4aca0483468b7e9c2b68d056c5278cf061c4bf87a5ceb3e359605f734d2e94674021eabf2f1ab5a8be9d01a9a3b000ae0eaa9c74374ddf670b13bef8aa3f63a519cec21538cbe2"}, [0x7, 0x8, 0x6, 0x2, 0xffffffff, 0x1, 0x2, 0x1, 0x127, 0x5983, 0xffffffff80000000, 0x6, 0x2, 0x2, 0x2, 0x9, 0x2, 0x5, 0xa6b, 0x80, 0x8, 0x2, 0xffffffffffff3c47, 0x656, 0xfffffffffffffffa, 0x9, 0x55076ece, 0x0, 0x1f, 0x2069, 0x5, 0x2, 0x4, 0x7, 0x3, 0x9, 0x100000000, 0x1, 0x1ff, 0x8, 0x38000000000000, 0x5, 0x9, 0x1800000, 0x8, 0x0, 0xffffffffffffff01, 0x0, 0x2, 0x101, 0x7, 0x9, 0x1, 0x1, 0x2, 0x2, 0x0, 0x3, 0x3f, 0xd98, 0x8, 0x0, 0x6, 0x80cb]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000001400)={{r6}, 0x0, 0x8, @unused=[0x2, 0x7, 0x100000001, 0x5], @devid=r9}) tgkill(r0, r7, 0x0) 04:19:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:19:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(0xffffffffffffffff, 0x0, 0x7ffffffff000) 04:19:57 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) (fail_nth: 1) [ 565.552965] loop7: detected capacity change from 0 to 512 [ 565.567758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.570319] ext4 filesystem being mounted at /syzkaller-testdir738882498/syzkaller.m0N6B8/71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.574723] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.611112] FAULT_INJECTION: forcing a failure. [ 565.611112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.612087] CPU: 0 UID: 0 PID: 6637 Comm: syz-executor.0 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 565.612103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 565.612121] Call Trace: [ 565.612130] [ 565.612141] dump_stack_lvl+0xfa/0x120 [ 565.612179] should_fail_ex+0x4d7/0x5e0 [ 565.612218] _copy_to_user+0x32/0xd0 [ 565.612257] simple_read_from_buffer+0xe0/0x180 [ 565.612305] proc_fail_nth_read+0x18a/0x240 [ 565.612352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.612368] ? security_file_permission+0x22/0x90 [ 565.612387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 565.612403] vfs_read+0x1eb/0xc70 [ 565.612422] ? __pfx_vfs_read+0x10/0x10 [ 565.612437] ? lock_release+0xc8/0x290 [ 565.612458] ? __fget_files+0x20d/0x3b0 [ 565.612483] ksys_read+0x121/0x240 [ 565.612497] ? __pfx_ksys_read+0x10/0x10 [ 565.612512] ? __secure_computing+0x18d/0x290 [ 565.612529] do_syscall_64+0xbf/0x390 [ 565.612545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.612559] RIP: 0033:0x7f1a06aa969c [ 565.612569] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 565.612580] RSP: 002b:00007f1a0406c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 565.612592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a06aa969c [ 565.612600] RDX: 000000000000000f RSI: 00007f1a0406c1e0 RDI: 0000000000000007 [ 565.612607] RBP: 00007f1a0406c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 565.612614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.612621] R13: 00007ffe7259c6cf R14: 00007f1a0406c300 R15: 0000000000022000 [ 565.612640] 04:19:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:19:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(0xffffffffffffffff, 0x0, 0x7ffffffff000) 04:19:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:19:57 executing program 7: r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14, 0x800) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000140)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4bfb, &(0x7f0000000000)=""/175) syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000180)={0x1, 0x200, 0x40}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r0, 0x20000000a, 0x0) ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f00000001c0)=""/216) 04:19:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) getpgrp(r0) [ 567.614565] Bluetooth: hci0: command 0x0406 tx timeout 04:20:05 executing program 6: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4010100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x48}}, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) io_setup(0x6a02, &(0x7f0000000000)=0x0) io_submit(r2, 0x3a, &(0x7f0000000000)) io_destroy(r2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x144bf0adede4d5d5, 0x347e, r3, &(0x7f0000000080)="822d748ba2f7243c1dc28e48813d5bd10872f45b8b68d137737bf88a364177a054d7bf250c11141cbd07a3027d817324f65229e3ea32c21681c3b5b079183b2f1c37a8fe377a78d54fc4582893ab06bf6e908877cb391955de647c6b4a4b76cd3d0bb43d887c6ee2c3c35228c1053622aa8150933cf59cce95c72f5f6c0b8464159cbed8e64be5e66add83a1e3e3268fc1261c0e13bc54057f0863348f4586e5927ad3e444587412cba48f4ea97497d7d93d6c2d37c807f2332e01088b149b2c1f2e638aa3e6b13b", 0xc8, 0x1}]) 04:20:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:20:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(0xffffffffffffffff, 0x0, 0x7ffffffff000) 04:20:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x2000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20e7, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() ptrace(0x8, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r2) tgkill(r1, r2, 0x0) 04:20:05 executing program 7: perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0xfff}, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000140)={0x7ff, 0x2, 0x6, 0x1, 0x1}) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r4, 0x20000000a, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) r6 = clone3(&(0x7f0000004800)={0x3f00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r7, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x6, 0x8d, 0x1, 0x6d, 0x0, 0xffff, 0x8350, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x1000, 0x9175, 0x2, 0x0, 0x4, 0x7fffffff, 0x7, 0x0, 0x7, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, r7, 0x8) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r8, r9, 0x0) tee(r8, r10, 0x20000000a, 0x0) open_by_handle_at(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="20000000510092342b62e325790000ea6511acbf4cb0a2366c893b022cae4334c070b2c65a6371ed01a1809cc70b01"], 0x800) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x20, 0x3, 0x7, 0x0, 0x0, 0x4, 0x61a21, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb04, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x600, 0x315, 0x8ad, 0x5, 0x5, 0x20, 0xf1, 0x0, 0x8a, 0x0, 0xfffffffffffffff7}, r6, 0xd, r3, 0x3) 04:20:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x2}}}, 0x6) 04:20:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x4}}}, 0x6) 04:20:05 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x2000) write$binfmt_misc(r0, &(0x7f00000012c0)={'syz0', "cf9b166ed5243f0a85f7bbf9beb825f6d0db2ac63f5144bdae5b67bdd33b0b10ac63f8f3a7ab09030836c5faac58b1684974c0c844da1680c45621070f5e83cb0fda91312e9bee75d1645bad7c052ac10f66e22408f4a5d93017dc2850e1e0dd21fbd589dfd91c62c08ca86b4f00de8289d5a984ca150403b9fe66c7adb74b3e44d6bcc7383f018e142a5d9936f280a71a81f04425fc596c52dd5f17abaf09eae70a74f20f80f4a4a42656265b7d397d9337878ce2bf5fc2b00c3f8e4c50d73a40296aa815216a79231c8815e10cc2624feacef2614fb0101211"}, 0xde) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) close(r1) r2 = fspick(r1, &(0x7f0000000140)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001280)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="fbd0971e42dd2fb12d7c8ed6f2adb3944496025f18a3b21b5162774c130d61ed22b0021e0c8426043906903722c99d6ec3c877e2931903f75ae7d8257009d4d369e5612176da3d916def3fdf7bd93b872a6e7bfe10afebeb05acf6e46a17e0c831743fdfb6e40a06c0b865a032f774dbaf14e42b4f20c485b03a10495d74ca261eeb6e8f9a75d8a11a1c865d5c37d5c3c7f18c96c75974c467a3d7d4cdde02cbc8d1788f2c43a535521c8925ed2e7aad5394e28bc706c5ab95b1549ed47a66984feddea0a65e76b0132344756cb652462cd856ddf449d58997d31da361140b3f1ec355a7bda7b5e46ac6eaea26", 0xed}], 0x2, 0x7, 0x6) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 04:20:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x99, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffe, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x500) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) rt_tgsigqueueinfo(r2, r1, 0x2b, &(0x7f00000000c0)={0x27, 0x7, 0x4}) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) ptrace(0x11, r3) r5 = signalfd(r0, &(0x7f0000000000)={[0x100]}, 0x8) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r8) r9 = gettid() tgkill(r1, r9, 0x21) 04:20:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1486, 0x2, &(0x7f0000001180)=[{&(0x7f0000000100)="d439f0a625a7dddb2ea76e0955b9a39f102492b830b4a6095ec9d90724250aeaefe86c4eec0de7c6016588e5e10fc6c0a70571d6f05090bfd0c630dc69f831a4197a3aee3ef981ab5de44df469139a8495c478", 0x53, 0x9c5}, {&(0x7f0000000180)="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", 0x1000}], 0x20000, &(0x7f00000011c0)={[{@sbsector={'sbsector', 0x3d, 0x671d}}, {@map_normal}, {@utf8}], [{@obj_role={'obj_role', 0x3d, '/!'}}, {@euid_eq}, {@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '&!'}}, {@seclabel}]}) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001280)) tee(r0, r2, 0x0, 0x0) 04:20:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) (fail_nth: 1) [ 574.027546] FAULT_INJECTION: forcing a failure. [ 574.027546] name failslab, interval 1, probability 0, space 0, times 0 [ 574.028778] CPU: 0 UID: 0 PID: 6694 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 574.028794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 574.028803] Call Trace: [ 574.028808] [ 574.028814] dump_stack_lvl+0xfa/0x120 [ 574.028837] should_fail_ex+0x4d7/0x5e0 [ 574.028860] should_failslab+0xc2/0x120 [ 574.028880] __kmalloc_cache_noprof+0x81/0x6b0 [ 574.028899] ? cap_capable+0x9c/0x240 [ 574.028918] ? pagemap_read+0x24d/0x830 [ 574.028938] ? security_capable+0x2f/0x90 [ 574.028958] ? pagemap_read+0x24d/0x830 [ 574.028976] pagemap_read+0x24d/0x830 [ 574.028997] ? __mutex_trylock_common+0xf9/0x260 [ 574.029018] ? __pfx_pagemap_read+0x10/0x10 [ 574.029045] ? security_file_permission+0x22/0x90 [ 574.029066] ? __pfx_pagemap_read+0x10/0x10 [ 574.029086] vfs_read+0x1eb/0xc70 [ 574.029115] ? __pfx_vfs_read+0x10/0x10 [ 574.029134] ? lock_release+0xc8/0x290 [ 574.029159] ? __fget_files+0x20d/0x3b0 [ 574.029192] ksys_read+0x121/0x240 [ 574.029208] ? __pfx_ksys_read+0x10/0x10 [ 574.029239] do_syscall_64+0xbf/0x390 [ 574.029259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.029273] RIP: 0033:0x7f2cddb24b19 [ 574.029283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 574.029295] RSP: 002b:00007f2cdb09a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 574.029306] RAX: ffffffffffffffda RBX: 00007f2cddc37f60 RCX: 00007f2cddb24b19 [ 574.029314] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000000000000004 [ 574.029321] RBP: 00007f2cdb09a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 574.029329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.029336] R13: 00007ffcb807b9af R14: 00007f2cdb09a300 R15: 0000000000022000 [ 574.029369] 04:20:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) dup3(r0, r1, 0x0) tee(r0, r3, 0x0, 0x0) 04:20:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x5}}}, 0x6) 04:20:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) (fail_nth: 2) 04:20:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:06 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:06 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x401, 0x81, 0x4, 0x7f}, {0x7ff, 0x0, 0x3, 0x8}, {0x1000, 0x60, 0x46, 0xffffffff}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:20:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) (fail_nth: 3) [ 574.218960] FAULT_INJECTION: forcing a failure. [ 574.218960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.219939] CPU: 0 UID: 0 PID: 6716 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 574.219955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 574.219963] Call Trace: [ 574.219968] [ 574.219974] dump_stack_lvl+0xfa/0x120 [ 574.219996] should_fail_ex+0x4d7/0x5e0 [ 574.220020] _copy_to_user+0x32/0xd0 [ 574.220040] pagemap_read+0x4f1/0x830 [ 574.220069] ? __pfx_pagemap_read+0x10/0x10 [ 574.220096] ? security_file_permission+0x22/0x90 [ 574.220119] ? __pfx_pagemap_read+0x10/0x10 [ 574.220139] vfs_read+0x1eb/0xc70 [ 574.220168] ? __pfx_vfs_read+0x10/0x10 [ 574.220187] ? lock_release+0xc8/0x290 [ 574.220213] ? __fget_files+0x20d/0x3b0 [ 574.220247] ksys_read+0x121/0x240 [ 574.220263] ? __pfx_ksys_read+0x10/0x10 [ 574.220294] do_syscall_64+0xbf/0x390 [ 574.220314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.220327] RIP: 0033:0x7f2cddb24b19 [ 574.220337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 574.220349] RSP: 002b:00007f2cdb09a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 574.220360] RAX: ffffffffffffffda RBX: 00007f2cddc37f60 RCX: 00007f2cddb24b19 [ 574.220368] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000000000000004 [ 574.220376] RBP: 00007f2cdb09a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 574.220392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.220399] R13: 00007ffcb807b9af R14: 00007f2cdb09a300 R15: 0000000000022000 [ 574.220434] [ 575.806720] Bluetooth: hci0: command 0x0406 tx timeout [ 577.854611] Bluetooth: hci0: command 0x0406 tx timeout [ 579.902609] Bluetooth: hci0: command 0x0406 tx timeout [ 581.950679] Bluetooth: hci0: command 0x0406 tx timeout [ 583.999644] Bluetooth: hci0: command 0x0406 tx timeout 04:20:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) (fail_nth: 4) 04:20:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) gettid() 04:20:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xa89a1730318175e9) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:20:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x6}}}, 0x6) 04:20:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9, 0x80000001}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@polexpire={0xc0, 0x19, 0x3, 0x0, 0x0, {{{@in=@loopback=0x7f00000e, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@empty, @ipv4={'\x00', '\xff\xff', @dev}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1cc, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r6, 0x20000000a, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r7, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890c, &(0x7f0000000180)={@empty, @ipv4={'\x00', '\xff\xff', @dev}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@acquire={0x160, 0x17, 0x2, 0x70bd27, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {@in=@multicast2, @in=@private=0xa010100, 0x4e23, 0xc6, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x3c, 0x0, 0xee01}, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x2}, 0x4e21, 0x40, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x2c, 0x0, r7}, {0x8000, 0xf, 0x9, 0x5, 0x2, 0x400, 0x491, 0xffffffffffff117b}, {0x0, 0x2, 0x81, 0x2}, 0xffff, 0x6e6bb9, 0x0, 0x0, 0x3, 0x1}, 0x5, 0x2, 0x947, 0x70bd26}, [@address_filter={0x28, 0x1a, {@in=@private=0xa010101, @in=@broadcast, 0xa, 0x5, 0x1}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @replay_thresh={0x8, 0xb, 0x9}]}, 0x160}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 04:20:16 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x7ff, 0x63, 0x20, 0x7}, {0x1, 0x8, 0x2, 0xed}]}, 0x10) r4 = accept4$inet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xc107, r4, &(0x7f0000000140)="48e466a3b50f30d56077e045b9f12731d09d4153dd77793a16c11c04b18fb7c23ee4c4c30be40c4ad6e2e1d65b8e0155683a4f2e85e61f2d77eccd526a8f0fc7ed7094072c26a3a18898834e41957e5abb619a040b3e2d1d46f5203555155de532a5d37155b4a5482dfa2f4c44e85e3eb3afdc7eb53ac810aff2638d5b82674babcc583de7d4d8c316b5e54534667429afa47aa4656df358ee554c4099657f93ee1df5bf7a5ec201fe", 0xa9, 0x4, 0x0, 0x5, r7}]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r8, r9, 0x0) tee(r8, r10, 0x20000000a, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x101, 0x0, 0x800, 0x100000000, 0x1, 0x1, 0xa39, 0x5d, 0x3f, 0x0, 0x5, 0x0, 0xfffffffffffffff8, 0x8000}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000000380)={{r11, 0x72bb, 0x9, 0x4, 0x76, 0x7fffffff, 0x699, 0xe, 0x700, 0xfff, 0x1, 0x8, 0xa3, 0x1, 0x1}}) [ 584.455027] FAULT_INJECTION: forcing a failure. [ 584.455027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.456323] CPU: 0 UID: 0 PID: 6728 Comm: syz-executor.1 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 584.456343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 584.456353] Call Trace: [ 584.456359] [ 584.456366] dump_stack_lvl+0xfa/0x120 [ 584.456393] should_fail_ex+0x4d7/0x5e0 [ 584.456422] _copy_to_user+0x32/0xd0 [ 584.456448] simple_read_from_buffer+0xe0/0x180 [ 584.456480] proc_fail_nth_read+0x18a/0x240 [ 584.456517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.456543] ? security_file_permission+0x22/0x90 [ 584.456570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.456594] vfs_read+0x1eb/0xc70 [ 584.456629] ? __pfx_vfs_read+0x10/0x10 [ 584.456653] ? lock_release+0xc8/0x290 [ 584.456686] ? __fget_files+0x20d/0x3b0 [ 584.456728] ksys_read+0x121/0x240 [ 584.456748] ? __pfx_ksys_read+0x10/0x10 [ 584.456788] do_syscall_64+0xbf/0x390 [ 584.456812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.456829] RIP: 0033:0x7f2cddad769c [ 584.456842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 584.456856] RSP: 002b:00007f2cdb09a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.456871] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f2cddad769c [ 584.456881] RDX: 000000000000000f RSI: 00007f2cdb09a1e0 RDI: 0000000000000005 [ 584.456890] RBP: 00007f2cdb09a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 584.456899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.456907] R13: 00007ffcb807b9af R14: 00007f2cdb09a300 R15: 0000000000022000 [ 584.456951] [ 584.512051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 586.046629] Bluetooth: hci0: command 0x0406 tx timeout [ 588.094616] Bluetooth: hci0: command 0x0406 tx timeout [ 590.142714] Bluetooth: hci0: command 0x0406 tx timeout 04:20:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:25 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x800, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) dup3(r5, r0, 0x80000) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x5de1) tee(r1, r3, 0x0, 0x0) 04:20:25 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) fsync(r0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') 04:20:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:20:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) readv(r4, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/122, 0x7a}], 0x3) process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f00000000c0)}, {&(0x7f0000000100)=""/161, 0xa1}, {&(0x7f00000001c0)=""/7, 0x7}], 0x4, &(0x7f0000000580)=[{&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000480)=""/219, 0xdb}], 0x3, 0x0) 04:20:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x8}}}, 0x6) 04:20:25 executing program 6: read(0xffffffffffffffff, 0x0, 0x40004) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000162c0)=ANY=[@ANYBLOB="e80d00000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d7803a4ce4ea6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8ff3804094c6472c6343526f0ac46e903955b5c63a606d1d3f7c0098b869c5eb19f5ab59cc0ff05a0d2df4bbd513eff65bf4146fe583fb172f3b7f8978741efe421153c37230484012a96b12a220db89edccac1b0f3954cd80724d48ed956b2e61c91a0e2c11a0b04293012a050d5c736a9a9d29b58618663937a3d26152f8e48d906167766d083a118dbb4dadad1704659923e47b731647d3cff8370a1717ea70000000000000000000000000000a2e770bb5784ac9cd77ce4f54b5afc50812abf50fed9e5a6edcabdb893252d5d5b8dca90134210246900000000000000000000007ee3b7f9e74a7aad9b20f3f0c85e9677"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f00000001c0)={0x0, 0x2a, &(0x7f0000000180)={&(0x7f0000000480)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x0, 0x3, r9}, @val={0x0, 0x99, {0x9, 0x51}}}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x4000) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xfdeb, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0x0, 