: 3900, signal 151325/168709 (executing program) 2024/12/16 16:18:18 fetching corpus: 3950, signal 151874/168959 (executing program) 2024/12/16 16:18:18 fetching corpus: 4000, signal 152308/169175 (executing program) 2024/12/16 16:18:19 fetching corpus: 4050, signal 152711/169405 (executing program) 2024/12/16 16:18:19 fetching corpus: 4100, signal 153268/169608 (executing program) 2024/12/16 16:18:19 fetching corpus: 4150, signal 153689/169795 (executing program) 2024/12/16 16:18:19 fetching corpus: 4200, signal 154240/169884 (executing program) 2024/12/16 16:18:19 fetching corpus: 4250, signal 154722/169884 (executing program) 2024/12/16 16:18:19 fetching corpus: 4300, signal 155352/169884 (executing program) 2024/12/16 16:18:19 fetching corpus: 4350, signal 155805/169884 (executing program) 2024/12/16 16:18:19 fetching corpus: 4400, signal 156557/169897 (executing program) 2024/12/16 16:18:20 fetching corpus: 4450, signal 156909/169897 (executing program) 2024/12/16 16:18:20 fetching corpus: 4500, signal 157322/169897 (executing program) 2024/12/16 16:18:20 fetching corpus: 4550, signal 157673/169900 (executing program) 2024/12/16 16:18:20 fetching corpus: 4600, signal 158242/169900 (executing program) 2024/12/16 16:18:20 fetching corpus: 4650, signal 158732/169900 (executing program) 2024/12/16 16:18:20 fetching corpus: 4700, signal 159077/169904 (executing program) 2024/12/16 16:18:20 fetching corpus: 4750, signal 159500/169904 (executing program) 2024/12/16 16:18:20 fetching corpus: 4800, signal 159950/169904 (executing program) 2024/12/16 16:18:20 fetching corpus: 4850, signal 160392/169904 (executing program) 2024/12/16 16:18:20 fetching corpus: 4900, signal 161063/169907 (executing program) 2024/12/16 16:18:21 fetching corpus: 4950, signal 161623/169907 (executing program) 2024/12/16 16:18:21 fetching corpus: 5000, signal 162154/169907 (executing program) 2024/12/16 16:18:21 fetching corpus: 5050, signal 162737/169913 (executing program) 2024/12/16 16:18:21 fetching corpus: 5100, signal 163337/169913 (executing program) 2024/12/16 16:18:21 fetching corpus: 5150, signal 163810/169913 (executing program) 2024/12/16 16:18:21 fetching corpus: 5200, signal 164101/169913 (executing program) 2024/12/16 16:18:21 fetching corpus: 5250, signal 164571/169913 (executing program) 2024/12/16 16:18:21 fetching corpus: 5300, signal 164934/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5350, signal 165399/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5400, signal 165663/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5450, signal 166127/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5500, signal 166438/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5550, signal 166785/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5600, signal 167133/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5650, signal 167524/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5700, signal 168056/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5750, signal 168407/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5800, signal 168744/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5818, signal 168883/169913 (executing program) 2024/12/16 16:18:22 fetching corpus: 5818, signal 168883/169913 (executing program) 2024/12/16 16:18:25 starting 8 fuzzer processes 16:18:25 executing program 0: perf_event_open(&(0x7f0000002040)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x800) 16:18:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000080)={[{@numtail}, {@utf8}]}) 16:18:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:18:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005b00), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x80111500, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, "934be6c67b33230e57a0a542100ac4e32eabce"}) [ 90.548497] audit: type=1400 audit(1734365905.801:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 16:18:25 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @empty, @local, {[], @ni={0x8c}}}}}}, 0x0) 16:18:25 executing program 5: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000010c0)={"c38974642bb0eb105463b381", &(0x7f0000001180)="1f", 0x1, 0x0, 0x0, 0x1, 0x0, 0x3426, 0x0}) 16:18:25 executing program 6: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 16:18:25 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x2016}}}, 0x7) [ 