0x99, {0xfffffffc, 0x44}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20044014) tee(r0, r2, 0x20000000a, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) [ 593.869231] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 04:20:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0xffffe00000) 04:20:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:25 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r1, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000001000000180000007a", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) fchdir(r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001bc0)=0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x8, 0x2, 0x1, 0x3, 0x0, 0x800, 0x410, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xf5, 0x5}, 0x40, 0x3f, 0xffffffff, 0x2, 0x40, 0x81, 0xffff, 0x0, 0x401, 0x0, 0x2}, r3, 0xc, r4, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r6, 0x20000000a, 0x0) io_submit(0x0, 0x6, &(0x7f0000000c80)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0xd3, r1, &(0x7f0000000140)="f2717b871cdb81cc84e7b2649fc65fddfae1f625fbf016d0147e", 0x1a, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f00000007c0)="cec58553239e88c7b72a8590efd073637414b8492ded4745132bb3c995adb99efaec0ac732f212cf00ac3115b8a32fea5f5ea0c401621a9a350a7c5e6b00b276fe4be49808392e65554fc4508e3e9463b5c847e97e4f1cd4644e097ce9b9c5524d0963ca56982270b74ec3a3448a9a05f4a44e6e4c7f4fa6236b45932ceaf9ce8647", 0x82, 0x0, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f00000008c0)="0aa35a54ad458f18c1c296a22c4977458e300a49a84d3dc89965684f17f31ffe66dba31e7d86e6a7f538d776913277ac172b4ea293d9111c56d64cb0f04eacf3d128592184335980d88bcc8b698dac015c248b4ff384b4eae408b12fced7b9f134464754926e8787eddb2393d81819e6979a37936ff080285da353c43fa4bc5d866407a14406e3c3461fcf461fd6137b01911ac47a6a3a73c785712bed44b311dad5cb9e5eb4163e332fa32caf64cc7a048cc20fa04303aa147901538d029e9f7adefb7f204af1664c7bd912750ed303f927b6e1b6", 0xd5, 0x2, 0x0, 0x0, r4}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000a00)="ef39695a3fd25fa368ff3ea4945b2975f0ba823e5f9c10df844422363d655f9a5c844dd7ced8329cdb156b532d1548a4d72e59c6b13c7241a86f0d8e397f7526a3b0b09b", 0x44, 0x6, 0x0, 0x2}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0xa7d, r5, &(0x7f0000000ac0)="5eaa461cface3caaa380d14b310f9a9bd86ddf69d589410d04fb71ff33e62ad024dd72db522d5d242f7b71843df2f90659839aea4a9d084c9efb0950824bc6abc8930b15e38849", 0x47, 0x4a, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000c00)="e66b8a42ec07527271b4c2e4ae6ef8d89cef5306c3f2452a13788726e093b2e5abb96c03774385b92cce6bb3bcdd0e09", 0x30, 0x10001, 0x0, 0x1, r6}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000480)="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", 0xfffffeaf}]) 04:20:25 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r4, r5, 0x0) tee(r4, r2, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) connect$unix(r6, &(0x7f00000013c0)=@abs={0x1}, 0xffffff90) 04:20:25 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x7b, 0x6, 0x0, 0x0, 0x0, 0x400000000, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) getpgrp(0x0) gettid() r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) tgkill(r2, r1, 0x23) 04:20:25 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x884efadf739fc520, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0x3, 0x9}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x200000000000000, 0x0) 04:20:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7fffffff0002) 04:20:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x500}}}, 0x6) 04:20:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) [ 595.905818] Bluetooth: hci0: command 0x0406 tx timeout [ 597.950643] Bluetooth: hci0: command 0x0406 tx timeout [ 599.999644] Bluetooth: hci0: command 0x0406 tx timeout 04:20:37 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x0) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x4, 0x5, 0xffffffff, r3}) r4 = gettid() tgkill(r1, r4, 0x0) 04:20:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7fffffff0002) 04:20:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x600}}}, 0x6) 04:20:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) write$P9_RSTAT(r4, &(0x7f0000000200)={0x47, 0x7d, 0x2, {0x0, 0x40, 0x0, 0x1, {0x1, 0x4, 0x3}, 0x20000000, 0x4, 0x1, 0x1c59, 0x0, '', 0x2, '&*', 0x6, '{\a:\\\\:', 0x5, '[/C(B'}}, 0x47) dup3(r0, r1, 0x0) tee(r0, r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x800}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45014}, 0x11) 04:20:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff002) 04:20:37 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r1, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000001000000180000007a", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) fchdir(r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001bc0)=0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001c00)='/proc/sysvipc/msg\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x8, 0x2, 0x1, 0x3, 0x0, 0x800, 0x410, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xf5, 0x5}, 0x40, 0x3f, 0xffffffff, 0x2, 0x40, 0x81, 0xffff, 0x0, 0x401, 0x0, 0x2}, r3, 0xc, r4, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r6, 0x20000000a, 0x0) io_submit(0x0, 0x6, &(0x7f0000000c80)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0xd3, r1, &(0x7f0000000140)="f2717b871cdb81cc84e7b2649fc65fddfae1f625fbf016d0147e", 0x1a, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f00000007c0)="cec58553239e88c7b72a8590efd073637414b8492ded4745132bb3c995adb99efaec0ac732f212cf00ac3115b8a32fea5f5ea0c401621a9a350a7c5e6b00b276fe4be49808392e65554fc4508e3e9463b5c847e97e4f1cd4644e097ce9b9c5524d0963ca56982270b74ec3a3448a9a05f4a44e6e4c7f4fa6236b45932ceaf9ce8647", 0x82, 0x0, 0x0, 0x1}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f00000008c0)="0aa35a54ad458f18c1c296a22c4977458e300a49a84d3dc89965684f17f31ffe66dba31e7d86e6a7f538d776913277ac172b4ea293d9111c56d64cb0f04eacf3d128592184335980d88bcc8b698dac015c248b4ff384b4eae408b12fced7b9f134464754926e8787eddb2393d81819e6979a37936ff080285da353c43fa4bc5d866407a14406e3c3461fcf461fd6137b01911ac47a6a3a73c785712bed44b311dad5cb9e5eb4163e332fa32caf64cc7a048cc20fa04303aa147901538d029e9f7adefb7f204af1664c7bd912750ed303f927b6e1b6", 0xd5, 0x2, 0x0, 0x0, r4}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000a00)="ef39695a3fd25fa368ff3ea4945b2975f0ba823e5f9c10df844422363d655f9a5c844dd7ced8329cdb156b532d1548a4d72e59c6b13c7241a86f0d8e397f7526a3b0b09b", 0x44, 0x6, 0x0, 0x2}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0xa7d, r5, &(0x7f0000000ac0)="5eaa461cface3caaa380d14b310f9a9bd86ddf69d589410d04fb71ff33e62ad024dd72db522d5d242f7b71843df2f90659839aea4a9d084c9efb0950824bc6abc8930b15e38849", 0x47, 0x4a, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f0000000c00)="e66b8a42ec07527271b4c2e4ae6ef8d89cef5306c3f2452a13788726e093b2e5abb96c03774385b92cce6bb3bcdd0e09", 0x30, 0x10001, 0x0, 0x1, r6}]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000480)="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", 0xfffffeaf}]) 04:20:37 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:37 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff003) 04:20:37 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:37 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup3(r1, 0xffffffffffffffff, 0x80000) write$P9_RSTAT(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="4a0000007d0100000043000001010000f9140400000002000000000000000000a04000a88b780600000000000005005b247b382c01002d0a003a5b2d40f021282e5723b34a893f41c9543ff9030d32"], 0x4a) tee(r0, r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) tee(r3, r5, 0x20000000a, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x1f, 0x3, 0xff, 0x7, 0x0, 0x100, 0x8300, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000400), 0x1}, 0x80, 0x8, 0x6, 0x0, 0xf7cb, 0x1, 0x5, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x9) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="64030000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fcdbdf25020000000c0004000200000000000000"], 0x20}}, 0x5) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890c, &(0x7f0000000180)={@empty, @ipv4={'\x00', '\xff\xff', @dev}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000", @ANYRES16=r6, @ANYBLOB="000127bd7000fcdbdf25020000004c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f627269646765000800030001000000080003000300000008000300050000001400020076657468315f746f5f626f6e6400000044000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000000000000000000000014000200626174616476300000000000000000000c00018008000100", @ANYRES32=r7, @ANYBLOB="4800019f3efec6800800030002000000140002006c6f0000000000000000000000006e3100000000000000001400020076657468305f746f5f62617461647600600001801400020076657468315f746f5f62590db7c0e187f7000000000000000003000000000000007468505f74080000006e64000000", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300aab3a3f208000300010000004c00018008000300020000001400020069703665727370616e30000000000000080003000000000014000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x1a4}, 0x1, 0x0, 0x0, 0x144}, 0x20004000) 04:20:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:20:37 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:37 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x3) 04:20:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x64, 0x0, 0x0, &(0x7f0000000100)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x240800, 0x80) [ 607.422609] Bluetooth: hci0: command 0x0406 tx timeout [ 609.470611] Bluetooth: hci0: command 0x0406 tx timeout 04:20:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff009) 04:20:48 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:48 executing program 7: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ff0601c20acb541851bc2b76a53f78c47f289227d6a452a179ee82ac443c0aa532d910224c7891bec9292aafaba2b2eee86f8643"], 0x28) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x85, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x5, 0x2}, {0xffff}}}}, 0xf) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1f}, @hci_ev_le_enh_conn_complete={{}, {0x0, 0xc9, 0x4, 0x1, @any, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x834, 0x8, 0x1}}}}, 0x22) 04:20:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:20:48 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe45c, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='uid_map\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r0) r5 = gettid() pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) write$P9_RSTAT(r8, &(0x7f0000000080)={0x41, 0x7d, 0x1, {0x0, 0x3a, 0x3, 0xf49, {0x8}, 0x100000, 0x9, 0x49a, 0xfffffffffffff801, 0x0, '', 0x1, '{', 0x4, '#-\'\xfe', 0x2, '&.'}}, 0x41) tgkill(r1, r5, 0x0) 04:20:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x300, 0x4, 0x0, 0x9}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x42002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1980841, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}, {@access_any}, {@dfltgid}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_role={'subj_role', 0x3d, '.#'}}]}}) tee(r0, r2, 0x0, 0x0) 04:20:48 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:48 executing program 6: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "c6690023f5e8f9256bba31985813f03636a19ba962397078cdb4a78bbfd8191c83b3c126a1474fff1b6fc3e4504c52264b4a7a371473b7cb27b98551ec28b722", 0x2d}, 0x48, r0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x73, &(0x7f00000001c0)={0x0, {{0xa, 0x200, 0x101, @empty, 0xfffffffb}}, {{0xa, 0x4e20, 0x1b8a, @remote, 0x3ee}}}, 0x108) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$invalidate(0x15, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.current\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r5) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x20000000a, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) keyctl$link(0x8, r5, 0x0) getsockname$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, &(0x7f00000004c0)=0x1c) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000580)={{0x1, 0x1, 0x18}, './file0\x00'}) 04:20:48 executing program 7: sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) dup(0xffffffffffffffff) r1 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x49, &(0x7f0000000040), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup3(r2, r3, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x810, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1f, 0x111000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x8010, r4, 0x0) 04:20:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x739b, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x941, 0x6, 0x6, 0x5}]}) pipe2(&(0x7f00000013c0), 0x0) dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) tee(r0, r4, 0x3, 0x2) 04:20:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x404) 04:20:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:48 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) r2 = getpgrp(r0) r3 = gettid() r4 = getpgrp(0x0) r5 = gettid() ioprio_get$pid(0x3, r3) tgkill(r4, r5, 0x0) getpgrp(r4) tgkill(r2, r3, 0x0) 04:20:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff010) 04:20:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0xfdef) 04:20:48 executing program 4: r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) process_vm_writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/171, 0xab}, {&(0x7f00000000c0)=""/185, 0xb9}], 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/221, 0xdd}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./fhhe0\x00']) r6 = getegid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r7, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/31, 0x1f}, {&(0x7f0000000600)=""/37, 0x25}, {&(0x7f0000000640)=""/79, 0x4f}, {&(0x7f00000006c0)=""/38, 0x26}, {&(0x7f0000000700)=""/254, 0xfe}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000001d5000020540d608895f1a3b66e", @ANYRES32, @ANYRES32], 0x50}, 0x10002) r9 = getpgrp(0x0) r10 = gettid() tgkill(r9, r10, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000940)={{0x0, r5, r6, r7, r8, 0x4, 0x40}, 0x5, 0x7, 0x20, 0x3b1, r4, r9, 0x65}) 04:20:48 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:20:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:48 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) [ 618.622654] Bluetooth: hci0: command 0x0406 tx timeout [ 620.670661] Bluetooth: hci0: command 0x0406 tx timeout [ 622.718748] Bluetooth: hci0: command 0x0406 tx timeout [ 624.766600] Bluetooth: hci0: command 0x0406 tx timeout 04:20:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x50) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r6, 0x8}) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:20:59 executing program 7: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x66) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) 04:20:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:59 executing program 4: r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r1, r1, 0x3e, &(0x7f0000000280)={0x1b, 0x8, 0x200}) tgkill(r0, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8d, 0x80, 0x4, 0x3f, 0x0, 0x2, 0x4002, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x7f, 0x81}, 0x20, 0x5, 0x4, 0x2, 0x2, 0x8, 0x81, 0x0, 0xb148, 0x0, 0x3f}, r1, 0x4, 0xffffffffffffffff, 0x0) process_vm_writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/109, 0x6d}, {&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f00000001c0)=""/25, 0x19}], 0x3, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)=0x0) waitid(0x2, r2, 0x0, 0x40000000, &(0x7f00000013c0)) 04:20:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:20:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0xfffffdef) 04:20:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:20:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x81, 0x40, 0x4, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x10, 0x7, 0x0, 0x859}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x3f, 0x881, 0x71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x10, 0x40, 0x2fb8, 0x4}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890c, &(0x7f0000000180)={@empty, @ipv4={'\x00', '\xff\xff', @dev}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) sendmmsg$inet(r1, &(0x7f0000003ac0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x6f, 0x0, 0x8}, @timestamp_prespec={0x44, 0x4c, 0xe8, 0x3, 0xc, [{@remote}, {@empty, 0x81}, {@rand_addr=0x64010101, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@private=0xa010100, 0x386d727f}, {@multicast2, 0xee}, {@local, 0x1}, {@broadcast, 0x1ff}, {@multicast2, 0x4}]}, @noop, @timestamp_addr={0x44, 0x2c, 0x66, 0x1, 0x3, [{@private=0xa010102, 0xe46c}, {@multicast1, 0xd5fa}, {@remote, 0x7}, {@empty, 0xf1b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x82e2}]}, @timestamp_prespec={0x44, 0x14, 0x53, 0x3, 0x5, [{@broadcast, 0x4}, {@remote, 0x8000}]}, @ssrr={0x89, 0xf, 0x4c, [@dev={0xac, 0x14, 0x14, 0x22}, @remote, @multicast2]}, @noop, @timestamp_addr={0x44, 0x24, 0xe7, 0x1, 0x0, [{@multicast1, 0xffff}, {@multicast1, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010101, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1fd8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @private=0xa010101}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0x85, 0x0, 0x4, [0x200, 0xfffffc00, 0x4, 0xd53, 0x4, 0x5, 0x2]}, @rr={0x7, 0xb, 0x8f, [@loopback, @private=0xa010101]}, @ssrr={0x89, 0x1b, 0xf3, [@loopback, @private=0xa010102, @loopback, @multicast2, @rand_addr=0x64010100, @private=0xa010102]}, @noop, @generic={0x44, 0x9, "c89d1cc1698c5e"}, @ra={0x94, 0x4, 0x80}, @timestamp_addr={0x44, 0x3c, 0x2c, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1fb7}, {@empty, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x9}, {@remote, 0x1f}, {@local, 0x7f}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@multicast1, 0x4}]}, @timestamp={0x44, 0x1c, 0xc0, 0x0, 0x3, [0x10001, 0x0, 0xfff, 0xfeb4, 0x8, 0xfffffffd]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x220}}, {{&(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000600)="c520cc28dd7f70c8ba72c83b2b7c29a8d48247d8624393d5e5fb2b2231d83bcb5f19f3c13cd603ae89660646f65d34108fc0cfabb00e538d27858191360a1107d8e0be15f6fd25483e824fc41fb37ac8d199eba1a82dd0c6dff8659205a81f00c3dcce832e18d4548f5096145ea8c33266e4e60a77209b6a89ac846b9e0647f526544b34b79b049713fd97fa154e906ccbd9eb03dd55757daab5111dd7b17d6ffcd8aa167aae3153ba98999ef88028dc5684ea9749d5fd64efc4d1766c29b4cb40e597519d98ea4a", 0xc8}, {&(0x7f0000000700)="ec92c2baf0600d889afd748db3ca33e9", 0x10}, {&(0x7f0000000740)="27044fca35a658092ad7fc6a658910611adf2aee69d6dfa718dc3c935bc468df8d70a6c9ec4117cb65ec2dc9cc0c99e162624cbdb973bdca6f7affbf0baa324f4d4c15c10d34254fe99bde59510965422fd14c0575ab9cec99910a9d0b5b970cfc6742f39311b7664e812d04c8a5488e14", 0x71}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f00000007c0)="fdbc12a68e78c427157634137ded9ebc9ed651213416d60cedf2af0633f62a35c8d74d0005b9693813f9d222a47d0d48ae2bb6633b306b67a5ee597143a467f7c8d226191fb1267ac91c1576814b7ff6fc3ec6abeed06c3d8a9cb3c41b83f9c0101fb8a056d594a9a37fcecb280a7853c95c7661dc41730d967a7ac96bfdf50656e117cf821745e5d18194b5a845e6cec1ddbb93e3afda16052f840df5ab7c529ddc76ba9b17e25992f6a04fa86e6dd3765afc19eef0188682c30b50f66879962a704ef2fec58992ff582d10a9052d99c9eb8d76cd404011f67e617bb2613a5c23f8aac14a", 0xe5}, {&(0x7f00000008c0)="810f5b5711a98595da986db90c8bb683e05dc13537212943839dd32dd2001243ae052ab5c0861cec97f138912ef32b2c75a4d462be8a3440d168fcfe42ddb499d297b5d2f1ae12a73717a76420bc03d4c5e5ab3024834c7ccba6573338a8eefeba0dbcf3151682256002c93ae0c0907ff14d8899af74fe8709e4bdcfd43411d69c79b2fb9f3d736caa6b9f2dff442742ee5b4a6a896afe0e28f52518df5ff5a76aa156180bafa53c8d02238406ae82ca468fbcc519b35535a3d6242f98ab2d1f4fc817", 