91.905722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.907085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.908342] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.911175] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.912875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.914096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.964592] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.974360] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.983968] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.985422] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.987450] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.993267] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.995032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.003584] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.005374] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.011068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.013110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.037781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.084132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.087253] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.090851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.099318] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.104596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.105802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.110514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.112459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.117039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.117856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.122926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.123785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.124726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.129088] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.130988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.136779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.138963] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.140212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.141596] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.149051] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.151353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.156172] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.157248] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.169355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.171003] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.172230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.174378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.175393] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.176230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.184994] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.940084] Bluetooth: hci0: command tx timeout [ 94.132692] Bluetooth: hci1: command tx timeout [ 94.133286] Bluetooth: hci2: command tx timeout [ 94.194767] Bluetooth: hci3: command tx timeout [ 94.195390] Bluetooth: hci4: command tx timeout [ 94.258791] Bluetooth: hci7: command tx timeout [ 94.259466] Bluetooth: hci5: command tx timeout [ 94.323886] Bluetooth: hci6: command tx timeout [ 95.987178] Bluetooth: hci0: command tx timeout [ 96.179882] Bluetooth: hci2: command tx timeout [ 96.180369] Bluetooth: hci1: command tx timeout [ 96.242804] Bluetooth: hci4: command tx timeout [ 96.243260] Bluetooth: hci3: command tx timeout [ 96.307744] Bluetooth: hci5: command tx timeout [ 96.308201] Bluetooth: hci7: command tx timeout [ 96.371097] Bluetooth: hci6: command tx timeout [ 98.034704] Bluetooth: hci0: command tx timeout [ 98.227773] Bluetooth: hci1: command tx timeout [ 98.228248] Bluetooth: hci2: command tx timeout [ 98.291785] Bluetooth: hci3: command tx timeout [ 98.292223] Bluetooth: hci4: command tx timeout [ 98.355745] Bluetooth: hci5: command tx timeout [ 98.356184] Bluetooth: hci7: command tx timeout [ 98.418836] Bluetooth: hci6: command tx timeout [ 100.082704] Bluetooth: hci0: command tx timeout [ 100.275795] Bluetooth: hci2: command tx timeout [ 100.276449] Bluetooth: hci1: command tx timeout [ 100.339713] Bluetooth: hci4: command tx timeout [ 100.340146] Bluetooth: hci3: command tx timeout [ 100.403782] Bluetooth: hci7: command tx timeout [ 100.404219] Bluetooth: hci5: command tx timeout [ 100.467853] Bluetooth: hci6: command tx timeout [ 148.706127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.706873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.123446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.124145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.753421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.754122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.964324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.965603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.225073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.226604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.327514] audit: type=1400 audit(1734365965.578:8): avc: denied { open } for pid=3855 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 150.330443] audit: type=1400 audit(1734365965.578:9): avc: denied { kernel } for pid=3855 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 150.443759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.444403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.469481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.470139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.621962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.622824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.043596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 154.052576] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 154.055279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.066730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.069458] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.071409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.117052] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.121954] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.131050] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.139251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.142594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.146167] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.148118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.159454] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.167514] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.171827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.175775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.176831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.260447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.262914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.266813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.269424] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.275887] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.277684] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.322388] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.328037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.333812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.337843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.347319] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.358103] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.362001] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.363478] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.365925] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.368343] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.369274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.379498] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.390883] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.395423] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.397836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.399561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.414551] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.416488] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.082876] Bluetooth: hci0: command tx timeout [ 156.210797] Bluetooth: hci1: command tx timeout [ 156.274736] Bluetooth: hci2: command tx timeout [ 156.338803] Bluetooth: hci3: command tx timeout [ 156.466828] Bluetooth: hci7: command tx timeout [ 156.595448] Bluetooth: hci6: command tx timeout [ 156.659219] Bluetooth: hci5: command tx timeout [ 158.131761] Bluetooth: hci0: command tx timeout [ 158.260795] Bluetooth: hci1: command tx timeout [ 158.322750] Bluetooth: hci2: command tx timeout [ 158.386705] Bluetooth: hci3: command tx timeout [ 158.514851] Bluetooth: hci7: command tx timeout [ 158.643760] Bluetooth: hci6: command tx timeout [ 158.708115] Bluetooth: hci5: command tx timeout [ 160.180279] Bluetooth: hci0: command tx timeout [ 160.307729] Bluetooth: hci1: command tx timeout [ 160.371715] Bluetooth: hci2: command tx timeout [ 160.434703] Bluetooth: hci3: command tx timeout [ 160.563732] Bluetooth: hci7: command tx timeout [ 160.690715] Bluetooth: hci6: command tx timeout [ 160.754724] Bluetooth: hci5: command tx timeout [ 162.226751] Bluetooth: hci0: command tx timeout [ 162.355761] Bluetooth: hci1: command tx timeout [ 162.421679] Bluetooth: hci2: command tx timeout [ 162.483778] Bluetooth: hci3: command tx timeout [ 162.611704] Bluetooth: hci7: command tx timeout [ 162.739708] Bluetooth: hci6: command tx timeout [ 162.803733] Bluetooth: hci5: command tx timeout [ 203.512847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.513485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.473922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.474552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.536018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.536804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.698241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.698937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.852190] loop1: detected capacity change from 0 to 64 [ 206.939202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.939887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.158672] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 207.186954] FAT-fs (loop1): Directory bread(block 64) failed [ 207.187485] FAT-fs (loop1): Directory bread(block 65) failed [ 207.188685] FAT-fs (loop1): Directory bread(block 66) failed [ 207.189209] FAT-fs (loop1): Directory bread(block 67) failed [ 207.191385] FAT-fs (loop1): Directory bread(block 68) failed [ 207.191970] FAT-fs (loop1): Directory bread(block 69) failed [ 207.192485] FAT-fs (loop1): Directory bread(block 70) failed [ 207.198658] FAT-fs (loop1): Directory bread(block 71) failed [ 207.199188] FAT-fs (loop1): Directory bread(block 72) failed [ 207.199757] FAT-fs (loop1): Directory bread(block 73) failed [ 