0xc3}, {&(0x7f00000009c0)="977acc110ec50d19fd381c1afeeed4a1210e79a8c482a4ce6ba852ae273bbfede1af2a2cfbd156181ab47370536e236e746fc493a304804c8af7b6544ec76aed30d35c630bc11b5f8d5b71b1041488c7924ae2daa70e90f7f032b0cddd8215e47c0e2e0d3e24d13c8dc8c5e0059f2f402e5853b76e750c3d50ee7f7403ccb9df7af055f56beaa818ef7da506d8eb44f040fc88eb80f23674946c9036c96c9eeaa89f81e1779d27f213597abbb3d81de9fb80e173a957b2a5e8a6f5256106864e309d5e5b06f1e5aa41fec94b7fe5f1c9723c44f86ba4e769", 0xd8}, {&(0x7f0000000ac0)="c17eefe896b3ad3ade5961484ac79b95c31299bc72a76d0fb31c43362c284be65b053d1198a95174698113ff05e9b7bb028d33b20199a79984b165", 0x3b}, {&(0x7f0000000b00)="a0b8ebe627f84cf4eb6aef0aa0c417db0122cc779238b5f3379041fc7de99cfeec350725fcb30a3d354c802786b35a6390263b624372e740cdafd21ea6d9feb920521101ac83f69a08a5dff396ffa97d73f5bc1ed4ea8f7aa77e7d003de95bce8d21f2f1aea45cdaf743e02e3bb64c4f476de0f0b52df33b9de8ffb6b61399db708c015ee995c9851b94f6a58d7eedf874ca516c018dc82d2c3c550f499e3936c25fa571735e39d593711a04d74bded15d4aca872090bb8e02065b5948cf9a4414967e", 0xc3}], 0x9, &(0x7f0000000cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x36b}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000d00)="a27234127e5391129109364981a851b727af3f970870d9eefd04c6ac19996ff4b5b1101fb3363139564810dc85316efe2c70266e441338b1b1a9c2e4b2fc02556f92f75b1ce09007e900b9bf46a278e48342ddf2813ab4c6022b6b66447bf1cd3eaf0840e00b70afc032e179b2583e69691c0a610cdfbe982cc0d736d53a5100d54da40413b1696297646a51cf211df8dec1cc3ea5d37a4e5655040f42fd7460141d18cb9f8be7e5ae884144059cbba75aa35dc79801f4c1d215a1f54c229115e7b0281468f53c0436846f20a942a7d482e50ad65c3a7b79e1852c02fba26444a0b48c92284be09011159bcd51d14e9640ff", 0xf2}, {&(0x7f0000000e00)="f871450160be18ea1a6e6a6261d500f995d5de9300f557cd79e952918c1bd39460ca2e39831d90c43c5c2ad411abbf797b1931a1a2ec6da13efb757b03e2ad7e0e3c221f01890fa5d1b153f0f6e362b23c7edd991a27fc1f747bf23d0646a495fb39f14f33c855550ab412a0f5ea4b013556f8fd2f53b74c9f802fdfd7595ab44a8d84afc51b9935b5e6721c6bb6b1fb90902433ce8477eec02179f822428f6f03bb0a27af406b749c99b03093b503cee6d0f737f253f0454a2270141f5a4d1720b26e9908ebd16b41feff1a42e32b776b209b9ad0cfc1475e233d98dd4b31b948e8d204", 0xe4}, {&(0x7f0000000f00)="1566607cbf1160b155d93ab8633c53b923ed9313e9fc8e83d509791b465e64e33a31c104c3343ba895e3af27599b3b2fa5eb7858ff2ce6f095ef3a625d80f869221fe5eadf59ba4810ea7014cd73badfef6aaecf880ee63e319480f07c80744ab76bc61c063692e4b4d96785f2ba459da523ef22e8f4678eb79e990b3e8458691c05661d657219c4f7260dcafb857d49fda7c1dcc1e08df2bbda2353fcc3db6d51bc9335e0eff70c91e683e4ccc0a2a1caa4b412e242d9fac4344242cef6b23674f116900bef7d5f70ff0aa50ae16f860eed811cf30e85363e83add323a358976b37", 0xe2}, {&(0x7f0000001000)="1c5f3b5988cf72a07a829e2aa9aa681c24a4ef0a35034c5c7107a4fc995ef98b", 0x20}, {&(0x7f0000001040)="e223aa80376e31d204335e3e3e8c4f0585cf28910e684c96b7974da83001c72e0ebcef27a487a26a7ff6d91ca721fbd3a989a5813dfa90885136015f0927414fe5d1f470e7cca0a1abcaf468d0e93017828b645199fa75b58253af4e8315a0", 0x5f}, {&(0x7f00000010c0)="249106184dc51b0601071b10e276dc251e", 0x11}], 0x6, &(0x7f0000001180)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x69, 0x1, 0x1, [{@private=0xa010100, 0xff}, {@multicast1, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x3d, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x5}, {@broadcast, 0xa}, {@loopback, 0x148a}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x98, 0x0, 0x7, {[@cipso={0x86, 0x41, 0x3, [{0x0, 0xc, "6b957baa02775aa537ec"}, {0x7, 0xc, "e60c7f38bc14b854101b"}, {0x0, 0xb, "5a371ae0e9f6651d12"}, {0x1, 0x11, "2dd12f77daa66f9de38fd1f4901eeb"}, {0x5, 0x5, "e0d908"}, {0x0, 0x2}]}, @cipso={0x86, 0x1b, 0xfffffffffffffffc, [{0x6, 0x6, "3f520cbc"}, {0x6, 0xf, "58fb97cda4f850eaaeb6070b46"}]}, @rr={0x7, 0x13, 0xe5, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xb5, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0xe}, @remote]}]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x44, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x6}, {@multicast2, 0x9}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}, {@local, 0x1}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@empty, 0x1}, {@rand_addr=0x64010102}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast2}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0xde, 0x1, 0xa, [{@loopback, 0x3}, {@rand_addr=0x64010102, 0x80}, {@empty, 0x9}, {@multicast1, 0x3ff}, {@multicast2, 0x101}, {@multicast2, 0x6}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x8}, {@rand_addr=0x64010100, 0x5}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x1b, 0x17, [@multicast1, @multicast1, @empty, @multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @ssrr={0x89, 0x1b, 0xb, [@loopback, @rand_addr=0x64010100, @rand_addr=0x64010101, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x3b}]}]}}}], 0x210}}, {{&(0x7f0000002400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000002540)=[{&(0x7f0000002440)="c5bd811428adfd2d9f9408bebe9daf5fd3e90b8078aac821b60d0c6ee0b5f03ac6eafa5b980b0ec0d41d84bc26cec5c3345b51dbe4c8a2d36e99a57ed8869a20c556d93d", 0x44}, {&(0x7f00000024c0)="d86e5fc364f2a4965ce445579d641c6c60a24934d1bcd6b0ad7e317147fa4c10c37dace41f8d51a5b716c3fb60f7547bb14c4ff8c254708811feb852aa20ad5a2a1718cf89a175", 0x47}], 0x2}}, {{&(0x7f0000002580)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003680)=[{&(0x7f00000025c0)="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", 0x1000}, {&(0x7f00000035c0)="23f7227b5a84ed753d971416d77229873ae5e1434fa8cbcfbde9eaa478b9f247bbc6224efa187c864090bd5ed16e159d40dfb829913b58ab6df5b4ef9e6db7517ce5c8b8dccdec5d7dd8847bbe5f350d8228292911e0b142ce9055b194a530c14b5a3eb2b377abe273cd0127937a5ba5dd5bfa39b6b329063a916d0f13f1ed7c0e03f965877770a0", 0x88}], 0x2, &(0x7f00000036c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xefa}}], 0x48}}, {{&(0x7f0000003740)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000003840)=[{&(0x7f0000003780)="6adbcd9c59dfda9766191ad4217c3c62c6f3f5bb044e1ffd9cbb69f0ea0da98866b8ed0ae9ff0d4d10c206cf6370f916bed226eee41f74702eede292f9e3babf2a37384ec53b8e77894fbda93e03589314f4ebf750c0d7c2e4eabe2efe55ca42d56b8993", 0x64}, {&(0x7f0000003800)="ebc620ef43c6612b5b3ab0e95634caf11dae54d9315e", 0x16}], 0x2, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aae00000010000000011000000000000000000000001000000000000612c55fed92c29f30900742d000000020000000600000000000000000000001b0835add738bb9e66c1"], 0x220}}], 0x6, 0x40010) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000003c40)={'sit0\x00', r3, 0x29, 0x0, 0x8, 0x8, 0x16, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x10, 0x9, 0x9}}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f00000000c0)) 04:20:59 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x73}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25d5d9d90b15a4f2f46a302f2a8931f799ecbde29f2ad34b"}]]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1a0a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc8cdcbd02292be68}, 0x4) r2 = gettid() tgkill(r1, r2, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x90) 04:20:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:20:59 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x4) 04:20:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) [ 629.566600] Bluetooth: hci0: command 0x0406 tx timeout [ 631.614669] Bluetooth: hci0: command 0x0406 tx timeout 04:21:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0xf8, 0x8) 04:21:10 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) ptrace(0x8, r3) 04:21:10 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1009, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000f427e35c631b00075401fe7f182b6600beb24b9a12a864e1815763a4146fde766a94b3975d962302a0289482aacf6074dfe21ee7c32e28da721332a067388c516dfc65b59b3ad17234653547b81555f3747879ba2641da0f25c9e42843565e23003d63a9ccca3ab11b0ffea557c6f8b86ea6ccc5dfdc9d2465dc0c9dc654d0e1a0e336c6ce"]) close_range(r1, r2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r5, r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0xa0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r6, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000200)={0x0, 0x3, r2, 0x3, 0x80000}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 04:21:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0xfffffffffffffdef) 04:21:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:10 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4c, 0x1, 0x80, 0x5, 0x0, 0x400, 0x0, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x7b}, 0x80, 0x7, 0xff, 0x8, 0x2, 0x3c49, 0xff03, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x5, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) 04:21:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = fork() tgkill(r0, r1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) capget(&(0x7f0000000300)={0x20071026, r3}, &(0x7f00000003c0)={0x6, 0x400, 0x3, 0x6, 0xff, 0x40}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x72, 0x6, 0xae, 0x0, 0x0, 0x4c, 0x100, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x41200, 0x8, 0x8, 0x5, 0x6, 0xd7b, 0xd0b, 0x0, 0x1, 0x0, 0x8}, r3, 0xe, r6, 0x8) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000180)=""/63, 0x3f}], 0x2, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1, 0x0) 04:21:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x2) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x0, @empty}}) 04:21:11 executing program 1: sync() r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26e, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xc6, 0x6, 0x4, 0x4, 0x0, 0x3, 0x83000, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb89, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x200, 0x8e3, 0x1, 0x3, 0x100000000, 0x20, 0x7, 0x0, 0x6b8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa57826419e3157b2) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r4) read$char_usb(r1, 0x0, 0x7ffffffff000) 04:21:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r3, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000)) 04:21:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 04:21:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) [ 641.342660] Bluetooth: hci0: command 0x0406 tx timeout [ 643.390649] Bluetooth: hci0: command 0x0406 tx timeout 04:21:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:22 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x13a6686343cc96bb) r5 = dup3(r0, r1, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r4, 0x20000000a, 0x0) close_range(r0, r4, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000001100)=""/186, 0xba}, {&(0x7f00000011c0)=""/227, 0xe3}, {&(0x7f00000012c0)=""/151, 0x97}, {&(0x7f0000001400)=""/234, 0xea}, {&(0x7f0000000080)=""/20, 0x14}, {&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/164, 0xa4}, {&(0x7f0000001680)=""/128, 0x80}], 0xa) dup3(r5, r6, 0x0) 04:21:22 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x1009, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000f427e35c631b00075401fe7f182b6600beb24b9a12a864e1815763a4146fde766a94b3975d962302a0289482aacf6074dfe21ee7c32e28da721332a067388c516dfc65b59b3ad17234653547b81555f3747879ba2641da0f25c9e42843565e23003d63a9ccca3ab11b0ffea557c6f8b86ea6ccc5dfdc9d2465dc0c9dc654d0e1a0e336c6ce"]) close_range(r1, r2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r3, 0x0, r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) pidfd_getfd(r5, r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0xa0}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x3, r6, 0x2}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000200)={0x0, 0x3, r2, 0x3, 0x80000}) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 04:21:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000140)={0xa6, 0x29, 0x2, {0x7f, [{{0x1, 0x0, 0x6}, 0xec0, 0x2, 0x7, './file0'}, {{0x2, 0x4, 0x3}, 0x1, 0x3f, 0x7, './file0'}, {{0x8, 0x3, 0x7}, 0x8, 0x1, 0x7, './file0'}, {{0x20, 0x4, 0x5}, 0x0, 0x81, 0x7, './file0'}, {{0x20, 0x2, 0x3}, 0x1f, 0x1, 0x7, './file0'}]}}, 0xa6) tee(r1, r4, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7f, 0xec, 0x7f, 0x1, 0x0, 0x0, 0x20080, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x800, 0x7, 0x3f, 0x5, 0x2, 0x1ff, 0x3f, 0x0, 0xfffffe01, 0x0, 0xb62}, r0, 0x7, r4, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r5, 0x0, 0x7ffffffff000) 04:21:22 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup3(r3, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x40, 0xc7, 0x4c, 0x20, 0x0, 0x81, 0xe240, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp, 0x48, 0x400, 0x9, 0x9, 0xac8d, 0x0, 0x3, 0x0, 0x2, 0x0, 0x6}, 0xffffffffffffffff, 0x9, r5, 0x8) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000580)=""/178, 0xb2}], 0x9, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x70}, 0x80000060) fchown(r0, r7, 0x0) tgkill(r1, r2, 0x0) 04:21:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:22 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba, 0x3, 0x3e, &(0x7f0000000040)=""/62}) 04:21:22 executing program 2: fadvise64(0xffffffffffffffff, 0x2, 0x5, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xfffc}, 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x283002) close_range(r4, r1, 0x2) tee(r1, r3, 0x20000000a, 0x0) io_uring_enter(0xffffffffffffffff, 0x7667, 0x6577, 0x1, &(0x7f0000000000)={[0x40]}, 0x8) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x21) r6 = dup3(r0, r5, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000180)={{r7}, "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"}) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x5) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r8, r9, 0x0) tee(r8, r10, 0x20000000a, 0x0) [ 652.350576] Bluetooth: hci0: command 0x0406 tx timeout 04:21:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r3, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) pidfd_getfd(r3, r6, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) r10 = inotify_init1(0x80000) recvmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000100), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2, &(0x7f0000000500)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xfffffffffffffffe}, 0x40000102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x100040, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r11}}, {@access_client}], [{@hash}, {@dont_measure}, {@dont_measure}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x62, 0x31, 0x36, 0x32, 0x61, 0x78c82a2b526aed22], 0x2d, [0x65, 0x63, 0x33, 0x65], 0x2d, [0x38, 0x37, 0x63, 0x36], 0x2d, [0x33, 0x64, 0x62, 0x30], 0x2d, [0x5b, 0x37, 0x64, 0x5bacf35e144d7fe5, 0x61, 0x64, 0x35, 0x61]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x63, 0x65, 0x30, 0x32, 0x36, 0x64, 0x30], 0x2d, [0xe, 0x63, 0x0, 0xd], 0x2d, [0x61, 0x33, 0x35, 0x37], 0x2d, [0x30, 0x31, 0x32, 0x39], 0x2d, [0x38, 0x34, 0x66, 0x66, 0x64, 0x32, 0x62, 0x64]}}}, {@euid_lt={'euid<', 0xee00}}]}}) 04:21:34 executing program 7: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0xc000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file1\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r1}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file1\x00'}) 04:21:34 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x9409, 0x0, 0x0, 0x0, 0x0, 0x718}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) r3 = fcntl$getown(r0, 0x9) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb2, 0xec, 0x1, 0x0, 0x0, 0x8a87, 0x8008, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x8000, 0x1, 0x1, 0x7, 0x80000001, 0x5, 0x1, 0x0, 0xe11b, 0x0, 0x7}, 0x0, 0x4, r6, 0xc) rt_sigqueueinfo(r3, 0x36, &(0x7f0000000040)={0x28, 0x5, 0x20}) 04:21:34 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:21:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000080)="6894c6b6a02200c1a24d4d3884c0114b4365739b37fb83c575ceb6a555fa99e59644ac9323d166bc5166d3c06441eb52691df05a14dc906e9ff46e70d4802e7af142107622b51e652add123e1716440bf6baebf222ebe66b11e7556e63ab") write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:34 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:34 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x1, 0x1, 0x4, 0x0, 0x35e2, 0x8000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x6, @perf_config_ext={0x2, 0x1000}, 0x2100, 0x2, 0x4, 0x8, 0x1000, 0xf4d, 0x0, 0x0, 0x7, 0x0, 0x22}, r0, 0x3, r3, 0xb) r4 = gettid() tgkill(r0, r4, 0x0) 04:21:34 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:34 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = inotify_init1(0x0) close(r1) 04:21:34 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) 04:21:34 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) tee(r0, r7, 0x0, 0x0) 04:21:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='ip6gretap0\x00') r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x4, 0x80, 0xe301, 0x1f}}}, 0x11) r3 = dup3(r0, r1, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00001f00083f04b89da893f173363c2fbcfc3ed5a16c9a7a2365f3c282"], 0x6) 04:21:34 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0xca, 0x40, 0x6, 0x0, 0x5d65, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xff, 0x1}, 0x2, 0x1, 0xffffffc0, 0x8, 0x1, 0x4, 0x9, 0x0, 0x5, 0x0, 0xc850}, r1, 0x0, 0xffffffffffffffff, 0x2) r2 = gettid() tgkill(r0, r2, 0x0) 04:21:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) [ 664.575157] Bluetooth: hci0: command 0x0406 tx timeout [ 666.623412] Bluetooth: hci0: command 0x0406 tx timeout 04:21:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:44 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000003c0)={{r1}, "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"}) 04:21:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r2, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) r3 = dup3(r0, r1, 0x0) write$selinux_attr(r3, &(0x7f0000000000)='system_u:object_r:auditctl_exec_t:s0\x00', 0x25) tee(r0, r2, 0x0, 0x0) 04:21:44 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) 04:21:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:44 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:21:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000080)=0x7) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x21) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) fcntl$lock(r6, 0x6, &(0x7f00000001c0)={0x2, 0x0, 0x6fdf, 0x7fffffff, r9}) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f00000000c0)) r10 = dup3(r0, r2, 0x0) write$bt_hci(r10, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:44 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) 04:21:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) clone3(&(0x7f0000000580)={0x10280, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x16}, &(0x7f00000003c0)=""/243, 0xf3, &(0x7f00000004c0)=""/157, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) clone3(&(0x7f0000000640)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0xa}, &(0x7f0000000100)=""/52, 0x34, &(0x7f0000000140)=""/244, &(0x7f0000000600)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x0], 0x7, {r0}}, 0x58) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r6, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r7 = getpgrp(0x0) r8 = gettid() tgkill(r7, r8, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x20, 0x3, 0x8, 0x20, 0x0, 0x8, 0x40800, 0xf67af3b4ea31b1e8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x7fffffff}, 0x40080, 0x7, 0x3, 0x0, 0x3, 0x800, 0x4, 0x0, 0x5, 0x0, 0x3}, r8, 0x6, r0, 0x3) 04:21:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:44 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) 04:21:44 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff}, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2b4402, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000080)) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:21:44 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = pidfd_getfd(r2, r0, 0x0) write$bt_hci(r3, &(0x7f0000000000)={0x1, @create_conn={{}, {@any, 0x3ff, 0xfa, 0x15, 0x84, 0x80}}}, 0xfffffffffffffe8b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000080)) 04:21:44 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) [ 674.942615] Bluetooth: hci0: command 0x0406 tx timeout [ 676.990619] Bluetooth: hci0: command 0x0406 tx timeout 04:21:54 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x5, 0x8, &(0x7f0000000540)=[{&(0x7f0000000100)="e82fd05f5af378dc0c79feccaba7e08606e953669e5bd2f69a7c81883304632c608a12cff6f53c476f7da616ed49ad6ac3cfaa58ca832c4802f5b15a2470fba5b927b7fd98e53e4b161a42b9cbd8307d8fe0cfe55e6a7c94d1aa1bdc02320790e0b3606da091ce1dbc2ea8ff3c3f92a510c62fd984fc9f982603bb9bd2646c326f78fd167755fa676506ad844e65e8d0e9909b24af68451b73649fba3cf10e75bf89df2b6bf60b5134b4c69cf4a7ab56216b9f527385c7be03d6b25aef4c9632a3a4a51bff64e8b06808ed12c3753b9ab15b0b4b980d908f5b478148a2576a3e0e5c2338c458e07c27ba0e59dfb4f9ff", 0xf0, 0x1}, {&(0x7f0000000200)="46a794f77500206d7371261d", 0xc}, {&(0x7f0000000240)="cb0061ff09aac35f1514e69ed92a656c87373dc5e038eb09dc5040e527b9668edc0f82f16d9604b1d9d9171c5cb36ca79f1b5c00eefb1cbd7841ef73b0e71360fe16dd31bbef6862c13e466c6048ee439dbac6ca24d44670281642ee47", 0x5d, 0x1000}, {&(0x7f00000002c0)="0df02e48b270432ff2094791c60eda5b097bb75875d3695114e86f881589cd59ca50292268344a9ec434c04a8ea6a05ffaaed428cc3d783aaceb6f3f451cd239f5c7965f2d66be961c33b76768934f103174c499396000db00c301f4ae6deb", 0x5f, 0x8}, {&(0x7f0000000340)="4025689190903515cd62ac993ee9413bc04e2875b1343df7295cc17df4b059254cce76c0214b49d9ab49f8aba327cf4e5feb1d0549652c7c048eef3419ee6d1e19d8d75dd0131ce4fea6e18231289dc11b8e93ae56a2ed13d1734d2872b11cade77fcfaee7fb5a6e52737b70ba8697cad3e4b36ca17c7e6f136b95128bde608f0d61089a", 0x84, 0x1}, {&(0x7f0000000400)="38c11c31bf486cc1ec0f4962a6512bbd9ad7c77214e4e2d881e7e8f8d86571", 0x1f, 0x9}, {&(0x7f0000000440)="b3ac992034da74799e2bb3d381dba21c6b47c64394f9102e8681814dc108a68060b807ee8b23bf243040c993329248d149e5c8c772724dacb2ec563437f0fc847bc5c533f3a7fa385fd6614d4996d9f826debb5fd3591b9f5a377f304a769aeba62c1615def51de5b6f247bded51865733b3c830ee264b6ce9e5a0a85fa6647680823c5d16f2f530cdb598fe17ac960c62c1cf5f38b1c3aea832954f185356ce82e0c5709489587eb002edcec9352d5077d515f7f8fa5751", 0xb8, 0x100000001}, {&(0x7f0000000500)="39de08c7b0536e4a044fb84ceaa4", 0xe}], 0x0, &(0x7f0000000600)={[{'}n'}, {'.