207.234688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.235299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.323376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.324087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.433408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.434176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.527356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.528195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.590066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.590752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.698980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.699740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.846518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.847427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.999155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.999848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.159563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.160572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 16:20:24 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x2016}}}, 0x7) 16:20:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000080)={[{@numtail}, {@utf8}]}) 16:20:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 16:20:24 executing program 0: perf_event_open(&(0x7f0000002040)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x800) 16:20:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @empty, @local, {[], @ni={0x8c}}}}}}, 0x0) 16:20:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 5: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000010c0)={"c38974642bb0eb105463b381", &(0x7f0000001180)="1f", 0x1, 0x0, 0x0, 0x1, 0x0, 0x3426, 0x0}) 16:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005b00), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x80111500, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, "934be6c67b33230e57a0a542100ac4e32eabce"}) [ 208.905953] loop1: detected capacity change from 0 to 64 [ 208.926017] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 208.979667] FAT-fs (loop1): Directory bread(block 64) failed [ 208.981412] FAT-fs (loop1): Directory bread(block 65) failed [ 208.984267] FAT-fs (loop1): Directory bread(block 66) failed [ 208.986738] FAT-fs (loop1): Directory bread(block 67) failed [ 208.987290] FAT-fs (loop1): Directory bread(block 68) failed [ 208.995163] FAT-fs (loop1): Directory bread(block 69) failed [ 208.999142] FAT-fs (loop1): Directory bread(block 70) failed [ 209.004262] FAT-fs (loop1): Directory bread(block 71) failed [ 209.012509] FAT-fs (loop1): Directory bread(block 72) failed [ 209.013088] FAT-fs (loop1): Directory bread(block 73) failed 16:20:24 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x2016}}}, 0x7) 16:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005b00), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x80111500, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, "934be6c67b33230e57a0a542100ac4e32eabce"}) 16:20:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @empty, @local, {[], @ni={0x8c}}}}}}, 0x0) 16:20:24 executing program 0: perf_event_open(&(0x7f0000002040)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x800) 16:20:24 executing program 7: syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x2016}}}, 0x7) 16:20:24 executing program 0: perf_event_open(&(0x7f0000002040)={0x2, 0x80, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x800) 16:20:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 16:20:24 executing program 5: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000010c0)={"c38974642bb0eb105463b381", &(0x7f0000001180)="1f", 0x1, 0x0, 0x0, 0x1, 0x0, 0x3426, 0x0}) 16:20:24 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @empty, @local, {[], @ni={0x8c}}}}}}, 0x0) 16:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005b00), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x80111500, &(0x7f0000005b40)={0x0, 0x0, 0x0, 0x0, 0x0, "934be6c67b33230e57a0a542100ac4e32eabce"}) 16:20:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000080)={[{@numtail}, {@utf8}]}) [ 209.323525] loop1: detected capacity change from 0 to 64 [ 209.336969] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 209.386776] FAT-fs (loop1): Directory bread(block 64) failed [ 209.387323] FAT-fs (loop1): Directory bread(block 65) failed [ 209.391768] FAT-fs (loop1): Directory bread(block 66) failed [ 209.397867] FAT-fs (loop1): Directory bread(block 67) failed [ 209.398393] FAT-fs (loop1): Directory bread(block 68) failed [ 209.400953] FAT-fs (loop1): Directory bread(block 69) failed [ 209.401481] FAT-fs (loop1): Directory bread(block 70) failed [ 209.409695] FAT-fs (loop1): Directory bread(block 71) failed [ 209.410508] FAT-fs (loop1): Directory bread(block 72) failed [ 209.412224] FAT-fs (loop1): Directory bread(block 73) failed 16:20:24 executing program 6: syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 16:20:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 5: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f00000010c0)={"c38974642bb0eb105463b381", &(0x7f0000001180)="1f", 0x1, 0x0, 0x0, 0x1, 0x0, 0x3426, 0x0}) 16:20:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000080)={[{@numtail}, {@utf8}]}) 16:20:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 209.674919] loop1: detected capacity change from 0 to 64 [ 209.683849] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 16:20:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000000040)={0x20, 0x11, 0x401, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="fca5fc4305"]}, 0x20}], 0x1}, 0x0) [ 209.729528] FAT-fs (loop1): Directory bread(block 64) failed [ 209.731698] FAT-fs (loop1): Directory bread(block 65) failed [ 209.732232] FAT-fs (loop1): Directory bread(block 66) failed [ 209.736881] FAT-fs (loop1): Directory bread(block 67) failed [ 209.737416] FAT-fs (loop1): Directory bread(block 68) failed [ 209.743731] FAT-fs (loop1): Directory bread(block 69) failed [ 209.744268] FAT-fs (loop1): Directory bread(block 70) failed [ 209.749102] FAT-fs (loop1): Directory bread(block 71) failed [ 209.749667] FAT-fs (loop1): Directory bread(block 72) failed 16:20:24 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 209.753677] FAT-fs (loop1): Directory bread(block 73) failed 16:20:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1a42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 16:20:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000000040)={0x20, 0x11, 0x401, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="fca5fc4305"]}, 0x20}], 0x1}, 0x0) 16:20:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "80eafaa5d98e05c26af473ae7efd9fde7f4157"}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/112, 0x70}], 0x1) 16:20:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) mknodat$null(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) unlinkat(r2, &(0x7f0000000480)='./file0\x00', 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16:20:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1a42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 16:20:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "80eafaa5d98e05c26af473ae7efd9fde7f4157"}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/112, 0x70}], 0x1) 16:20:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1a42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 16:20:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000000040)={0x20, 0x11, 0x401, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="fca5fc4305"]}, 0x20}], 0x1}, 0x0) 16:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000c80)) lstat(&(0x7f0000000ec0)='./file0\x00', 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001140)={&(0x7f0000000f80), 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x20}}, 0x0) 16:20:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1a42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4000) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) 16:20:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "80eafaa5d98e05c26af473ae7efd9fde7f4157"}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/112, 0x70}], 0x1) 16:20:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000080)=""/108, 0x6c, 0x0) 16:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0xd01}, 0x14}}, 0x0) 16:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000c80)) lstat(&(0x7f0000000ec0)='./file0\x00', 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001140)={&(0x7f0000000f80), 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x20}}, 0x0) 16:20:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007280)=[{&(0x7f0000000040)={0x20, 0x11, 0x401, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="fca5fc4305"]}, 0x20}], 0x1}, 0x0) 16:20:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x5}) 16:20:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0xd01}, 0x14}}, 0x0) 16:20:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000080)=""/108, 0x6c, 0x0) 16:20:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:25 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000c80)) lstat(&(0x7f0000000ec0)='./file0\x00', 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001140)={&(0x7f0000000f80), 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x20}}, 0x0) 16:20:25 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x9) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "80eafaa5d98e05c26af473ae7efd9fde7f4157"}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/112, 0x70}], 0x1) 16:20:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0xd01}, 0x14}}, 0x0) 16:20:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000c80)) lstat(&(0x7f0000000ec0)='./file0\x00', 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000001140)={&(0x7f0000000f80), 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x20}}, 0x0) 16:20:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x5}) 16:20:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000080)=""/108, 0x6c, 0x0) 16:20:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:26 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) 16:20:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a891d390e1a776833e7c1f1357046b85e68f9c"}) 