{*'}, {')%$.'}], [{@smackfstransmute}, {@permit_directio}, {@obj_role={'obj_role', 0x3d, '!*@%%@-]'}}, {@obj_role={'obj_role', 0x3d, '/#@+\'/'}}, {@appraise_type}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x11}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@smackfsdef}, {@audit}]}) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000006c0)={0x1, 0xf03}) 04:21:54 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) r3 = gettid() write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '+'}, {}, {0x20, '@%%-'}, {0x20, '@!{\x03([-'}, {0x20, '%'}, {0x20, '\')'}], 0xa, "7bb1e18b1e959fde042ec6bede219bcf2c357f97d4da35ae53276526a87bb3c252dcda69055e88167ad2576dba03c26c1124504b4fbf8edcb85e54bfafec2a76adf6a471adf990a8cd0a4a17006df81981e253d8b82a4eb4de86e1a7dd4caae1dad829ff058037860fe4eed40e41e3166ede3da3a8259c360508af2ace10ad3cb78ab6958e36cab0f2d7e2c420fbd3a86d074093ce2389839d234e44b88c0588477e37a15747833e3dd0be45ffef21bc01a05596dd5895fec27d46c8d33765efa2e47bcd99db2a30ba4418332295a06ed316f389910c4a19a98623f87d79311aa817c029ffa912bccfa608a3ae3de44beaf6"}, 0x113) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0x0, 0x1, 0x1f, 0x0, 0x6, 0x400, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x92, 0x20}, 0x1004, 0xffffffffffffcac5, 0x80000000, 0x8, 0xfe8b, 0x100, 0xed, 0x0, 0xfffffffb, 0x0, 0x3e5a}, r4, 0xffffffffffffffff, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) tgkill(r1, r3, 0x0) 04:21:54 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x80, 0x8, 0x0, 0x0, 0x500000000000000, 0x820, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0x3ff}, 0x432, 0x1002, 0x0, 0x0, 0x80, 0x12000001, 0x4dc, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:21:54 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:21:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:54 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) io_setup(0x200, &(0x7f00000000c0)) 04:21:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/162, 0xa2}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f00000003c0)=""/140, 0x8c}], 0x6, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x1, 0x40010001, &(0x7f0000000680)={r2, r3+10000000}) getpgrp(r4) tgkill(r0, r1, 0x0) r5 = gettid() getpgrp(r5) 04:21:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:54 executing program 2: fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x200, 0x1b4, 0x8}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000040)) ioctl$TCGETS(r3, 0x5401, &(0x7f00000012c0)) ioctl$KDSETLED(r2, 0x4b32, 0x401) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000000)={0x3, 0xff, "490480", 0x3, 0x20}) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2bdfd30ea3a3cdea3c011f04020000bc4d56d058fedc53f0cad48a89529289e9ebdcebd676a38532409a0601e1361ad4aae2f50a985054621cd1b9b49783dcc5e0364d45b941301daa252241042b2fd2ff330b635051018c8588"], 0x6) 04:21:54 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:21:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:21:54 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080)) 04:21:54 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) io_setup(0x200, &(0x7f00000000c0)) 04:21:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x12d, [0x0, 0x1f], 0x5}, 0x10) 04:21:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10000000, 0xf99}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, r2, 0x1f, &(0x7f0000000100)={0x31, 0x1, 0x80000001}) tgkill(r0, r1, 0x0) waitid(0x2, r0, 0x0, 0x8, &(0x7f0000000040)) 04:21:55 executing program 7: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) io_setup(0x200, &(0x7f00000000c0)) [ 685.246573] Bluetooth: hci0: command 0x0406 tx timeout [ 687.294656] Bluetooth: hci0: command 0x0406 tx timeout 04:22:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000000040)=""/92, 0x5c, 0x40) read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x24101, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0xff, 0x34, "dd7eea1725f9a5ad1b003314f8a938717c8eb43fa857f2489e76b5c3c555152ff237b2c64fef08ea22435c9317278d318b052d1b"}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) 04:22:05 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:05 executing program 6: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:05 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r2, 0x5396, &(0x7f0000000000)={0x7f}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) 04:22:05 executing program 2: syz_io_uring_setup(0x1a75, &(0x7f0000000080)={0x0, 0x269b, 0x0, 0x3, 0x10c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) r1 = inotify_init1(0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r1}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) write$bt_hci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="341f0402006b"], 0x6) 04:22:05 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r8, 0x3, r0, 0x2, 0x80000}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r10, r11, 0x0) tee(r10, r12, 0x0, 0x0) 04:22:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:05 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:22:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1dc1674a7282a7b07255ca6bacecee55040000000000"], 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000180)=0x8, &(0x7f0000000080)=0x4) 04:22:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:05 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4048, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:22:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe, 0x10, r0, 0x4bd26000) 04:22:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fsync(r1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x5, 0x4) fstatfs(r2, &(0x7f0000000080)) 04:22:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) gettid() r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) tgkill(r0, r2, 0x0) 04:22:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) 04:22:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:16 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0x1}, 0xe) r7 = socket$inet6(0xa, 0x3, 0x4) poll(&(0x7f0000000080)=[{r3, 0x18}, {r7, 0x1010}], 0x2, 0x7fff) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) [ 707.134567] Bluetooth: hci0: command 0x0406 tx timeout [ 709.182604] Bluetooth: hci0: command 0x0406 tx timeout 04:22:27 executing program 7: setrlimit(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) close_range(r6, r3, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) tee(r0, r2, 0x0, 0x0) 04:22:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x2b0, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xf4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x94}, 0x20000001) r3 = gettid() tgkill(r0, r3, 0x0) 04:22:27 executing program 1: semget$private(0x0, 0x0, 0xcc06e062b25f7682) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/vlan/vlan1\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) 04:22:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x5, &(0x7f0000001300)=""/238, 0xee}, 0x7}, {{&(0x7f0000001400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001480)=""/36, 0x24}], 0x1}, 0x5}], 0x2, 0x22, 0x0) 04:22:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:27 executing program 7: setrlimit(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:22:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) read$char_usb(r1, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10b9800}, 0x1c) 04:22:27 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x1, 0xde, 0x10, 0x7f}]}) tee(r0, r2, 0x0, 0x0) 04:22:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:27 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) getpgrp(r1) 04:22:27 executing program 7: setrlimit(0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:22:27 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$P9_RMKDIR(r3, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x1, 0x4, 0x8}}, 0x14) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r4, 0x0, 0x0) [ 717.630555] Bluetooth: hci0: command 0x0406 tx timeout [ 719.678751] Bluetooth: hci0: command 0x0406 tx timeout 04:22:36 executing program 1: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) 04:22:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:22:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20a000, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:36 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) tgkill(r0, r1, 0x0) 04:22:36 executing program 7: setrlimit(0x9, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x10, 0x7, 0x2, {{0x3, '@-{'}, 0x1}}, 0x10) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x0, 0x0) 04:22:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:36 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:22:36 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) fadvise64(r5, 0x7, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) 04:22:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:22:36 executing program 7: setrlimit(0x9, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f00000000c0)={0x7, 'virt_wifi0\x00', {0x8001}, 0x1001}) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:22:36 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) kcmp(r4, r2, 0x5, r6, r0) ioprio_set$pid(0x2, r1, 0x4004) 04:22:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_io_uring_complete(0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x14d) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={0x0, 0x3, r1, 0x100}) write$P9_RLERRORu(r2, &(0x7f0000000000)={0x19, 0x7, 0x1, {{0xc, '}-]!,}^)))--'}, 0x400}}, 0x19) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000026c0)={r3, 0x800, 0x7, 0x3}) io_submit(0x0, 0x5, &(0x7f0000002740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000140)="17dd28e71ac6e9cc56e9b624f4a0b7411a0fef79ba31e32e9f615d33f3821cfe41b8e3ad2b346839ff622ca5ce63c52585d18c6e9c22a680cd270b4afa8c0f556946e8bf1ed214796ef307371fecfabf6ea64dff5dc20d1b439391644fbee0ac8b6944f5bc11b0d48b90bb421f7a936a2dd0e45675962db97d7650d81e762fb19084a22f738806c4fc49f132d2e6114da55f18121925fdd8100a397ded024a39525ada4f9c4c52685fdbeb6cf96487fe144d03a808653206a933c857", 0xbc, 0x35}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x5, r6, &(0x7f0000000240)="2749fd8100e5b7e6426003101ed899f42fe8eea02037f4b0330602db34bc0b5b", 0x20, 0x6, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xff, r1, &(0x7f00000002c0)="355e6cf4bf6aac372691ec6d5babb5c149d2bf33592f13de590d4b0fa8b00754a5d6e1c79d5152a9e8f6adb057d826a2e2fff0cd08db99232e21941bbf52e71aab1f5a85e0783d01c8cf0a01fadce2035bb8bf6e37f15a87731a2c5fe8018a0971c3c29418f79f26ca541ebd12f4d097e56948c1eb25bc7f90be4405439a2cf2493b4581581b4fee0ca04dfc6df8306984d2029125a8086bb91ec3", 0x9b, 0x0, 0x0, 0x3}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x5, 0xe11, 0xffffffffffffffff, &(0x7f00000003c0)="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", 0x1000, 0x5, 0x0, 0x2, r3}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x1, 0x4, r9, &(0x7f0000001440)="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", 0x1000, 0xe247, 0x0, 0x2, r10}]) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r11, 0x0, 0x0) [ 726.654617] Bluetooth: hci0: command 0x0406 tx timeout [ 728.702611] Bluetooth: hci0: command 0x0406 tx timeout [ 730.750616] Bluetooth: hci0: command 0x0406 tx timeout [ 732.798532] Bluetooth: hci0: command 0x0406 tx timeout [ 734.846652] Bluetooth: hci0: command 0x0406 tx timeout 04:22:53 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pread64(r5, &(0x7f0000000100)=""/159, 0x9f, 0x1968) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:22:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f00000000c0)={0x7, 'virt_wifi0\x00', {0x8001}, 0x1001}) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:22:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:22:53 executing program 7: setrlimit(0x9, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:53 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum, 0x0, @desc3}) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') fcntl$setlease(r3, 0x400, 0x1) read$char_usb(r3, 0x0, 0x7ffffffff000) 04:22:53 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24004000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:22:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:22:53 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1f, 0x37, 0x2, {0x0, 0xa9, 0x7fffffff, r0, 0x1, '%'}}, 0x1f) r2 = gettid() tgkill(r0, r2, 0x0) 04:22:53 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xfffc}, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000600)) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000006c0)={0x7, 0x4b, 0x1}, 0x7) tee(r2, r7, 0x20000000a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0) r8 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000540)=[{&(0x7f0000000180)="5fcfeed251fedf4f46af2be4dce5ccac34e3c85f54984c081aed68a39ba8595d8ba5aa430b", 0x25, 0xfff}, {&(0x7f00000001c0)="96f41a020d7333ca59b5b1d2f321d31e03c27d19518cf1dbdf223bf45d8b49867cea6d90bb6af7288492a2fb353b28b30f74eedc9529cdbc200f004b970bc8295d5aa2941325a3a2e23b279eb401c6f3d59077472748df2eff1caf75b67b830cbda9e4109546efa1f0055eb37861c2f0adcc2942ea8186cae1ee711004440915adec6fd9b14ae437a44e8a444a", 0x8d, 0x7}, {&(0x7f0000000280)="e92b41b089ae99183d1f89a8ddbacd92b5b78a21141ccd5cd943e2f1fdacc79d15dcb73c96eca83b124331be651c78aa1eab317865b7d7a028f468fa5aabc57a05b372dc9f05757c74f2a937b662685c5776a0b6700276c2324bfd288ed7296d297769f9980d3557882beed53d504246f14e1a2ced79018476f95a5c577ac1c3738fa9838eafda05c63e96ded80aef15ffa1a5fbf0300dbf6ab9109b840be5a0c129c342ff9e141a5161f82f9b3b29dab662a1ded9bd9c3356ba64bbefd279b16226a1a5aaf54d4faa264c455b0682578a47f4217dbcb78e0e5cd6edae7ea6fd9969d15e13656e5863b45a000000", 0xee}, {&(0x7f0000000380)="4f2f837b89ca06a7a10eae0bb2f3628880b9787bd656f7", 0x17, 0x1}, {&(0x7f00000003c0)="d524d67fd0f896fd3ea4820858a8c73ffda2e35d35b0cbb296adaa17e43472f2de62eb01e13ac45836202d9b5bc44bb5b46d1534eeb4c6f40a8d04d753e3a6ee5499ffa944bc77226c89252ccf9f0d983b30327ce909443c27c3f754c1bd1f48d2e05cfc62067694fc0a36415762fdd514777cd88aac1a8db747bd5db3d62cedde71a8ed7ec8d8173c752d1fb91bfadc8672a82513d61ebf515ca39e", 0x9c, 0x10001}, {&(0x7f0000000480)="5c6621e7c648f7e117f037d3f3c0aaa78a85bd70a1a46cd33644a468270f9edc9c012b6797fadfe2d3ce700cea4d72f805845b805179db39c21ce0d20241048131717b8a5d9dc2c749063f71f1c396a12c6de9e3c8ac630c78e63818f8", 0x5d, 0x4}, {&(0x7f0000000500)="15b449bfbaa8", 0x6, 0x3}], 0x200008, &(0x7f0000000800)={[{@huge_never}, {@huge_never}, {@mode}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bsg\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_type}]}) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f00000008c0)=""/148) r9 = dup3(r8, r7, 0x0) write$bt_hci(r9, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:22:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:22:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f00000000c0)={0x7, 'virt_wifi0\x00', {0x8001}, 0x1001}) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:22:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:22:53 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x0, 0x5, 0x6, 0x80000000}, {0x0, 0x6, 0x1, 0x1ff}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) r5 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x400840, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000180)=[r1, r4, r5, r6], 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x0, 0x0) 04:22:53 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:22:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[], 0x6) 04:22:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) [ 743.678534] Bluetooth: hci0: command 0x0406 tx timeout [ 745.726592] Bluetooth: hci0: command 0x0406 tx timeout [ 747.774562] Bluetooth: hci0: command 0x0406 tx timeout [ 749.822575] Bluetooth: hci0: command 0x0406 tx timeout 04:23:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0x1, 0x1}, 0x6) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = dup3(r0, r5, 0x0) write$bt_hci(r6, &(0x7f0000000180)={0x1, @set_cpb_data={{0xc76, 0xff}, {0xee, 0x5a, 0x0, "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"}}}, 0x103) 04:23:02 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000010301010000000000000000010000010800034000000fff340013800600014088a800000600014081000002060002400003000006000140810000120600014088a800000600014088a8000900000b80200004801c0001800500010003000000050003000400000005000200080c0000001000170000000002000003ff0000000014000e800600034006000340000000006fba1faf339ac521060f00002b138458a0e0a84d63fe230a694d534e9aa443859fa679f1e6d4a88ad9ea4b624a0e4e7b32ec58de366652b489a4cd0c64cc4adc6762b0814b53f205ccc60f00000000"], 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x80) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(0x0, r3, 0x0) keyctl$chown(0x4, 0x0, r3, 0xee00) r4 = getpgrp(0x0) r5 = gettid() migrate_pages(r5, 0x1f, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x8) tgkill(r4, r5, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 04:23:02 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:23:02 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x0, 0x81, 0x0, 0x96}, {0x7c80, 0x1f, 0x40, 0x7fffffff}, {0x9, 0x7f, 0x8, 0x80}, {0x81, 0x40, 0x4, 0xff}, {0x80, 0x27, 0x8, 0x7fff}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 04:23:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8983, &(0x7f00000000c0)={0x7, 'virt_wifi0\x00', {0x8001}, 0x1001}) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:02 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xfffc}, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000600)) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000006c0)={0x7, 0x4b, 0x1}, 0x7) tee(r2, r7, 0x20000000a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0) r8 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000540)=[{&(0x7f0000000180)="5fcfeed251fedf4f46af2be4dce5ccac34e3c85f54984c081aed68a39ba8595d8ba5aa430b", 0x25, 0xfff}, {&(0x7f00000001c0)="96f41a020d7333ca59b5b1d2f321d31e03c27d19518cf1dbdf223bf45d8b49867cea6d90bb6af7288492a2fb353b28b30f74eedc9529cdbc200f004b970bc8295d5aa2941325a3a2e23b279eb401c6f3d59077472748df2eff1caf75b67b830cbda9e4109546efa1f0055eb37861c2f0adcc2942ea8186cae1ee711004440915adec6fd9b14ae437a44e8a444a", 0x8d, 0x7}, {&(0x7f0000000280)="e92b41b089ae99183d1f89a8ddbacd92b5b78a21141ccd5cd943e2f1fdacc79d15dcb73c96eca83b124331be651c78aa1eab317865b7d7a028f468fa5aabc57a05b372dc9f05757c74f2a937b662685c5776a0b6700276c2324bfd288ed7296d297769f9980d3557882beed53d504246f14e1a2ced79018476f95a5c577ac1c3738fa9838eafda05c63e96ded80aef15ffa1a5fbf0300dbf6ab9109b840be5a0c129c342ff9e141a5161f82f9b3b29dab662a1ded9bd9c3356ba64bbefd279b16226a1a5aaf54d4faa264c455b0682578a47f4217dbcb78e0e5cd6edae7ea6fd9969d15e13656e5863b45a000000", 0xee}, {&(0x7f0000000380)="4f2f837b89ca06a7a10eae0bb2f3628880b9787bd656f7", 0x17, 0x1}, {&(0x7f00000003c0)="d524d67fd0f896fd3ea4820858a8c73ffda2e35d35b0cbb296adaa17e43472f2de62eb01e13ac45836202d9b5bc44bb5b46d1534eeb4c6f40a8d04d753e3a6ee5499ffa944bc77226c89252ccf9f0d983b30327ce909443c27c3f754c1bd1f48d2e05cfc62067694fc0a36415762fdd514777cd88aac1a8db747bd5db3d62cedde71a8ed7ec8d8173c752d1fb91bfadc8672a82513d61ebf515ca39e", 0x9c, 0x10001}, {&(0x7f0000000480)="5c6621e7c648f7e117f037d3f3c0aaa78a85bd70a1a46cd33644a468270f9edc9c012b6797fadfe2d3ce700cea4d72f805845b805179db39c21ce0d20241048131717b8a5d9dc2c749063f71f1c396a12c6de9e3c8ac630c78e63818f8", 0x5d, 0x4}, {&(0x7f0000000500)="15b449bfbaa8", 0x6, 0x3}], 0x200008, &(0x7f0000000800)={[{@huge_never}, {@huge_never}, {@mode}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bsg\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_type}]}) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f00000008c0)=""/148) r9 = dup3(r8, r7, 0x0) write$bt_hci(r9, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:23:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000340)={0x5, 0x3, {0x4, @usage=0x35, 0x0, 0x2a6, 0x3, 0x6, 0x4, 0x4, 0x10, @usage=0x400, 0xc0b2, 0x4, [0x5, 0x2, 0x1010, 0x1, 0x9, 0xf21]}, {0xffff, @struct={0x4, 0x2}, 0x0, 0x4, 0x0, 0x3f, 0x7ff, 0x6, 0x8, @struct={0x40, 0x4}, 0x3, 0x3, [0x6, 0x1a, 0x3f, 0x5, 0x4, 0xfff]}, {0x3, @usage=0x109, 0x0, 0x9, 0x0, 0xe602, 0x1, 0xde, 0x80, @usage=0x3ff, 0x5, 0x6, [0x100000000, 0x1, 0x5, 0x3, 0x6, 0x2]}, {0x9, 0x100000000, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="bc01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r1, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000080000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000500000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000686173685f737461747300000000000000bbfad64847b7147400000000050003000b00000008000000080007000000000000000000"], 0x1d8}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) r2 = fsmount(r0, 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100fc22bd34d76adb92b5", @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653000"]) 04:23:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:02 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:23:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) [ 751.870627] Bluetooth: hci0: command 0x0406 tx timeout [ 753.918590] Bluetooth: hci0: command 0x0406 tx timeout [ 755.966647] Bluetooth: hci0: command 0x0406 tx timeout [ 758.015553] Bluetooth: hci0: command 0x0406 tx timeout 04:23:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, '\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x2, 'macsec0\x00', {0x1000}, 0x9}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x81) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:23:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r9, r10, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) recvmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/157, 0x9d}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f0000000300)=""/29, 0x1d}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/219, 0xdb}], 0x8, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x2002) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) r7 = getgid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1100800, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@posixacl}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x5}}, {@cachetag={'cachetag', 0x3d, '%)'}}], [{@subj_user={'subj_user', 0x3d, '(-(|&-'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}]}}) tee(r0, r3, 0x0, 0x0) 04:23:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000080086af6de3727fbb5bae530d68578147e75650b3306339862b419a2186ac58a811bcb3ea588c811ba7b6971310fab11ffc4248983459dfcc7ff1d32d0a343cb5cf52e614aac36481f115e0a0335bcce4a360e6abfd85ffbed9f75a0dc16070667d7f1b24370b4d451ae9cb385e3a34d0dda6dd1b2b85d0334c1dfe7c4beaf7c6b0cb5681b9268a64ee6262af72068bc9cc97ef3638aa6de59dc541cf2fa2c3a3d642bb4e2e738e522688010a96086702e583bc40a7d4f10fdde1950b544dc9aca4697e13add5a583c58448cf8f86f59a800734977df48ef760cf65af086df44adfa9597c9967fec72b"], 0x6) 04:23:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) pidfd_open(r3, 0x0) tgkill(r0, r1, 0x0) 04:23:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xfffc}, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000600)) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000006c0)={0x7, 0x4b, 0x1}, 0x7) tee(r2, r7, 0x20000000a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0) r8 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000540)=[{&(0x7f0000000180)="5fcfeed251fedf4f46af2be4dce5ccac34e3c85f54984c081aed68a39ba8595d8ba5aa430b", 0x25, 0xfff}, {&(0x7f00000001c0)="96f41a020d7333ca59b5b1d2f321d31e03c27d19518cf1dbdf223bf45d8b49867cea6d90bb6af7288492a2fb353b28b30f74eedc9529cdbc200f004b970bc8295d5aa2941325a3a2e23b279eb401c6f3d59077472748df2eff1caf75b67b830cbda9e4109546efa1f0055eb37861c2f0adcc2942ea8186cae1ee711004440915adec6fd9b14ae437a44e8a444a", 0x8d, 0x7}, {&(0x7f0000000280)="e92b41b089ae99183d1f89a8ddbacd92b5b78a21141ccd5cd943e2f1fdacc79d15dcb73c96eca83b124331be651c78aa1eab317865b7d7a028f468fa5aabc57a05b372dc9f05757c74f2a937b662685c5776a0b6700276c2324bfd288ed7296d297769f9980d3557882beed53d504246f14e1a2ced79018476f95a5c577ac1c3738fa9838eafda05c63e96ded80aef15ffa1a5fbf0300dbf6ab9109b840be5a0c129c342ff9e141a5161f82f9b3b29dab662a1ded9bd9c3356ba64bbefd279b16226a1a5aaf54d4faa264c455b0682578a47f4217dbcb78e0e5cd6edae7ea6fd9969d15e13656e5863b45a000000", 0xee}, {&(0x7f0000000380)="4f2f837b89ca06a7a10eae0bb2f3628880b9787bd656f7", 0x17, 0x1}, {&(0x7f00000003c0)="d524d67fd0f896fd3ea4820858a8c73ffda2e35d35b0cbb296adaa17e43472f2de62eb01e13ac45836202d9b5bc44bb5b46d1534eeb4c6f40a8d04d753e3a6ee5499ffa944bc77226c89252ccf9f0d983b30327ce909443c27c3f754c1bd1f48d2e05cfc62067694fc0a36415762fdd514777cd88aac1a8db747bd5db3d62cedde71a8ed7ec8d8173c752d1fb91bfadc8672a82513d61ebf515ca39e", 0x9c, 0x10001}, {&(0x7f0000000480)="5c6621e7c648f7e117f037d3f3c0aaa78a85bd70a1a46cd33644a468270f9edc9c012b6797fadfe2d3ce700cea4d72f805845b805179db39c21ce0d20241048131717b8a5d9dc2c749063f71f1c396a12c6de9e3c8ac630c78e63818f8", 0x5d, 0x4}, {&(0x7f0000000500)="15b449bfbaa8", 0x6, 0x3}], 0x200008, &(0x7f0000000800)={[{@huge_never}, {@huge_never}, {@mode}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bsg\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_type}]}) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f00000008c0)=""/148) r9 = dup3(r8, r7, 0x0) write$bt_hci(r9, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:23:12 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:23:12 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:23:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xfffc}, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000600)) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000006c0)={0x7, 0x4b, 0x1}, 0x7) tee(r2, r7, 0x20000000a, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0) r8 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x7, &(0x7f0000000540)=[{&(0x7f0000000180)="5fcfeed251fedf4f46af2be4dce5ccac34e3c85f54984c081aed68a39ba8595d8ba5aa430b", 0x25, 0xfff}, {&(0x7f00000001c0)="96f41a020d7333ca59b5b1d2f321d31e03c27d19518cf1dbdf223bf45d8b49867cea6d90bb6af7288492a2fb353b28b30f74eedc9529cdbc200f004b970bc8295d5aa2941325a3a2e23b279eb401c6f3d59077472748df2eff1caf75b67b830cbda9e4109546efa1f0055eb37861c2f0adcc2942ea8186cae1ee711004440915adec6fd9b14ae437a44e8a444a", 0x8d, 0x7}, {&(0x7f0000000280)="e92b41b089ae99183d1f89a8ddbacd92b5b78a21141ccd5cd943e2f1fdacc79d15dcb73c96eca83b124331be651c78aa1eab317865b7d7a028f468fa5aabc57a05b372dc9f05757c74f2a937b662685c5776a0b6700276c2324bfd288ed7296d297769f9980d3557882beed53d504246f14e1a2ced79018476f95a5c577ac1c3738fa9838eafda05c63e96ded80aef15ffa1a5fbf0300dbf6ab9109b840be5a0c129c342ff9e141a5161f82f9b3b29dab662a1ded9bd9c3356ba64bbefd279b16226a1a5aaf54d4faa264c455b0682578a47f4217dbcb78e0e5cd6edae7ea6fd9969d15e13656e5863b45a000000", 0xee}, {&(0x7f0000000380)="4f2f837b89ca06a7a10eae0bb2f3628880b9787bd656f7", 0x17, 0x1}, {&(0x7f00000003c0)="d524d67fd0f896fd3ea4820858a8c73ffda2e35d35b0cbb296adaa17e43472f2de62eb01e13ac45836202d9b5bc44bb5b46d1534eeb4c6f40a8d04d753e3a6ee5499ffa944bc77226c89252ccf9f0d983b30327ce909443c27c3f754c1bd1f48d2e05cfc62067694fc0a36415762fdd514777cd88aac1a8db747bd5db3d62cedde71a8ed7ec8d8173c752d1fb91bfadc8672a82513d61ebf515ca39e", 0x9c, 0x10001}, {&(0x7f0000000480)="5c6621e7c648f7e117f037d3f3c0aaa78a85bd70a1a46cd33644a468270f9edc9c012b6797fadfe2d3ce700cea4d72f805845b805179db39c21ce0d20241048131717b8a5d9dc2c749063f71f1c396a12c6de9e3c8ac630c78e63818f8", 0x5d, 0x4}, {&(0x7f0000000500)="15b449bfbaa8", 0x6, 0x3}], 0x200008, &(0x7f0000000800)={[{@huge_never}, {@huge_never}, {@mode}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '-'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/bsg\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_type}]}) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f00000008c0)=""/148) r9 = dup3(r8, r7, 0x0) write$bt_hci(r9, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:23:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)="b284168b10fb3f7e7ffe3c9969a6f7553515cd52836cb2fc2921a6adac816ba8341db21f14a1c867bf6bc05b5c67b2ee358b22a42042e327682a01517e2d7253ecde28c24aca2a581d25a3dc9998d2443176a6ac24897be4d1068792") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:23:12 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:23:12 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xfa00, 0x9, 0x12, 0x484}, {0x3, 0xfd, 0x1, 0x80000000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:23:12 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40000800) read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x7f, 0x7f, 0x7, 0x0, 0x6, 0xc0d26, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x1, 0xf09}, 0x10400, 0x8, 0x7, 0x6, 0x20000000000000, 0x9, 0xfff7, 0x0, 0x7, 0x0, 0x3}, r2, 0x6, r0, 0xa) 04:23:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) gettid() r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) tgkill(r2, r4, 0xc) getpgrp(0x0) r5 = gettid() tgkill(0x0, 0x0, 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, 0xffffffffffffffff, 0x80000) tee(r6, r7, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1f, 0x0, 0x4, 0x40, 0x0, 0xda1, 0x20000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x8b9ec6682e5484f5, @perf_bp={&(0x7f0000000000), 0x5}, 0x2011, 0x9, 0xc8000000, 0x1, 0x10001, 0xfff, 0x9, 0x0, 0x7, 0x0, 0x7}, r5, 0xa, r7, 0x4) 04:23:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f00000013c0), 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:12 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) [ 762.622612] Bluetooth: hci0: command 0x0406 tx timeout [ 764.670583] Bluetooth: hci0: command 0x0406 tx timeout [ 766.718604] Bluetooth: hci0: command 0x0406 tx timeout [ 768.766608] Bluetooth: hci0: command 0x0406 tx timeout [ 770.814555] Bluetooth: hci0: command 0x0406 tx timeout 04:23:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:23:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:22 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x93, 0xd8, 0x2, 0x0, 0x5, 0x26, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x3, 0x3}, 0x6801, 0x9, 0x3, 0x1, 0xfffffffffffff001, 0x8000, 0x3f, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x2) 04:23:22 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:22 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000080)="9fff962223c4e0466d01c898d1e871d82e070178eff672f7e589daf867915a306ee37e135af3e1e026a51efec29c4e8237fa6cf6c2573d939e3257c768402dd0427a93b92f72097ffe1df48d6690bc80c1feff1cf04e1b317a04c1a3f27b53202ee2") r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = dup3(r0, r4, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:23:22 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:23:22 executing program 1: r0 = fork() perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read$char_usb(r1, 0x0, 0x7ffffffff000) 04:23:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:23:23 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) dup3(r1, r2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r5, r3, 0x0, 0xb) 04:23:23 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_io_uring_complete(0x0) ioctl$sock_bt_hci(r1, 0x4, &(0x7f0000000180)="2b4d40c11990ec009e9c39939b0f36e9c0bf10ce13e9db4f6533a112801510cf07c7f7d5afa6b5447a5e8792689b0b6ee2a5c6db461f4334ebe56ffed1242f90df8830691881afa7a3a1fa5897abe77243135926082ae0e5bce129759c0bafb1edb99911ac95432498807c76a6a5a7423dbe78eb2584500a05df56304a390ae9610f53caaec26cacb62c39da9af66980becdb94771e2625c63537dac8507cb32291f1dd7c04b48f973ec6a1ffbef74328f50f537f9de723ea8ce6ba6f2b997db2da5f3e1c8d767c08177f739f64ee6bb2752297bb12be8b2fb676b1eb7e27472262e96290310ed5e3ca30f7f4b0c176a594be065d6") r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2c9, 0x4) r3 = dup3(r0, r2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000007266f45086342cc5bb8dbaa80771bce261c1996008acb1ca8f5ee25523d585a0c5e92f0720136ba29bf783ed4592f16ed680f8acf781c0b8180b32ef04c6ec79eabff26e30fc5f50636d8db502af41e5e6598ccb5416df10b1bcc5aaa100acdf08db5f493cddf6adc7b1a6ccdfb9075d4caa53f405910f6c2f39c949eebea9f30125a9918fae09c47a18455e93fde7805a802d952ccc7a31cb7214cbd5284dad"], 0x6) 04:23:23 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000000c0)) [ 772.862599] Bluetooth: hci0: command 0x0406 tx timeout [ 774.911629] Bluetooth: hci0: command 0x0406 tx timeout [ 776.958589] Bluetooth: hci0: command 0x0406 tx timeout [ 779.006555] Bluetooth: hci0: command 0x0406 tx timeout 04:23:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) r6 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r7, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f00000001c0)="6980eece356f4c", 0x7, 0x0, 0x0, 0x3, r6}]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r8, r9, 0x0) tee(r8, r10, 0x20000000a, 0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x55, r1, &(0x7f0000000180)="07ba21efea21eaa16f7353e6dcff317bef49d1af15b078b1d6967e61a0dab71434baf596852b7319279e358832544bc962c8190a410cd454b265608020f700b3812dcb16c59cf9c4f172f61505c774a59e33e7278348ced4a4b1f20fa6a4f6223c9f6e7ad8d9c26cfa02db05f2298741b66a8ee488d81f9741750cf52384f17749450ca70096be403b845fb9329684579cfc335af200fd84617e65556490c669dc16", 0xa2, 0x0, 0x0, 0x1, r10}]) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xb) 04:23:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:31 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000000c0)) 04:23:31 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x80) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f00000000c0)=""/33, 0x21, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250a00000010006e80040002000400010004000200300050800800070001000000080007000000000008000700000000001100010005ca3849027340e7b3d6e7cdbd0000000a0006000802110000010000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x24004494) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x81, 0x6, 0x2, 0x2, 0x0, 0x7fffffff, 0x80, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x24, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x808, 0x7, 0x0, 0x6, 0x1ff, 0x1ffc0000, 0xfff, 0x0, 0x79, 0x0, 0x10}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x9) tee(r3, r8, 0x20000000a, 0x0) sendfile(r2, r8, 0x0, 0x3) r9 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ftruncate(r9, 0x28530d) read$char_usb(r2, 0x0, 0x7ffffffff000) 04:23:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r6, r7, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:31 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x99ad) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000001680)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001640)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f0000000080)=""/196, 0xc4}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f00000003c0)=""/139, 0x8b}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/4096, 0x1000}], 0xa}, 0x0, 0x10000, 0x1}, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000016c0)='./file1\x00', &(0x7f0000001700)={0x0, 0x8, 0x10}, 0x18) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001740)={0x2, 0x8001, 0x3, 0x7, 0x8}) r4 = gettid() tgkill(r0, r4, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000001780), &(0x7f00000017c0)='system_u:object_r:var_lock_t:s0\x00', 0x20, 0x0) 04:23:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r3, 0x1, r4, 0x8000, 0x80000}) 04:23:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:23:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f00000013c0), 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:31 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f00000000c0)) 04:23:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:23:31 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:23:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = epoll_create1(0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r2}, 0x81, 0x1f, 0x81}) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:23:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:31 executing program 4: r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:23:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) r4 = dup3(r0, r2, 0x80000) write$bt_hci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="01950482b16d"], 0x6) [ 780.532005] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 780.533150] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 780.540351] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 780.541738] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 780.546616] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 780.548187] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 780.553150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 780.553998] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 781.758557] Bluetooth: hci0: command 0x0406 tx timeout [ 782.590568] Bluetooth: hci4: command 0x0406 tx timeout [ 782.591268] Bluetooth: hci6: command 0x0406 tx timeout [ 782.591942] Bluetooth: hci5: command 0x0406 tx timeout [ 783.806665] Bluetooth: hci0: command 0x0406 tx timeout [ 784.638602] Bluetooth: hci5: command 0x0406 tx timeout [ 784.639679] Bluetooth: hci6: command 0x0406 tx timeout [ 784.640681] Bluetooth: hci4: command 0x0406 tx timeout [ 785.855948] Bluetooth: hci0: command 0x0406 tx timeout [ 787.904544] Bluetooth: hci0: command 0x0406 tx timeout [ 789.953654] Bluetooth: hci0: command 0x0406 tx timeout 04:23:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:23:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_stored_link_key={{0xc0d, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20}}}, 