16:20:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x5}) 16:20:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) close(r0) 16:20:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') pread64(r0, &(0x7f0000000080)=""/108, 0x6c, 0x0) 16:20:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_misc(r0, &(0x7f0000001000)={'syz1', "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"}, 0x964) 16:20:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r1, 0xd01}, 0x14}}, 0x0) 16:20:26 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187b, &(0x7f00000086c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008740), &(0x7f0000008780)) 16:20:26 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) 16:20:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a891d390e1a776833e7c1f1357046b85e68f9c"}) 16:20:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x5}) 16:20:26 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:20:26 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_misc(r0, &(0x7f0000001000)={'syz1', "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"}, 0x964) [ 211.490646] hrtimer: interrupt took 47821 ns 16:20:26 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_misc(r0, &(0x7f0000001000)={'syz1', "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"}, 0x964) 16:20:26 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187b, &(0x7f00000086c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008740), &(0x7f0000008780)) [ 211.669291] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 16:20:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:26 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) [ 211.879930] audit: type=1400 audit(1734366027.123:10): avc: denied { write } for pid=7246 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 212.349539] Bluetooth: hci0: Opcode 0x0c03 failed: -4 16:20:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a891d390e1a776833e7c1f1357046b85e68f9c"}) 16:20:27 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_misc(r0, &(0x7f0000001000)={'syz1', "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"}, 0x964) 16:20:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:20:27 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187b, &(0x7f00000086c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008740), &(0x7f0000008780)) 16:20:27 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:27 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f00000000c0)=[{}], 0x1) 16:20:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:27 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:20:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a891d390e1a776833e7c1f1357046b85e68f9c"}) 16:20:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:20:27 executing program 2: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x5831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x187b, &(0x7f00000086c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008740), &(0x7f0000008780)) 16:20:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:20:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:20:28 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:20:28 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 16:20:28 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:28 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) [ 213.590549] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 217.049940] Bluetooth: hci4: command 0x0406 tx timeout [ 240.855646] watchdog: BUG: soft lockup - CPU#1 stuck for 26s! [syz-executor.2:7296] [ 240.856421] Modules linked in: [ 240.856725] irq event stamp: 2645139 [ 240.857054] hardirqs last enabled at (2645138): [] irqentry_exit+0x3b/0x90 [ 240.858279] hardirqs last disabled at (2645139): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 240.860315] softirqs last enabled at (2643864): [] handle_softirqs+0x50c/0x770 [ 240.861978] softirqs last disabled at (2643867): [] __irq_exit_rcu+0xc4/0x100 [ 240.864091] CPU: 1 UID: 0 PID: 7296 Comm: syz-executor.2 Not tainted 6.13.0-rc2-next-20241216 #1 [ 240.866104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 240.867075] RIP: 0010:unwind_next_frame+0x369/0x2490 [ 240.867563] Code: ff df 4c 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e f7 16 00 00 41 c7 07 00 00 00 00 31 c0 48 83 c4 38 5b 5d 41 5c <41> 5d 41 5e 41 5f e9 ac 78 73 03 48 81 f9 00 90 d5 86 0f 83 cb 02 [ 240.869120] RSP: 0018:ffff88806cf09658 EFLAGS: 00000292 [ 240.869608] RAX: 0000000000000001 RBX: ffffffff815f15a0 RCX: 0000000000000001 [ 240.870233] RDX: ffff88806cf09e08 RSI: ffff88806cf09dd0 RDI: ffff88806cf09688 [ 240.870868] RBP: ffff88806cf09710 R08: 0000000000000001 R09: ffff88806cf096b8 [ 240.871494] R10: 000000000003a864 R11: 0000000000012d56 R12: ffff88806cf09740 [ 240.872132] R13: ffff88806cf096c0 R14: ffff88806cf09dd0 R15: ffff88806cf09678 [ 240.872763] FS: 00007f7c44170700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 240.873465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.873985] CR2: 000055fa3d890c20 CR3: 000000001647e000 CR4: 0000000000350ef0 [ 240.874616] Call