0xb) 04:23:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfbc, 0x400000) write$P9_RWALK(r4, &(0x7f0000000100)={0x4a, 0x6f, 0x2, {0x5, [{0x20, 0x1, 0x5}, {0x10, 0x4, 0x1}, {0x8, 0x1, 0x3}, {0x2, 0x3, 0x6}, {0x4, 0x1, 0x2}]}}, 0x4a) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000080)={0x7, 'batadv0\x00', {0x8}, 0x5}) dup3(r0, r1, 0x0) tee(r0, r3, 0x0, 0x0) 04:23:43 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010400c24e00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = fsmount(r2, 0x1, 0x7b) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf25540000000c00990000800000330000000a00060008021100000100000a00060008021100000000000a0006000808000000714238acf59d5416021100000100000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a000600f8431100000000000a0006000802110000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000002c0)}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/216, 0xd8}, {0xffffffffffffffff}, {&(0x7f0000001540)=""/100, 0x64}], 0x6, &(0x7f0000001640)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x180}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1, &(0x7f0000002840)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002940)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/135, 0x87}], 0x1, &(0x7f0000002ac0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000002b40), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002bc0)=""/14, 0xe}, {&(0x7f0000002c00)=""/121, 0x79}, {&(0x7f0000002c80)=""/70, 0x46}, {&(0x7f0000002d00)=""/182, 0xb6}, {&(0x7f0000002dc0)=""/239, 0xef}, {&(0x7f0000002ec0)=""/85, 0x55}, {&(0x7f0000002f40)=""/97, 0x61}], 0x7, &(0x7f0000003040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000003200)=""/159, 0x9f}, {&(0x7f00000032c0)=""/182, 0xb6}, {&(0x7f0000003380)=""/110, 0x6e}, {&(0x7f0000003400)=""/21, 0x15}, {&(0x7f0000003440)=""/213, 0xd5}, {&(0x7f0000003540)=""/220, 0xdc}, {&(0x7f0000003640)=""/152, 0x98}, {&(0x7f0000003700)=""/115, 0x73}, {&(0x7f0000003780)=""/42, 0x2a}], 0x9, &(0x7f0000003880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x5, 0x80012005, &(0x7f0000003a40)={0x77359400}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r3) fcntl$getownex(r6, 0x10, &(0x7f0000003cc0)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000003d00)={{0x1, 0x1, 0x18, r5}, './file0/../file0\x00'}) perf_event_open(&(0x7f0000003c40)={0x5, 0x80, 0x8, 0x4, 0x5, 0x3f, 0x0, 0x1ff, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x100, 0x9, 0x4, 0x4, 0x6, 0x8, 0x3, 0x0, 0x2, 0x0, 0x1ff}, r9, 0xe, r10, 0x75ae2bcdc8ac16ee) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000003c00)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x3c, r8, 0x4, 0x70bd28, 0x25dfdc01, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000c014}, 0x4000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r11, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r12, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x8001) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d80)={0x34, r12, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc93, 0x5d}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) r13 = gettid() r14 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x80180, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r14, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x30}}, './file0\x00'}) tgkill(r1, r13, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0xff, 0x6, 0x8, 0x1, 0x0, 0x180, 0x80808, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5b91, 0x2, @perf_config_ext={0x1, 0x80000001}, 0x7000, 0x9, 0x16369b06, 0x7, 0x7fff, 0x7, 0xea85, 0x0, 0xca5, 0x0, 0x3}, r13, 0xd, r3, 0x1) 04:23:43 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, 0x0) 04:23:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:23:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:43 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, 0x0) 04:23:43 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup3(r1, r2, 0x0) tee(r1, r4, 0x0, 0x0) r6 = accept(r5, &(0x7f0000000100)=@alg, &(0x7f0000000000)=0x80) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x810, r6, 0x41a4000) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_rr_get_interval(r7, &(0x7f0000000180)) 04:23:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:23:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x9, 0xe, 0x4, 0xdd, 0x0, 0x7fffffff, 0x10002, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040)}, 0x20, 0x6af3, 0x1, 0x7, 0x9, 0x2, 0x4, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0xa, r3, 0xb) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:23:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r3, r4, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000080)=@ax25={{0x3, @null}, [@netrom, @rose, @bcast, @remote, @null, @netrom, @default, @netrom]}, 0x80, &(0x7f00000005c0)=[{}, {&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f0000000300)=""/197, 0xc5}, {&(0x7f0000000400)=""/184, 0xb8}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000580)=""/56, 0x38}], 0x7}, 0x7c9}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/5, 0x5}], 0x1, &(0x7f0000000740)=""/122, 0x7a}, 0x1}, {{&(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/213, 0xd5}, {&(0x7f0000000940)=""/143, 0x8f}], 0x2, &(0x7f0000000a40)=""/78, 0x4e}, 0x6}], 0x3, 0x23, &(0x7f0000000bc0)={r3, r4+10000000}) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:23:43 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x24, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x90) sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="866369ed15bf111db3222862d749dac5bfd1325d", 0x14}, {&(0x7f00000001c0)="4150fbb84c8ccf532ef9cc28fdaf31f0dbee28b8", 0x14}], 0x2}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:23:43 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = epoll_create1(0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{r2}, 0x81, 0x1f, 0x81}) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:23:43 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000017c0)=0x0, &(0x7f0000001800), &(0x7f0000001840)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='./binderfs/binder-control\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) r8 = creat(&(0x7f00000018c0)='./file0\x00', 0x20) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001900), 0x200001, 0x0) r10 = syz_mount_image$nfs(&(0x7f0000001940), &(0x7f0000001980)='./file0\x00', 0x3, 0x2, &(0x7f0000001b80)=[{&(0x7f00000019c0)="3c8903f7911f9c63852542898d88251863cd5ef438285cf1d3cde3e36a4383a8e111fc27f0a70efcc441fa76418aff7a853b69d02f32b3150faa9679103b40184a832d7508613c86aaef5270bcb46c47923a1d5e28d3ed9a1bd3a8c7ae8dc5a93c5af416de7a526df97a8f5fc6a4a84fd12ca3763d5cca6c54abe3f1470a900716b514d92d3e93d13f389979454d41035912fc8f8e982db5e550d8ad3700db43fec4e2f33d43ebd058210a7c39119a85c66209b16fe03796c51af951b88adadb76e34e039b93b767", 0xc8, 0xb38}, {&(0x7f0000001ac0)="986fb0b833ca3ce6f5e3dc86a0ce151ad6b50b7ff9b6d567dd917f4427fb3de30a0c0797e4f91df6b84e07993446781796b83f03cbeb24f899dbd6f7a1a67c09e93c064e3ad7c7f61200bfb74aa2ce944dad509b2d3258601c398ac6c59d52cb9444e967781ed1cf8b14a7ceda98891b98d510653fa3a07914577d48301bea0d8ce5c10b18f5", 0x86, 0x800}], 0x10808, &(0x7f0000001bc0)={[{']$\\$'}, {'*(*%.+'}, {']&&'}, {'.'}, {')'}], [{@dont_appraise}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, ']'}}, {@dont_appraise}, {@uid_lt={'uid<', 0xee01}}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r11, r12, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001480)=@proc={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc, &(0x7f0000001580)=[{&(0x7f0000001540)={0x20, 0x16, 0x1, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x2c, 0x0, 0x0, @fd}, @typed={0x7, 0x1d, 0x0, 0x0, @str='$]\x00'}]}, 0x20}, {&(0x7f0000001700)={0xa0, 0x11, 0x200, 0xbdfc, 0x25dfdbfc, "", [@generic="f33a746a9b99edc0edf750640a0ab9b540fcf0167522e8dba50bb9d337cf084d4e0b2cb09e3c9ee5c788c25ae2b3deb46ccccd020772f683db62a93528c75323a137a0d9d59118b39332efcfd671b8296ef9b282035ab7e808158da089d0b6f1e143a555e4d1af6e18c5caf4320ec3a974", @typed={0x8, 0x7a, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x5e, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x0, 0x0, 0x0, @str='&/.\x00'}]}, 0xa0}], 0x2, &(0x7f0000001c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r0, r4, r0, r0, r5, r0, r7, r0, r8]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r0, r9, r10, r12]}}], 0x90, 0x4008000}, 0x0) r13 = getpgrp(0x0) process_vm_writev(r13, &(0x7f0000001640)=[{&(0x7f0000000000)=""/126, 0xcd}, {&(0x7f0000000080)=""/80, 0x50}, {&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f00000015c0)=""/65, 0x41}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/61, 0x46}], 0x9, &(0x7f0000001500)=[{&(0x7f0000000200)=""/82, 0x47}], 0x1, 0x0) r14 = gettid() tgkill(r13, r14, 0x0) [ 791.624097] loop4: detected capacity change from 0 to 11 [ 791.627123] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 791.639568] loop4: detected capacity change from 0 to 11 [ 791.640674] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 792.453101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 792.457612] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 792.460094] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 792.461328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 793.662643] Bluetooth: hci0: command 0x0406 tx timeout [ 794.494609] Bluetooth: hci4: command 0x0406 tx timeout [ 794.494672] Bluetooth: hci6: command 0x0406 tx timeout [ 794.495835] Bluetooth: hci5: command 0x0406 tx timeout [ 795.710595] Bluetooth: hci0: command 0x0406 tx timeout [ 797.758598] Bluetooth: hci0: command 0x0406 tx timeout [ 799.806633] Bluetooth: hci0: command 0x0406 tx timeout [ 801.854548] Bluetooth: hci0: command 0x0406 tx timeout 04:23:53 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, 0x0) 04:23:53 executing program 6: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) 04:23:53 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) tee(0xffffffffffffffff, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r10, r11, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r12, r13, 0x0) tee(r12, r14, 0x20000000a, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4, 0xffffffffffffffff, r6, r9, r4, r0, r11, r12, r2], 0x9) tee(r1, r4, 0x0, 0x0) 04:23:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000040)=0x100, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r3, 0x0, 0x7ffffffff000) 04:23:53 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000000200)=""/221, 0xdd}], 0x2, &(0x7f00000003c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xe8}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x5, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000940)=""/236, 0xec}, {&(0x7f0000000a40)=""/191, 0xbf}, {&(0x7f0000000b00)=""/197, 0xc5}, {&(0x7f0000000c00)=""/14, 0xe}, {&(0x7f0000000c40)=""/179, 0xb3}, {&(0x7f0000000d00)=""/253, 0xfd}, {&(0x7f0000000e00)=""/248, 0xf8}], 0x7, &(0x7f0000000f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001040)=""/225, 0xe1}, {&(0x7f0000001140)=""/233, 0xe9}, {&(0x7f0000001240)=""/35, 0x23}, {&(0x7f0000001280)=""/161, 0xa1}], 0x4, &(0x7f00000046c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002400)=@abs, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/52, 0x34}, {&(0x7f00000034c0)=""/52, 0x34}, {&(0x7f0000003500)=""/167, 0xa7}, {&(0x7f00000035c0)=""/35, 0x23}, {&(0x7f0000003600)=""/81, 0x51}, {&(0x7f0000003680)=""/15, 0xf}], 0x7, &(0x7f0000004700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000e6b4d8103f0efa28b688970402e84b84dccce340e3c0d284bebaac4898ef05cbfbec86c4d163c1cfc2b8f0401345a2adc4466618db80d3eec5b94b6ae523cf0d11c0c68e1a7691a3fae65c8bd1d54246145f9f547655413b276a59c690db88908ff93de5225bc48c6e95e78783680c360b0d34cb78a550115f6cefb841698f53bbf1ca49e9c4831360b364ece391f90c706ac478a98adc68a5da935a0a6102a8d6d9d4634f98398ba0dcb042d075b931339fdd3195e6cfe38d6d6f1fe45521f1ee5ddb69d066ac2dd2303f518edca68c6592f1975cab"], 0x68}}, {{&(0x7f00000037c0), 0x6e, &(0x7f0000003900)=[{&(0x7f0000003840)=""/146, 0x92}], 0x1, &(0x7f0000003940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000003a00)=@abs, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003a80)=""/61, 0x3d}, {&(0x7f0000003ac0)=""/115, 0x73}, {&(0x7f0000003b40)=""/32, 0x20}, {&(0x7f0000003b80)=""/13, 0xd}, {&(0x7f0000003bc0)=""/67, 0x43}, {&(0x7f0000003c40)=""/218, 0xda}], 0x6, &(0x7f0000003dc0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003ec0), 0x6e, &(0x7f00000042c0)=[{&(0x7f0000003f40)=""/112, 0x70}, {&(0x7f0000003fc0)=""/255, 0xff}, {&(0x7f00000040c0)=""/4, 0x4}, {&(0x7f0000004100)=""/134, 0x86}, {&(0x7f00000041c0)=""/220, 0xdc}], 0x5, &(0x7f0000004340)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x8, 0x2, &(0x7f0000004600)={0x0, 0x3938700}) rt_tgsigqueueinfo(r0, r1, 0x3c, &(0x7f0000004640)={0x23, 0x800, 0x7d87}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000003740), &(0x7f0000001380)=0x6e) tee(r2, 0xffffffffffffffff, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r5) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r6) r7 = gettid() tgkill(r0, r7, 0x0) 04:23:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = io_uring_setup(0x4c2d, &(0x7f0000000080)={0x0, 0x37cc, 0x8, 0x3, 0x1a0, 0x0, r1}) dup3(r6, r7, 0x0) tee(r0, r6, 0x20000000a, 0x6) ioctl$sock_bt_hci(r5, 0x800448f0, &(0x7f0000000000)="6c52edd6d3cc1b08e0f42700c15a9ea0edc5cbe92a5e7813d72e6b9b374bb66748472c55bdf1d1ea1ef347a884") 04:23:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f00000013c0), 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:23:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:23:54 executing program 6: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) 04:23:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) pipe2$9p(&(0x7f0000000040), 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) [ 803.902600] Bluetooth: hci0: command 0x0406 tx timeout [ 805.950612] Bluetooth: hci0: command 0x0406 tx timeout [ 807.998611] Bluetooth: hci0: command 0x0406 tx timeout [ 810.046592] Bluetooth: hci0: command 0x0406 tx timeout [ 812.094594] Bluetooth: hci0: command 0x0406 tx timeout 04:24:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000f6af19a2e81b53cacf761be27014c65b333ac1e2d86828c7c2f480ae6db04f39b345e68fca968031103a3902a9ecaa4fc60ff5835f2b516898dcfb59594b4c21d0721b18eeba38bc5bb24a29215ed5e67ceb94fae16018df52c9f05fa5a13edd1c43022c762aaa64d95608aca82c1c00aa9a222d15862f8f7ecdc3a9b73dc8e493cdf0ce4ba52229635112", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r5, 0x0, 0xc) write$bt_hci(r4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5], 0x6) 04:24:05 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 1) 04:24:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x41, 0x6, 0x9, 0x0, 0x4, 0x2, 0x12, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x846, 0xfffffffffffeffff, 0xa32, 0x4, 0x8, 0x400, 0x4, 0x0, 0x9, 0x0, 0x401}, r2, 0x8, r0, 0x2) tgkill(r1, r2, 0x0) 04:24:05 executing program 6: setrlimit(0x9, &(0x7f0000000100)) setrlimit(0x7, &(0x7f0000000140)={0xfffffffffffffff8, 0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x2, &(0x7f0000000080)={0x3, 0x80000001}) io_setup(0x200, &(0x7f00000000c0)) 04:24:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:05 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000100)={0x0, 0x3ff, 0x0, [0xa0000000000000, 0x5, 0x9, 0x100000001, 0x9], [0x5, 0x0, 0x1, 0x8000, 0x4, 0x4, 0x101, 0xfffffffffffffffe, 0x8, 0x7fff, 0x80000000, 0x0, 0xfffffffffffffd64, 0x101, 0x8001, 0x7000000000000000, 0x81, 0xb44, 0x1, 0x80, 0x4, 0x4, 0xf85d, 0x7f, 0xa8, 0x7, 0x87f, 0x6, 0x2, 0x401, 0x7fffffff, 0x1000, 0x3, 0xfffffffffffffffb, 0x81, 0x10000, 0x3, 0x4, 0x2, 0x10001, 0x8, 0xffffffff, 0xfffffffffffff8d1, 0x0, 0x40, 0x4, 0x8, 0x5, 0x97e9, 0x401, 0xffffffffffffffff, 0x4, 0x3f, 0xbda, 0x3ff, 0x1, 0x8, 0x7, 0x100000001, 0xb1, 0x8001, 0x80, 0x8000, 0x1, 0x8, 0x200000000000000, 0xffffffffffffffff, 0x6, 0x800, 0xafb, 0x6, 0x3f, 0xb8, 0x5, 0x1ff, 0x0, 0xffffffffffff0000, 0xa7, 0x4, 0x510a, 0x5, 0x4, 0x5, 0x0, 0x4, 0x9, 0xfff, 0x9, 0x5a, 0x4, 0xe4, 0x3, 0x10000, 0x0, 0x6, 0x10001, 0xffff, 0x3ff, 0x80, 0x200, 0x401, 0x6, 0x9, 0x10001, 0x800000000, 0x4, 0xffffffffffffffff, 0x3, 0xb4f9, 0x8, 0x80000000, 0x7, 0x40, 0x7, 0xd, 0x6, 0x100000001, 0x800, 0x7fff, 0x2, 0x200]}) fcntl$getflags(r1, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x0, 0x0) 04:24:05 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000005000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x200}}, './file0\x00'}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005140)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)=[{&(0x7f0000005180)={0x1474, 0x34, 0xcc83456979dd7036, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@empty}, @generic="2a8a8171c0bc29d2aa8e59670597b8220dbc3a9cb3a183f8a8ff5bf3c8c84ba0b7475a104d75d6b36a3b2d888ba15a531da21b28fe647f531324855fab1fb9f312208ecc8d5b993eca4db92b6a2a7e191d92f3af8efba4b61238b0b478269595fd44f8f7ae7a3b458b99be", @nested={0xac, 0x41, 0x0, 0x1, [@generic="69f1035f49ec73c8e10b4587f6ebc53fbf465d469a908772f67ca0f73540c60ffa46e61c4c5545e526d153c66bc7ad1e6226ddb8ed663c3c02636d72759ede6bdfe1", @typed={0x4, 0x1a}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}, @generic="b06c84d009a1db8f138644637aa5a19283528b7e054cd8cc1fea96ba712af73395b125fb5435c0c9cf2c0fafa2e48efe59cc9a33793c71e94df8e697ffc2e967a118084c8e45569a557e", @typed={0xd, 0x8a, 0x0, 0x0, @str='/dev/bsg\x00'}]}, @nested={0x12f2, 0x4a, 0x0, 0x1, [@generic="4e0d0b25589584d2382f1eb7160d4508d296b6", @generic="d87a19ead54acbef5ab86f6588481129848809480ab5d9214911bebda8de0b65dd4475f1b9eeef6b5c8946a563386d3a6cba022f756a63cf4956ee1326e92a0d1c75ed5a8c309860ece132b6df2a0fec9a08d2b6476d07ff47c2cf420e4291e43911bc93d086186f908c78344f3e07f2d5337f10861b48a91adbd2614b37a6a3e8b84fe1f6c4121ded82ab286da5334b47044c2a91388ba36de1fb117ddee86bde473f37f5", @generic="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", @typed={0x76, 0x90, 0x0, 0x0, @binary="5e2cd7b36538383eb9048fa6b3b79a941b39ecd7759a428dd0cfbe8072647fed77a53d3d32a1d5987a4624ab807aaec0127968da3a53343de1c58725923b715d3db3f9a41ceac635b9651c15b4898427af8a83938c947831a0954db6758791353b337a0f94ec1798ce6a8cf328320aa21333"}, @generic="ba19aa81200ed8315144eee3b2c5648c8d3bf17bb9aa763bc0de6fa83e4c08d19595bff13fff4fd0d67eef5f8561ae8d6262b30e9ab370e320f94b94369e27cdb0e6b42c81cbed3f219dafcc313316e3633d2d712acfcb41c50ab253478b1cd47fe872a1b4d5c821e3af6ce596c4c4e11ec308c9898724d8f6a8f34f11eba5f1bf28a4aedc1141e560f98f0685f107c0ffee3fc083afecf23126b636eab2d236f7cf7505ba01c5a5b973ce71aaaeca6144e7dd048845fb36090d4b15b84b8babe346357f63f0e0370823a3ed63439c3ef2bbe7d03751f81a3c4819d6e892db8024a8d1799ffa", @generic="1cc4ef4d8ec3ed9c0465970c639ab71f654096858146a4c867ca79d55ae8eacc231f7ffb655b9254c219f243ef50e773e32828f56f583413a5aa810832dfc579c8d145dbbd5c8fecde3fd9cd11619a087d21d718d442a552747fa09146dcde", @typed={0x8, 0x65, 0x0, 0x0, @u32=0x3ff}, @generic="6b0cefb8258420fac8fb920b2221a32bba76576ec3047e0f0d69a56353df588e3f94b75e75e0db5c5918257444046ee717e84a2be543fe9a7a04604b6cda8d32a4d869a00f6db03460706121f39bb12cae681c1aed8f5db1ed417cece397e0570dc39ae161b5867daca5d08d8403416d99"]}, @generic="8d2003e923df5bcb52527d00caa2c554e5c3574713fc7e0f20d09584b34f8430398e4a214cf43a8a90a372375b1ac1eaed124bf3831afb6335fd59d32fa23d57dbe7ab2db54d8e9a6d874512bba411"]}, 0x1474}, {&(0x7f00000003c0)={0x368, 0x31, 0x2, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x101, 0x88, 0x0, 0x1, [@generic="38e36983d1b0bdab30e6ae2eaf0bedbb5379fdf948e034df2f973589d901b3606eabfc4f0c17600203cee0e4e894c3d841071ca1f66a6d0f944b407a1170087ba295b5c7cfff57670febd99ca110189e0ea315071597113a3d7b76267a14743b26ce012d518ebca16526d3d1f0e8d1795ca4392c87a3abeb3cab56a24ec4dc96eee65f59f2a64819c09c7281fc7929644cd213526c408b257541d8f57efd4ae631e256c864fab80a86f5de48bdefbd9fe954f2607a995e0d1df7c35a1fa8725cbec206fd07206c753cd4bb231e0622609d6f6d95f83fab", @generic="d08ad6b3446fd8ee3bc8ba6ba8595a3a74b8ab14eca9eb9c428b018bd1a119fb1766020e1912"]}, @nested={0x24, 