Trace: [ 240.874859] [ 240.875075] ? watchdog_timer_fn+0x3ee/0x510 [ 240.875497] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 240.875960] ? __hrtimer_run_queues+0x57c/0xa80 [ 240.876414] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 240.876881] ? ktime_get_update_offsets_now+0x252/0x3c0 [ 240.877403] ? hrtimer_interrupt+0x369/0x830 [ 240.877845] ? __sysvec_apic_timer_interrupt+0xc2/0x330 [ 240.878356] ? sysvec_apic_timer_interrupt+0x34/0x80 [ 240.878837] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.879352] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 240.879888] ? unwind_next_frame+0x369/0x2490 [ 240.880337] arch_stack_walk+0x87/0xf0 [ 240.880729] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 240.881175] ? __run_timers+0x669/0x930 [ 240.881581] stack_trace_save+0x8f/0xc0 [ 240.881977] ? __pfx_stack_trace_save+0x10/0x10 [ 240.882438] ? srso_return_thunk+0x5/0x5f [ 240.882856] ? hlock_class+0x4e/0x130 [ 240.883218] ? srso_return_thunk+0x5/0x5f [ 240.883627] ? mark_lock+0xac/0xed0 [ 240.884001] kasan_save_stack+0x24/0x50 [ 240.884407] ? kasan_save_stack+0x24/0x50 [ 240.884821] ? kasan_save_track+0x14/0x30 [ 240.885241] ? __kasan_kmalloc+0x7f/0x90 [ 240.885649] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 240.886096] ? icmp6_dst_alloc+0x45b/0x5f0 [ 240.886504] ? ndisc_send_skb+0x1159/0x1bb0 [ 240.886916] ? ndisc_send_rs+0x12d/0x540 [ 240.887308] ? addrconf_rs_timer+0x2e7/0x7a0 [ 240.887722] ? call_timer_fn+0x198/0x5d0 [ 240.888142] ? srso_return_thunk+0x5/0x5f [ 240.888550] ? find_held_lock+0x2c/0x110 [ 240.888963] ? __create_object+0x59/0x80 [ 240.889354] ? srso_return_thunk+0x5/0x5f [ 240.889769] ? lock_release+0x20f/0x6f0 [ 240.890167] ? __pfx_lock_release+0x10/0x10 [ 240.890590] ? srso_return_thunk+0x5/0x5f [ 240.890998] ? mark_held_locks+0x9e/0xe0 [ 240.891395] ? lock_acquire+0x32/0xc0 [ 240.891795] ? srso_return_thunk+0x5/0x5f [ 240.892174] ? lockdep_hardirqs_on_prepare+0x12b/0x3f0 [ 240.892650] ? srso_return_thunk+0x5/0x5f [ 240.893047] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 240.893522] ? srso_return_thunk+0x5/0x5f [ 240.893936] ? __create_object+0x59/0x80 [ 240.894330] ? srso_return_thunk+0x5/0x5f [ 240.894735] ? trace_kmalloc+0x24/0xc0 [ 240.895110] ? srso_return_thunk+0x5/0x5f [ 240.895517] ? __kmalloc_cache_noprof+0x1b4/0x3e0 [ 240.895998] kasan_save_track+0x14/0x30 [ 240.896403] __kasan_kmalloc+0x7f/0x90 [ 240.896804] dst_cow_metrics_generic+0x4c/0x1e0 [ 240.897250] icmp6_dst_alloc+0x45b/0x5f0 [ 240.897642] ? srso_return_thunk+0x5/0x5f [ 240.898051] ? selinux_sk_getsecid+0x7c/0xd0 [ 240.898497] ndisc_send_skb+0x1159/0x1bb0 [ 240.898909] ? __pfx_ndisc_send_skb+0x10/0x10 [ 240.899337] ? srso_return_thunk+0x5/0x5f [ 240.899761] ? __build_skb_around+0x27f/0x3b0 [ 240.900189] ? srso_return_thunk+0x5/0x5f [ 240.900604] ? srso_return_thunk+0x5/0x5f [ 240.901012] ? srso_return_thunk+0x5/0x5f [ 240.901423] ? skb_set_owner_w+0x305/0x650 [ 240.901850] ? srso_return_thunk+0x5/0x5f [ 240.902262] ? __asan_memcpy+0x3d/0x60 [ 240.902667] ndisc_send_rs+0x12d/0x540 [ 240.903047] addrconf_rs_timer+0x2e7/0x7a0 [ 240.903449] ? trace_lock_acquire+0x13b/0x1b0 [ 240.903881] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 240.904329] ? srso_return_thunk+0x5/0x5f [ 240.904736] ? lock_acquire+0x32/0xc0 [ 240.905110] ? call_timer_fn+0x124/0x5d0 [ 240.905517] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 240.905972] call_timer_fn+0x198/0x5d0 [ 240.906365] ? __pfx_call_timer_fn+0x10/0x10 [ 240.906815] ? _raw_spin_unlock_irq+0x23/0x40 [ 240.907243] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 240.907692] __run_timers+0x669/0x930 [ 240.908099] ? __pfx___run_timers+0x10/0x10 [ 240.908531] ? srso_return_thunk+0x5/0x5f [ 240.908948] ? do_raw_spin_lock+0x124/0x270 [ 240.909373] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 240.909831] ? lock_acquire+0x32/0xc0 [ 240.910204] ? run_timer_softirq+0x10f/0x210 [ 240.910650] run_timer_softirq+0x117/0x210 [ 240.911053] handle_softirqs+0x1b1/0x770 [ 240.911452] __irq_exit_rcu+0xc4/0x100 [ 240.911830] irq_exit_rcu+0x9/0x20 [ 240.912170] sysvec_apic_timer_interrupt+0x70/0x80 [ 240.912615] [ 240.912827] [ 240.913040] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.913515] RIP: 0010:memset_orig+0x33/0xb0 [ 240.913923] Code: b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 70 48 89 d1 48 c1 e9 06 74 35 0f 1f 44 00 00 48 ff c9 <48> 89 07 48 89 47 08 48 89 47 10 48 89 47 18 48 89 47 20 48 89 47 [ 240.915377] RSP: 0018:ffff88803df97aa8 EFLAGS: 00000206 [ 240.915849] RAX: ffffffffffffffff RBX: ffffffff857e92d0 RCX: 0000000000000039 [ 240.916443] RDX: 0000000000001000 RSI: 00000000000000ff RDI: ffffed1007d5c180 [ 240.917038] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 240.917631] R10: ffffed1007d5c000 R11: 0000000000000000 R12: ffffffff857e92e0 [ 240.918225] R13: 000000003eae0000 R14: ffffea0000fab800 R15: 0000000000000000 [ 240.918845] ? srso_return_thunk+0x5/0x5f [ 240.919236] free_frozen_pages+0x2bf/0xe40 [ 240.919643] __put_partials+0xd8/0x110 [ 240.920024] qlist_free_all+0x50/0x160 [ 240.920407] kasan_quarantine_reduce+0x19f/0x240 [ 240.920860] __kasan_slab_alloc+0x49/0x70 [ 240.921239] kmem_cache_alloc_noprof+0x13d/0x3d0 [ 240.921676] ? lock_release+0x20f/0x6f0 [ 240.922062] __alloc_object+0x2f/0x270 [ 240.922425] __create_object+0x1d/0x80 [ 240.922793] __kmalloc_cache_noprof+0x316/0x3e0 [ 240.923222] ? srso_return_thunk+0x5/0x5f [ 240.923617] ? srso_return_thunk+0x5/0x5f [ 240.924034] find_get_pmu_context+0x86/0x970 [ 240.924446] ? security_capable+0x2f/0x90 [ 240.924842] __do_sys_perf_event_open+0x13f7/0x2b00 [ 240.925306] ? srso_return_thunk+0x5/0x5f [ 240.925706] ? srso_return_thunk+0x5/0x5f [ 240.926099] ? __pfx___do_sys_perf_event_open+0x10/0x10 [ 240.926626] do_syscall_64+0xbf/0x1d0 [ 240.927003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.927465] RIP: 0033:0x7f7c46bfab19 [ 240.927806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 240.929263] RSP: 002b:00007f7c44170188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 240.929911] RAX: ffffffffffffffda RBX: 00007f7c46d0df60 RCX: 00007f7c46bfab19 [ 240.930508] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000280 [ 240.931105] RBP: 00007f7c46c54f6d R08: 0000000000000000 R09: 0000000000000000 [ 240.931703] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 240.932309] R13: 00007fffee5443bf R14: 00007f7c44170300 R15: 0000000000022000 [ 240.932930] [ 240.933149] Sending NMI from CPU 1 to CPUs 0: [ 240.933562] NMI backtrace for cpu 0 skipped: idling at default_idle+0x1e/0x30 16:20:57 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:57 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:20:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:57 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:57 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:57 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:57 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 243.597227] Bluetooth: hci0: Opcode 0x0c03 failed: -4 16:20:58 executing program 4: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x2121) 16:20:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000002c0)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0}, 0x0) capset(&(0x7f0000000440)={0x20080522, r2}, &(0x7f0000000480)={0xff, 0xffffffff, 0x6360, 0x1, 0x0, 0x2}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000240)=@v3={0x3000000, [{0x7}, {0x0, 0x5}], r3}, 0x18, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc) 16:20:58 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@remote, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c}]}, 0x10c}}, 0x0) 16:20:58 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 16:20:58 executing program 2: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:58 executing program 6: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[{&(0x7f00000009c0)="b6", 0x1}], 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES64, @ANYRESDEC=r2, @ANYRES64=r2, @ANYRES32, @ANYRESOCT]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000300)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r4}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r5}}, {@measure}]}}) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002440)={{0x2, 0x0, @local}, {0x0, @dev}, 0x2a, {0x2, 0x0, @empty}}) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff13, 0x33fe0) 16:20:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@remote, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c}]}, 0x10c}}, 0x0) 16:20:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x2121) 16:20:59 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@remote, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c}]}, 0x10c}}, 0x0) 16:20:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000012c0)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}, 0x2121) [ 244.696362] Bluetooth: hci0: Opcode 0x0c03 failed: -4 16:21:00 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newsa={0x10c, 0x10, 0x1, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@remote, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c}]}, 0x10c}}, 0x0) VM DIAGNOSIS: 16:20:56 Registers: info registers vcpu 0 RAX=00000000000c3c9f RBX=0000000000000000 RCX=ffffffff84a5d917 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814b2b1a RBP=dffffc0000000000 RSP=ffffffff85a07e10 R8 =0000000000000001 R9 =ffffed100d9c6cba R10=ffff88806ce365d3 R11=0000000000000000 R12=ffffffff863fc590 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84a5e8be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fa3d873618 CR3=000000000b84a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000410878c000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000057 RCX=ffffffff814ff5f3 RDX=0000000000000004 RSI=0000000000000008 RDI=ffffffff87ef1ee8 RBP=ffff888013709bc0 RSP=ffff88806cf08d30 R8 =0000000000000000 R9 =fffffbfff0fde3dd R10=ffffffff87ef1eef R11=0000000000000001 R12=0000000000000001 R13=ffff88801370a71a R14=0000000000000000 R15=ffff88801370a6f8 RIP=ffffffff81abf438 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7c44170700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055fa3d890c20 CR3=000000001647e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000