0x90, 0x0, 0x1, [@typed={0xc, 0x41, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}}]}, @nested={0x180, 0x2, 0x0, 0x1, [@generic="724694ed32ad7cc29d1552c035e3ce5a7a315e137466492f3ba4733810649ccd6c7830df9bd7d9ddd3dadad4aa9468dd04936aa8a9a901174ee17430907cdf09ace14a4c62f82ca119f3e40629c30774005de4c1711b3f3ed76e8ecfc62578c12cd9aff69b1093ec06154ce77aa54b09c96f42e0", @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x8a, 0x0, 0x0, @uid}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0xff}, @typed={0xe8, 0x5c, 0x0, 0x0, @binary="19cfd8e489ed11b4312af6043f34cfceae3cfdf4b93aca77ac536cbf1dd0a7b5d9e084ef9cfc8f61f424f9ee7e39f6823d2c4ca7cd5a6eb512425663de11758658230ff337c3b896f4ccd18c83e29aed1ca59f8f6e51338be79ead6dbc771b53629ef9ad2b1b848015ebbfed9dec7c8256bfdccf5f5865d57f00caec1cd05e48cafae08e9cc6c1893866d7c05ff364d001079d46591dff62de1898a52a1607e3ad4fdf039fd178f4989ab31eae23c2f012d868e60695a27687fa0d6371fb83da2e7040f9e308a9850c7188370e0a2d6ee077d9f2d40f71464643974e7ba670c946fc4dc1"}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0x800}]}, @generic="6e15760bfe557029c9cf5703a0fd6b4dbb035a2165e4ec56f7a6aa9e2c107ab005c03a1c3234067708319d361766e045589c14933bb1728f793444c82a089b39f08bfc83864896c37b1693c84b7d05cfaa85d7ea46b43ba0d2cc6953b696f1aa7cf27bad3c5ad6b139167198fc13df4b73e3528a16bb73365a35a0879ef6f7188c42dc4fe58aca9d93e7a3acb4ca588c089744cfc7025dd7a546fd61eeb3efed6e609a050004c07e179ed33153"]}, 0x368}, {&(0x7f00000025c0)={0x11bc, 0x33, 0x1, 0x0, 0x25dfdbfb, "", [@typed={0x4, 0x1e}, @nested={0x1154, 0x5e, 0x0, 0x1, [@generic="8f991d469ecebd484059526dc96a9dacabad081fe30dc86123c201528d5b02366ceec0300b1995bd4d7d1dde9a3d603b38172e3b8467ef1f6bc105524b931a06029365f2a50e73f8e5f4194cc9698f5109e4fea4c362305170fc1797099256770df81c0932253c", @generic="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", @generic="1313a95892d1449591c9aed40e2b4589660cd84a33664a6553158a287b816d303687772716e9c6e581681cdf2a97648730ff8a16a6632fc3c04b014415bec5d51d9a6b7127d4e3952aee0f01cc791dac37915955492ce3bb691e295a9ff2706915d24ab754ac1201d15f2b67d1b43664d2c36ed5ff86b17f858ff6e26b84599ddf39b1d9d70033c455d675ddbaf4ed750094aece7e64fa0e88", @generic="c02ec60cf3758c55aaf5339c5eadeb926df0e9c04d1a1fd21e28fafef60b8edc70e2e1f80463f71194de088b0ff10b7f2cfcc90fd9455a714b0e74ba549d6b87d9724c78037c424916539fd01a81ca80"]}, @typed={0xc, 0x6e, 0x0, 0x0, @u64}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r1}, @nested={0x40, 0x3a, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @pid}, @typed={0xd, 0x2c, 0x0, 0x0, @str='/dev/bsg\x00'}, @typed={0x8, 0x47, 0x0, 0x0, @uid=0xee01}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0x29, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x1d, 0x0, 0x0, @fd=r1}]}]}, 0x11bc}, {&(0x7f0000000300)={0x40, 0x25, 0x4, 0x70bd2c, 0x25dfdbfd, "", [@generic="74db1086f4ae153d91357e44285c9b1ab8a75c9cacb9c55e17b51201b0fe3bf4f6a842cb72ae92fecabe310adc1e11a8"]}, 0x40}], 0x4, &(0x7f0000005040)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x18, 0x1, 0x1, [r4, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r1, r5, r8, r1, r9]}}], 0xd8, 0x10}, 0x20000015) read$char_usb(r1, 0x0, 0x7ffffffff000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r10, r11, 0x0) tee(r10, r12, 0x20000000a, 0x0) dup(r12) [ 813.434319] FAULT_INJECTION: forcing a failure. [ 813.434319] name failslab, interval 1, probability 0, space 0, times 0 [ 813.435299] CPU: 0 UID: 0 PID: 7763 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 813.435315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.435322] Call Trace: [ 813.435326] [ 813.435330] dump_stack_lvl+0xfa/0x120 [ 813.435348] should_fail_ex+0x4d7/0x5e0 [ 813.435364] ? ioctx_alloc+0x150/0x1e10 [ 813.435380] should_failslab+0xc2/0x120 [ 813.435398] kmem_cache_alloc_noprof+0x80/0x690 [ 813.435422] ? ioctx_alloc+0x150/0x1e10 [ 813.435437] ioctx_alloc+0x150/0x1e10 [ 813.435456] ? lock_acquire+0x15e/0x2f0 [ 813.435478] ? __might_fault+0xe0/0x190 [ 813.435491] ? find_held_lock+0x2b/0x80 [ 813.435503] ? __pfx_ioctx_alloc+0x10/0x10 [ 813.435518] ? lock_release+0xc8/0x290 [ 813.435534] ? __might_fault+0xe0/0x190 [ 813.435549] __x64_sys_io_setup+0xc8/0x1f0 [ 813.435567] do_syscall_64+0xbf/0x390 [ 813.435583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.435595] RIP: 0033:0x7f4e76c30b19 [ 813.435604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.435615] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 813.435626] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 813.435634] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 813.435641] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 813.435648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.435654] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 813.435672] 04:24:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000080)=0xe, 0x800) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:05 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x1f0e) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x2, 0x6, 0x45, 0x0, 0x4, 0x48180, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0xf73e561e2ba978c2, @perf_config_ext={0x40, 0x6c}, 0x1d8ec0a0dec6e6c9, 0x105, 0x3, 0x4, 0x3, 0x7, 0x6, 0x0, 0xffff, 0x0, 0x219}, 0x0, 0xd, r0, 0x0) tgkill(r1, r2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000180)="1bb56199b846b9f7b1884ee3069ab741dd7793043d2d7044d300c08a2308788b45eb62c33cea1f6608f13cf4ff8f4898d6a5ed1e0519ebf080d4d576042f7730b70b312053e89b030819002c862bca61d38f631087c23fab5fd296e459a142ee28caf9efb5edd3b43b79c64879eeeba74572feb347728ebb56acce04a2", 0xd03, 0x0, 0x0, {0x2}}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r6, 0x0) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f0000000240)) tee(r5, r8, 0x20000000a, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x7, 0x7, 0x4, 0x0, 0x400, 0x80100, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x1, 0x4e068b95, 0x6, 0xfffffffffffffffd, 0x9, 0x3, 0x0, 0x4, 0x0, 0x3}, r4, 0xd, r8, 0x3) 04:24:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:05 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 2) 04:24:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) (fail_nth: 1) [ 813.714966] FAULT_INJECTION: forcing a failure. [ 813.714966] name failslab, interval 1, probability 0, space 0, times 0 [ 813.716798] CPU: 1 UID: 0 PID: 7790 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 813.716829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 813.716842] Call Trace: [ 813.716849] [ 813.716857] dump_stack_lvl+0xfa/0x120 [ 813.716889] should_fail_ex+0x4d7/0x5e0 [ 813.716918] should_failslab+0xc2/0x120 [ 813.716951] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 813.716991] ? __alloc_skb+0x2ab/0x370 [ 813.717023] ? kasan_unpoison+0x27/0x60 [ 813.717056] ? __alloc_skb+0x2ab/0x370 [ 813.717085] __alloc_skb+0x2ab/0x370 [ 813.717116] ? __pfx___alloc_skb+0x10/0x10 [ 813.717163] alloc_skb_with_frags+0x8f/0x7c0 [ 813.717190] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 813.717229] sock_alloc_send_pskb+0x7cb/0x950 [ 813.717260] ? lock_acquire+0x15e/0x2f0 [ 813.717291] ? avc_has_perm_noaudit+0x59/0x3d0 [ 813.717327] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 813.717364] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 813.717400] ? avc_has_perm_noaudit+0x150/0x3d0 [ 813.717438] ? sock_has_perm+0x21c/0x2b0 [ 813.717479] ? __pfx_sock_has_perm+0x10/0x10 [ 813.717516] hci_sock_sendmsg+0x190/0x2270 [ 813.717545] ? __lock_acquire+0x694/0x1b70 [ 813.717578] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 813.717615] sock_write_iter+0x57e/0x610 [ 813.717643] ? __pfx_sock_write_iter+0x10/0x10 [ 813.717665] ? lock_release+0xc8/0x290 [ 813.717709] ? security_file_permission+0x22/0x90 [ 813.717744] vfs_write+0xbe9/0x1150 [ 813.717773] ? __pfx_sock_write_iter+0x10/0x10 [ 813.717797] ? __fget_files+0x34/0x3b0 [ 813.717822] ? __pfx_vfs_write+0x10/0x10 [ 813.717872] ksys_write+0x1ef/0x240 [ 813.717897] ? __pfx_ksys_write+0x10/0x10 [ 813.717934] do_syscall_64+0xbf/0x390 [ 813.717962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.717985] RIP: 0033:0x7f7650c74b19 [ 813.718001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 813.718022] RSP: 002b:00007f764e1ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.718043] RAX: ffffffffffffffda RBX: 00007f7650d87f60 RCX: 00007f7650c74b19 [ 813.718057] RDX: 0000000000000178 RSI: 0000000020000040 RDI: 0000000000000003 [ 813.718070] RBP: 00007f764e1ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 813.718083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.718096] R13: 00007ffcd292a66f R14: 00007f764e1ea300 R15: 0000000000022000 [ 813.718128] [ 814.142567] Bluetooth: hci0: command 0x0406 tx timeout [ 816.190602] Bluetooth: hci0: command 0x0406 tx timeout [ 818.238643] Bluetooth: hci0: command 0x0406 tx timeout [ 820.286602] Bluetooth: hci0: command 0x0406 tx timeout [ 822.334584] Bluetooth: hci0: command 0x0406 tx timeout 04:24:15 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) (fail_nth: 2) 04:24:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x5812c1, 0x0) socket$netlink(0x10, 0x3, 0x15) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) rt_tgsigqueueinfo(r6, r1, 0x22, &(0x7f00000000c0)={0xd, 0xe5, 0x676eb5b0}) r7 = pidfd_open(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000300)={0x10000000}) waitid(0x0, r0, &(0x7f00000001c0), 0x80000000, &(0x7f0000000240)) getpgrp(r6) tgkill(r0, r1, 0x0) 04:24:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x4}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) write$bt_hci(r4, &(0x7f0000000000)={0x1, @le_create_conn={{0x200d, 0x19}, {0xfffc, 0x3f, 0xff, 0x3, @any, 0xf7, 0x6, 0x9, 0x4, 0x4, 0x7dd, 0x5c6b}}}, 0x1d) r5 = dup3(r0, r1, 0x0) write$bt_hci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="013e12b0ff20"], 0x6) 04:24:15 executing program 1: ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x8, 0x3}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0900001ff0d4dc4e608c47b3000000ffa1c112e1a9ec77461063df842dff733c4aa06582a6d0c5b76772ba25f3b7a0ad1f898947c3fac48d8b261ebecc83df516e23b7469e975acf08838441160ee0a35ed54ffc185d30a4c090086324632e90074e470ff025846f2fd471a3492d18cdf1804f174a12d8f98a78b4e2f65eb2e1a76807ff45a2fb3a0673f18cfb2b6dccc631e3917a924ed228a1b50e7d6ec219f40aab2231075767580962001b549e0000000000000000"]) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f00000000c0)={0x3, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) 04:24:15 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 3) 04:24:15 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0xfffffff9}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = fcntl$dupfd(r2, 0x406, r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)) dup3(r1, r2, 0x0) tee(r1, r4, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000000)={r9, 0x2, r2, 0xff}) 04:24:15 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:16 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xf7, 0x9, 0x6, 0x8, 0x0, 0x80, 0x4012, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x4, @perf_config_ext={0x8, 0x5}, 0x6000, 0xc7, 0x7, 0x1, 0x3c, 0x7, 0x9, 0x0, 0x2, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x7f, 0x0, 0x91, 0x8, 0x0, 0x800, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5f52, 0x4, @perf_bp={&(0x7f0000000100), 0xf}, 0x1004, 0x20e, 0x9, 0x6, 0xd21, 0x23, 0x2, 0x0, 0x200, 0x0, 0x100000001}, r1, 0x3, r4, 0x9) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000240)=0x28, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x101) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ftruncate(r6, 0x0) read$char_usb(r6, 0x0, 0x7ffffffff000) 04:24:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:16 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 4) 04:24:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) (fail_nth: 3) 04:24:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000080)=0x400, 0x4) 04:24:16 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) [ 824.299192] FAULT_INJECTION: forcing a failure. [ 824.299192] name failslab, interval 1, probability 0, space 0, times 0 [ 824.300381] CPU: 0 UID: 0 PID: 7840 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 824.300397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 824.300404] Call Trace: [ 824.300409] [ 824.300413] dump_stack_lvl+0xfa/0x120 [ 824.300432] should_fail_ex+0x4d7/0x5e0 [ 824.300448] should_failslab+0xc2/0x120 [ 824.300469] __kmalloc_cache_noprof+0x81/0x6b0 [ 824.300490] ? percpu_ref_init+0xe1/0x400 [ 824.300511] ? percpu_ref_init+0xe1/0x400 [ 824.300526] ? __pfx_free_ioctx_users+0x10/0x10 [ 824.300542] percpu_ref_init+0xe1/0x400 [ 824.300557] ? __init_waitqueue_head+0xca/0x150 [ 824.300575] ioctx_alloc+0x27f/0x1e10 [ 824.300594] ? lock_acquire+0x15e/0x2f0 [ 824.300610] ? __might_fault+0xe0/0x190 [ 824.300623] ? find_held_lock+0x2b/0x80 [ 824.300635] ? __pfx_ioctx_alloc+0x10/0x10 [ 824.300651] ? lock_release+0xc8/0x290 [ 824.300666] ? __might_fault+0xe0/0x190 [ 824.300682] __x64_sys_io_setup+0xc8/0x1f0 [ 824.300700] do_syscall_64+0xbf/0x390 [ 824.300716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.300729] RIP: 0033:0x7f4e76c30b19 [ 824.300739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 824.300750] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 824.300761] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 824.300769] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 824.300776] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 824.300783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.300789] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 824.300807] 04:24:16 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0x0, 0x9, 0xaa, 0x5, 0x0, 0x7fff, 0x20, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0xffffffffffffff05}, 0x1, 0x8, 0xa3a, 0x2, 0xa2, 0x7, 0xfff, 0x0, 0x7, 0x0, 0x9}) read$char_usb(r1, 0x0, 0x7ffffffff000) 04:24:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) [ 824.382795] Bluetooth: hci0: command 0x0406 tx timeout [ 826.430576] Bluetooth: hci0: command 0x0406 tx timeout [ 828.478632] Bluetooth: hci0: command 0x0406 tx timeout [ 830.526600] Bluetooth: hci0: command 0x0406 tx timeout [ 832.574567] Bluetooth: hci0: command 0x0406 tx timeout 04:24:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) (fail_nth: 4) 04:24:24 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000100)=""/11, 0xb}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r2, 0x0, 0x7ffffffff000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x66, 0x3, 0x5, 0x9, 0x0, 0x401, 0x41010, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffd2e8, 0x4, @perf_bp={&(0x7f0000000040), 0x6}, 0x6400, 0x8, 0x7fa0370f, 0x5, 0x10001, 0x0, 0x3, 0x0, 0x80000000, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) 04:24:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:24 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 5) 04:24:24 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = getpid() tkill(r2, 0x14) tgkill(r0, r1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = fcntl$dupfd(r9, 0x406, r8) write$P9_RAUTH(r10, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x1, 0x4, 0x6}}, 0x14) dup3(r6, r7, 0x0) openat$cgroup_pressure(r9, &(0x7f0000000440)='io.pressure\x00', 0x2, 0x0) r11 = syz_open_dev$vcsa(&(0x7f0000000100), 0x7, 0x101000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0xb1, 0x81, 0xff, 0x0, 0x0, 0x12000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf78, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x1, 0x5, 0x1, 0x1, 0x8, 0x20, 0x162, 0x0, 0x3, 0x0, 0x1}, r2, 0x10, r11, 0x5) tee(r6, r9, 0x20000000a, 0x0) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020029bd7000fbdbdf25140000000c000600030000000000000008000300", @ANYRES32=r5, @ANYBLOB="08000100030000000800010001000000080001000100000008001d00f8d8774fbca0438a546f497cf738ecc4da257cbb713bd5d2a832ecadac7bec2157b65f2f9d9ed8caff766274be30b51282af5d6f33210e9832c34df709fd773350238768fd1ead54b4bb5569707f8d103260aa164422dde9933f8d5c5fc99da8fa39e0dbbcf65e4da12ce91775d04a13cbfb7c23277eab32ca2610e049b9a251f218c53c937f131e9ad03dd4ed2074a4d4b1154b695f4d14f0a615dc3f6e81e3c96237087ffcae9566558f0047e1116d268785a1dc8d251e9ae12020651191f42ae1db0cc86c5e226d56121ea1c73a1431f5", @ANYRES32=r9, @ANYBLOB="08001d00", @ANYRES32=r12, @ANYBLOB="0c0006000300000003000000"], 0x5c}}, 0x10) 04:24:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) recvmmsg$unix(r2, &(0x7f00000035c0)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000003740)=""/103, 0x67}, {&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000000380)=""/205, 0xcd}], 0x5, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xe8}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/123, 0x7b}], 0x2}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/128, 0x80}, {&(0x7f0000000940)=""/195, 0xc3}, {&(0x7f0000000a40)=""/239, 0xef}, {&(0x7f0000000b40)=""/33, 0x21}], 0x4, &(0x7f0000000bc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000300)=""/111, 0x6f}], 0x1, &(0x7f00000037c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000001f40)=""/178, 0xb2}, {&(0x7f0000002000)=""/136, 0x88}, {&(0x7f00000020c0)=""/189, 0xbd}, {&(0x7f0000002180)=""/207, 0xcf}, {&(0x7f0000002280)=""/105, 0x69}, {&(0x7f0000002300)=""/69, 0x45}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/121, 0x79}, {&(0x7f0000003400)=""/61, 0x9d}], 0x9, &(0x7f0000003500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x6, 0x40000043, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r12, r13, 0x0) tee(r12, r14, 0x20000000a, 0x0) clock_gettime(0x0, &(0x7f00000067c0)={0x0, 0x0}) recvmmsg$unix(r8, &(0x7f00000066c0)=[{{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000003900)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/14, 0xe}, {&(0x7f0000003a00)=""/142, 0x8e}, {&(0x7f0000000dc0)=""/97, 0x61}, {&(0x7f0000003ac0)=""/30, 0x1e}, {&(0x7f0000003b00)=""/142, 0x8e}, {&(0x7f0000003bc0)=""/17, 0x11}, {&(0x7f0000003c00)=""/179, 0xb3}], 0x8, &(0x7f0000003d40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003e40), 0x6e, &(0x7f0000005080)=[{&(0x7f0000003ec0)=""/4096, 0x1000}, {&(0x7f0000004ec0)=""/230, 0xe6}, {&(0x7f0000004fc0)=""/148, 0x94}], 0x3, &(0x7f00000050c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}}, {{&(0x7f0000005100), 0x6e, &(0x7f0000005340)=[{&(0x7f0000005180)=""/219, 0xdb}, {&(0x7f0000005280)=""/164, 0xa4}], 0x2}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/104, 0x68}, {&(0x7f0000006400)=""/170, 0xaa}, {&(0x7f00000064c0)=""/141, 0x8d}], 0x4, &(0x7f00000065c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}], 0x4, 0x10003, &(0x7f0000006800)={r15, r16+10000000}) stat(&(0x7f00000068c0)='./file1\x00', &(0x7f0000006900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r19, 0x0) sendmmsg$unix(r5, &(0x7f0000006a00)=[{{0x0, 0x0, &(0x7f0000000c80), 0x0, &(0x7f0000006980)=[@rights={{0x24, 0x1, 0x1, [r7, r3, r14, r4, r9]}}, @cred={{0x1c, 0x1, 0x2, {r17, r10, r18}}}, @cred={{0x1c, 0x1, 0x2, {r6, r19, r11}}}], 0x68, 0x48881}}], 0x1, 0x20000000) 04:24:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) r3 = openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x100, 0xa2}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r7 = ioctl$NS_GET_PARENT(r5, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r5, 0x4000}, {r7, 0x14a}, {r5, 0x80}, {r4, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = getpid() r10 = pidfd_open(r9, 0x0) copy_file_range(r10, 0x0, r8, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)={0x0}) r12 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x18, 0x1, 0x19e, 0x0, r5}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r12, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={r11, 0x2, r0, 0x20}) tee(r0, r2, 0x0, 0x0) 04:24:25 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) (fail_nth: 5) 04:24:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="f00f0000000000002e2f66696c653000"]) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/hid_samsung', 0x109081, 0xc1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x0, 0x0, {0xa, 0xd2}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000280)="37019e0e90b01046f59e28e0cf72d7db7ec38ee7d82dd0c25538fdbf1451fd36793512d9c5987d15e1cd9c1589e4aaff10292be3c35143874868c5219e55d891dbfc332c5e6ac5fb12b0dde039d990209503d9344c97f02afad32772c235a777c5694ea90049c4eed3b5c3166341b2cb13f34d4bba306812acca4abd158a29eed0556215695bec63e7f48792744a8ab8f0bc07567ab6750c029c4518503b27070cac694de107f5843d0f2d381e2c8d59d30e47c6935bc5c332a2883839c544b85cbc265718790993") write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xa) ioctl$sock_bt_hci(r1, 0x400448cc, &(0x7f0000000180)="085e865cada39fd5fac17f2ad2cc591f64d67a22dff103bebaa8d084cff53df8af0d12016edd8d94a015734c64ef04113663b1e9fae5d069bb494bda7a4e52f1b125e073a413cc48defbefbcb141b8393af2b1e7ec0e4b5621e61c1ae7e14f1f33064fc1d1e08a1f40a0875ba05b6809e85215711997bddbe520225df6347ab7298861e9a3fe0a39190638d219e689becf929f61bb049619be6c8e285ae05876d15681eb455fb42cc406fb62ddae65fe217db6b1f6895a47be34589438f2d2affd0f78dd1cf1b7f22d0d1b81b6ebec6b9f1dbca91344c5311e2d9f6f8a414bcfe82ae61ea875106f80f2cd65e703a6b334a6a2b00abfaa14fa") 04:24:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:25 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 6) [ 833.237044] FAULT_INJECTION: forcing a failure. [ 833.237044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.239011] CPU: 1 UID: 0 PID: 7882 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 833.239040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 833.239053] Call Trace: [ 833.239060] [ 833.239068] dump_stack_lvl+0xfa/0x120 [ 833.239096] should_fail_ex+0x4d7/0x5e0 [ 833.239124] _copy_from_iter+0x1dc/0x1660 [ 833.239148] ? lock_acquire+0x15e/0x2f0 [ 833.239178] ? __virt_addr_valid+0x1c6/0x5d0 [ 833.239201] ? find_held_lock+0x2b/0x80 [ 833.239225] ? __pfx__copy_from_iter+0x10/0x10 [ 833.239246] ? lock_release+0xc8/0x290 [ 833.239293] ? __virt_addr_valid+0x100/0x5d0 [ 833.239317] ? __check_object_size+0x579/0x880 [ 833.239346] hci_sock_sendmsg+0x402/0x2270 [ 833.239375] ? __lock_acquire+0x694/0x1b70 [ 833.239408] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 833.239446] sock_write_iter+0x57e/0x610 [ 833.239480] ? __pfx_sock_write_iter+0x10/0x10 [ 833.239503] ? lock_release+0xc8/0x290 [ 833.239547] ? security_file_permission+0x22/0x90 [ 833.239583] vfs_write+0xbe9/0x1150 [ 833.239610] ? __pfx_sock_write_iter+0x10/0x10 [ 833.239635] ? __fget_files+0x34/0x3b0 [ 833.239660] ? __pfx_vfs_write+0x10/0x10 [ 833.239710] ksys_write+0x1ef/0x240 [ 833.239736] ? __pfx_ksys_write+0x10/0x10 [ 833.239773] do_syscall_64+0xbf/0x390 [ 833.239801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.239823] RIP: 0033:0x7f7650c74b19 [ 833.239839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 833.239859] RSP: 002b:00007f764e1ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 833.239880] RAX: ffffffffffffffda RBX: 00007f7650d87f60 RCX: 00007f7650c74b19 [ 833.239894] RDX: 0000000000000178 RSI: 0000000020000040 RDI: 0000000000000003 [ 833.239907] RBP: 00007f764e1ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 833.239919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.239931] R13: 00007ffcd292a66f R14: 00007f764e1ea300 R15: 0000000000022000 [ 833.239963] 04:24:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1, 0x4, 0x90, 0xb8, 0x0, 0xff, 0x62100, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x44626e1d, 0x2, @perf_config_ext={0x101, 0x6}, 0xa00, 0x5, 0x0, 0x2, 0x5, 0x1ff, 0x1, 0x0, 0x9, 0x0, 0x1}, r2, 0x2, 0xffffffffffffffff, 0x1) read$char_usb(r0, &(0x7f00000000c0)=""/74, 0x4a) [ 834.622641] Bluetooth: hci0: command 0x0406 tx timeout [ 836.670581] Bluetooth: hci0: command 0x0406 tx timeout [ 838.718583] Bluetooth: hci0: command 0x0406 tx timeout [ 840.766569] Bluetooth: hci0: command 0x0406 tx timeout [ 842.814613] Bluetooth: hci0: command 0x0406 tx timeout [ 844.862575] Bluetooth: hci0: command 0x0406 tx timeout [ 846.910610] Bluetooth: hci0: command 0x0406 tx timeout 04:24:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:24:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:39 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 7) 04:24:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r3, 0x0, r6, 0x4, 0x80000}) 04:24:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) r5 = dup3(r3, r2, 0x80000) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x7, 0x1211c2) r7 = syz_open_dev$evdev(&(0x7f0000000140), 0xadc, 0x329000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r9, 0x20000000a, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r11, r12, 0x0) tee(r11, r13, 0x20000000a, 0x0) r14 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffff9, 0x901) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000340)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000002940)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x1534}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r0, r7, r8]}}, @rights={{0x2c, 0x1, 0x1, [r10, r0, r11, r1, r14, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee01}}}], 0x98, 0x8980}, 0x40800) tee(r1, r4, 0x0, 0x0) 04:24:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x428040, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) read$char_usb(r0, 0x0, 0x7ffffffff000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x3, 0x200, 0xfb5f, 0x4, 0x400, 0x2}) 04:24:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) (fail_nth: 6) [ 847.720234] FAULT_INJECTION: forcing a failure. [ 847.720234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.722025] CPU: 1 UID: 0 PID: 7904 Comm: syz-executor.6 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 847.722054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 847.722067] Call Trace: [ 847.722074] [ 847.722083] dump_stack_lvl+0xfa/0x120 [ 847.722112] should_fail_ex+0x4d7/0x5e0 [ 847.722141] _copy_to_user+0x32/0xd0 [ 847.722168] simple_read_from_buffer+0xe0/0x180 [ 847.722195] proc_fail_nth_read+0x18a/0x240 [ 847.722226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 847.722256] ? security_file_permission+0x22/0x90 [ 847.722288] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 847.722317] vfs_read+0x1eb/0xc70 [ 847.722351] ? __pfx_vfs_read+0x10/0x10 [ 847.722378] ? lock_release+0xc8/0x290 [ 847.722413] ? __fget_files+0x20d/0x3b0 [ 847.722451] ksys_read+0x121/0x240 [ 847.722483] ? __pfx_ksys_read+0x10/0x10 [ 847.722524] do_syscall_64+0xbf/0x390 [ 847.722553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.722576] RIP: 0033:0x7f7650c2769c [ 847.722592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 847.722612] RSP: 002b:00007f764e1ea170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 847.722633] RAX: ffffffffffffffda RBX: 0000000000000178 RCX: 00007f7650c2769c [ 847.722647] RDX: 000000000000000f RSI: 00007f764e1ea1e0 RDI: 0000000000000005 [ 847.722660] RBP: 00007f764e1ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 847.722673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.722685] R13: 00007ffcd292a66f R14: 00007f764e1ea300 R15: 0000000000022000 [ 847.722718] [ 847.743440] FAULT_INJECTION: forcing a failure. [ 847.743440] name failslab, interval 1, probability 0, space 0, times 0 [ 847.747164] CPU: 0 UID: 0 PID: 7912 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 847.747194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 847.747207] Call Trace: [ 847.747215] [ 847.747224] dump_stack_lvl+0xfa/0x120 [ 847.747255] should_fail_ex+0x4d7/0x5e0 [ 847.747285] should_failslab+0xc2/0x120 [ 847.747316] __kmalloc_cache_noprof+0x81/0x6b0 [ 847.747353] ? percpu_ref_init+0xe1/0x400 [ 847.747391] ? percpu_ref_init+0xe1/0x400 [ 847.747435] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 847.747484] percpu_ref_init+0xe1/0x400 [ 847.747528] ? __init_waitqueue_head+0xca/0x150 [ 847.747566] ioctx_alloc+0x368/0x1e10 [ 847.747603] ? lock_acquire+0x15e/0x2f0 [ 847.747632] ? __might_fault+0xe0/0x190 [ 847.747655] ? find_held_lock+0x2b/0x80 [ 847.747678] ? __pfx_ioctx_alloc+0x10/0x10 [ 847.747707] ? lock_release+0xc8/0x290 [ 847.747737] ? __might_fault+0xe0/0x190 [ 847.747766] __x64_sys_io_setup+0xc8/0x1f0 [ 847.747798] do_syscall_64+0xbf/0x390 [ 847.747827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.747850] RIP: 0033:0x7f4e76c30b19 [ 847.747866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 847.747886] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 847.747907] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 847.747921] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 847.747934] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 847.747947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.747959] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 847.747992] 04:24:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:24:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:39 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x6) 04:24:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:24:39 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 8) 04:24:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() r2 = gettid() getpgrp(r1) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) tgkill(r0, r2, 0x10) r5 = getpgrp(0x0) r6 = gettid() tgkill(r5, r6, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000000040)={0xe, 0x80, 0x0, 0x6, 0x6, 0x1f, 0x0, 0x4, 0x8014, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x8, 0x6, 0x3, 0x4, 0x2, 0x800, 0x81, 0x0, 0x7, 0x0, 0xffff}, r6, 0x5, r7, 0xf) 04:24:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:39 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:39 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000080)={0x51, 0x7d, 0x1, {0x0, 0x4a, 0x8001, 0x400, {0x4, 0x4}, 0x20010000, 0x343, 0x2, 0x4abd, 0x0, '', 0x8, 'pagemap\x00', 0x8, 'pagemap\x00', 0x7, '-!#@}!^'}}, 0x51) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0xa0667c585f08c50d, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r3, 0x0, 0x7ffffffff000) 04:24:40 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 9) 04:24:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04800200000110002e2f6669ec653100c24715e831250aa7b00086b114269a9e5d09138fda699354a873505cfd0eae25ff07ec0115cb19acbdba43601209494d32b5911f6d8c09ee77a98661e6838720918d689573c8a295ac3541e10523549e072bd3bea9d449125b82814dcb6ba208d77741909b20c4"]) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000014c0)={0x4, 0x0, "4062c8", 0x17, 0x3f}) r3 = memfd_create(&(0x7f0000000000)='*/^\\}!-($\x00', 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000080)={0x3, 0x3}) r4 = syz_mount_image$nfs4(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, 0x2, &(0x7f00000013c0)=[{&(0x7f0000000300)="08432c0fc5145f1d18e07544097f1e7474feb5af0fe11ea898d0eec58b2760bc99435046f9220ac513fcddff0549385f8f9e5a94ceb78d4ea215c6279f1d33c0af8912a9b33abe6293c6749e650d43693910e5549128d82ccb82360d59a3432a1449cdc28d90c63fbee9c986e49eb5e8e1ea133700b231906731ca0eb14005122b29fa6531ab5368a951676dcc4f1a99e2dcb8aec1", 0x95, 0x40}, {&(0x7f00000003c0)="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", 0x1000, 0x5}], 0x80080, &(0x7f0000001400)=ANY=[@ANYBLOB="2c5c2c232c2a2f5e6c7d212d2824002ce26a641c", @ANYRESDEC=0x0, @ANYBLOB='.\x00']) r5 = dup3(r4, r2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) ioctl$sock_bt_hci(r9, 0x400448e1, &(0x7f0000001500)="0b21607cbf483a7780e9c506fa1f558b1199d0a2e891f28a1e0b4e75f7c410c4cdc0a4903565e3cf676a71799a43b5e482c303dec4eb1c0ed109fb13683c5184d90db2fbcbd8b3d6db70d9d3e75843c65f06c8e6bec374fc592bf15598c1568fe1a8ba3fcdafc7fe92c8f3c4835a2eb827466111414a73146cf89114212d42702c3a9607b29c2a22936c86f9b6f813f602ec783f8fe7fc0004a054f671de799a961d84f2ef3c661db4e01af5859862ad8b2f0d83fd758a4f24235145349f6699bba2bacbd1bafd6d9a2ce47886ec821dfcba2435795378eab97f9cd2fc993a4e0c226bf26d35d64f0ef84b7da85eaf69acb59594cc033ab9ee67b74e4ec65060afb3d5635f687cdfd3bc857e86958b01688676de79bbbc3059bb09ae4f9332b5b3f63f6b6fa1f860ed07e4303eb4323d8b2abd59423fba36321f66c84da2a61edc22ac53432c04f955480502ac5bf0c8d0db4a0d98aa0ee0c759fba1d8ca10bc2c1b2a49501cc5728c1b45ad1e54b9c591bfebd0579b126a067888fb7faaeeafe788e435a2bef197cc34763dcf2e7e71e23e578a8fd7de68107137aa2e82425093c9e5104f6106e88d455b3b15449070250c5478f108e291e0b7d09a7f1f285c894991d772808aae4c7cd841003c5df909524f81b6ac8be4eecc70a558feb2d8c8e541292f1e0e5d214d76a4302dc22704a17672928dd9193a300d287eb36156389f16152364bfd21c9ea477c649b9e65573f85a529a44f2ee2f31c33ba3b776ac0a4d5f0f4e28f7a1f73af0b2372aa973d4b70d28d37deb23570455a7569e70c158995aa79fdf1586eae169f6779b010642d0b02d4d29f0f2c0c445a90a03fce931570a55d3228ec98c5ff6c12d552255fcbe13da43a7e47edb903d722f198786354f20353b6a7ad578f1233f348f7073eb67a820beccc2a1c847de7921b3577f953a236243adbad8e9441e037149a2575cb0a4d4c35d5f137e9bf4fd6cd37119e04b2227b806755ad47c54f5aed850a3ea5bd322e594f7a7dd91f96f43ad8a34a05a021ee0cf1f5075c5269d6bf5b5c44025d0112b1f12fe7644e782a9c75945889366aff8aa8df9542592c0e061ec854523148aaeb3e4f66de3d8172de275880f3eca154f07de1fd3a8b8afbdc1b430d140c7b38739e2773dc9378aed8537cbdfc72442ff238be36fd5acb456bf4b2556ec655de259cd7d3d382f2f46d74bb4dca52f18a92dfcad773e4adb340c6b826010d0c512037b49d33baf89f3e3081895682db4d3a394eb630bcef1a46ca5b2448f925ff0729d993c403fc5e5526b93203eabd525b8210ba6caf3396aea8433caa3d3cd70237513d48a1de9132e76bd81a501c09a35ea7a582cba49b632653104b0a3bd39230dede2d0fbfee35ec0d88720fd91147d612b1d1b6128edb590c98b2aead9fd48df90881ff4a8e0bc887faa5174321713ac5859b15a2b131aed659a00856e928a8b44caefa5b2e93cea36171d9595155dff61cfafe3157426ecc8d891f477a133f6aa8f7800b66196899971fa6fe6c1e55a30ede1fa644c148ad8415259b11c185ebbf098536015adf7eb3c6b10c91cb5766c21b5ff78e92c2dbead37f7c95c9c1c2cdf3a7aed93aab876d0bf1f1fee09a47384c3eee6b49c57ddcfa2910132bfc7ebefb8b2248f142dfd4b9e37323f05f8877aa537b661e659ae64d06cf9ff16aae1d0ec73fe3d66d3b58ad4f9a6efffed0273ca4b4b3f3683727b948044677eb3c50b969ee9623eb89b8124e6df28b4f885df06102f8d53d2ab403040bc5ed61f2a72fc9582db45342503ae8d2d87b721c9d5a72366f28214e42f4e26378f77272bf34eafc6ff8433ceb1bc283e7507e45fc11fe4538a39e0d591ea3f7b2a0c04ddf2c81e26c2ff5a8c22daafd447c0846b70b6156bac175acabf420c9b05d4e3d074d564a42ca659126ca701515ca912b3e1835933c102323d0e51f6be7d01abe34ffacc2c5b5fb53dfc774c47d13bbbefd497ea38af47db8ab69773a758d081e23cbb4ddb6ceb6736a4f4e59024bea237c09c6c09e4db3a83eab0fb1a8b0d8236c0aad57d8eac9b365393e81526fcc422201bc8a80aa9e834c65b9a0baa6b49c13d22543f2e474e19dba94954e8fc6a16d0d987425507f0fc2a1384d651c64d34c61ecbf682f9e7f2eaeb0666757fe2c5f46636ff6c5f78ffc9d77bfe51fccaf554f29037946840968a300ec06c7af28057ae9765f964b6377e5579626183f4c730bc1dc7b24b1168f58e7c53f98b3821f854f10bdb52c8e6b70db3ac1d27510c8b655ff6283496041b337424afb22d3d82ce0177be1a0cf413f21693dce7eedda286354270ac38495aa4e60b1b7c627a93330f415347278dcef1eeed7ac7e54b68d44e4cce38e14c85267d358cb3006fc437209aeff7c4a988fea601a9837a93d013fc82b6dcc676effa7a18cf0179a4ebbf23bfaabb6b486d4b5d45b24229a35d9a095b53c320b9f4e57a89154fdecd842c0908dc86251ebc6caa7c13b0e75acf83fe175783053c9b6245c4dc494dc8dafdd42ddddca84bc256e4057d1f61b3b268657365401502d4c27d6bfd3ffe3dc09f3dcf6d18dbbc2b0a74763f203ffd16f597f9a4b1ff375c6534a2165908d4cd41ecab1b84f65298364bda2a18b5ab1e8ed7cc511078cb94453a3b643ef026b4aecb51783c19c552426a049bd6dd218c319500fcf1e8beb03c308b9bc047affc86dac07b5081ca349a2010181f5a5543b159d140aed449687ec635aeff3256017d40fa632802a08f91c1830a7084754429db4d41490a30518a5002aabb365b162947be84e819d5c7e5b8f7197be5c99eb8ec7e1e60f868bfba932f806e32fd3a47d2b8a22e4dd650678dd35996321b89d20775f343bcca13a1fccf3ab6e7a8f63b8ce2f29107efed967cd0d15f7f0e72af7b63da7812fcdfaa6c0b01414281ce7a106f1d4e75db5e6fce28d646003c6014df6c17bb31b665745e5d72a93710d69e38ed0195ae294ae13b8568648ecff299376ea50276e13d9e9dc05a0dddaa11548d442cc91041a210438c372e34441944e660bab8d2a3f66102d77e8e5634cf23978e64b22867132a9e920e9088786c1a4d8d0b8db87758b0ee199c504153a935bd352308948c571b2be35cff0cbebb6174692ef92c1ed303b5703537ae074346a099674e3d1d23681e2cea9999d8e24c6bb86abd327479aef1d4747cf679fcadf940c645edc759aea80ef666b99ad28894a1f0837bd2fcce9d1a875905f652a96df76cb7ed45c8b9a2a552b449b7bcf3bd42beb908f6ea67af4cd24b036bce966e261e45c080473def1e4d2ae49f1cd7d563333d0769c0d8f8e377b5148568691cbbf23ddaee220ff0720d5a030693d5b58f7007d14a8c8fa517ceb62c68cdc7c6144a4d4d383722a41ae0bbc0901277c8f28541cce403207c40cc356cf4e4571453789574feae6bd742f8be8b6c2a661d3c4063e985cc47ccb4ec176456b958c6691102df51aea48b193152fb5fe180010e469bd429d192568f214d26c06d87b2eca548bf7f603e08514713583a38d9469d8a500cee5a53f3b9ed3249955fbd0ce708eb87660f99be09f4cfd1392b557f3aee9a8e564520e4560d29bcbb181383f7c9f3240a64be51a78a0bcf4a1f2df7af4176e83fcf19bc4d61881060e003b1422bd88ed0dca25fc9c7b814a223ba148c8617ad803adb6c708d80281fe7ef907892801458d14eac517aa9d09d586fdf10ffaf07ed8f1ede2b28f502fa4120b8a82078f6bee0096076764ec49f18492aa18d5d492de3a32da55c223d8f0b23e6e541fa1c2a53d1485387cc71cd09c3c32c0faa4bd9720dc849ec2fce620a62531ed1ee8d336607cc35197ae757eff0c66b6b88e31df04b65e5260ffc0db46fc52dd856dd773a151e8ebe5591400553e76ca578ebb6e0631686e09d47275ed067ab4fb3b71f18f8e6024975aab5b0ac4a1874c163e016fdb25b5a36227b6fe88ba3438327e6717103415619e7781c8c7cb1f1f611f80e1a2f87df39121290c0c65ffd7e940ba7ee45a7e7fa61f3ad4cbb1b005d4c087ecd77d345bd3110501dfbdad174de072fe3e962d6471afba87b9081fc0d5311266e6833ab7fa02247c6664cc8ecf4d0a632c431e072acbfedff627762296fe026905533c27ab99335866f49e64edd916ad3c27bd040c25a67e1871a234863dd034cb5c0089b52da36267eb569e9986ee9637fd5a3ef356237c0f1c426a2381ac30c1f9bec46e3b51eb60511b9b9c11b40946645a0e79f0f847c624a6ea43ae198b756eac32b4a76971aa660021a769921b7a60e456b0a718e7b0ca70f39388366e5add21aaecc630d76165c1a54131185a116e4ad569604fc70f7d13f18adf978c801258e7dda5400cf7922fab1767237166b769a38744becd75d50af096dee5f9ba733d93090c0b0b933c40788c35ba23dd76ba317f75c66cf57ea7560ca24271339f68b9302320f2b735a742118b7cf7816f23f7acac0503e75a8c3b12bc4e9638025b9f0d28dc39e428d4ff1f94b8385591debd61cdd4e4a13f56093ce186dd64350fcf960a949f759199a37a0342baf9d2f69d938aa4915367e6470d6288dc78fa7caa6ea7782f068123d1c611923248395e9b1e5fbfe4957926e03e7a4bf6e3ac268de77aa336b62a3448bce8eb3e10addb735f8533a5b46b50a4df3e9a6e901923e14ce15d4e29add969c6c9f8b331bc64d0205bb54d3e281e4fe72035dea873df3aa634a73c19ed0271c8fe80e9657bf7a20bddfa7e73c1e9be56756d64d9d4c14e25fd21b5383ad04662985e7459df1a884e5406dfbd2a8866a68da59559831a1c5926645f2729a6d9d463c962a549010720b1fbf8cdd6551861926d1ff00f52c528d5b80169d722758bcd2b22f0a67201be37fda7fba43eb9cf97818fa599fda1ce76cfa4925e4693f9bfefb56381a9716f50825da795627ed49c7a393e349af09fc8070b062ff6a59417d5a51f86f197765d777e567cb3bacfd87aa79574510a3441b826e923de04b95517881ea0b032a38df8bba8585eba868d1da68a11378090f2f7ab810af9ea3bbdd4d26bfa582747606d5c5a6c080cfb730abaace070c30b7237159e59b3ba519b398c32f282592b9e8c6d50b0d7462fd289f64811beac59655f94d473e38127f880e7c5ce2b71e54ee4e28fb92e63cea8f6b9517b89f74e7f2b78357edfd9a7ced7c7039458737c98ed73cc3b1b31b96be05974fe30deac70bef38aed716c7f9503c3d759b2da19d7a32de674d7c94471c6d5a62e498b0db93390d43c1cbaef89cb5ef66fcb6d1784e3c51339b453463c211354dc4ad994904349834ed773fa51840b98622c479ca4cbee65825b0961d2ae1db77b25fec052876ba73b6bc35f7810d0496421c2c8092669564f2d1af640227bbd1e60463d482d6e5d420bd8cdd948178980becb1b45945b137752075cb48a5dcce8a4b6cecf9f63ed8e3dde1e8db542e40b8b8f22cb66cc9ec539f224ad821d28697069d3ced542978509843f0b00aa9413950e319d0b03f02528c2cfc2672100e9bf6863328d0e806912f53dc76c2865b64bba4303bc699053beb709ddad703ad2cefeb823d4f750cebce4303a4555c56ca04cbca6ef32b564abd7e1ecf9eda89897d8d73b9cdb68c6cb4a5192e610b4b0b687df1498f0bb6ca2c348851f14d2108c24938bd40afeca1388b70f9ec66c55d37b9b9089012fd86749065761740afb37552d54a635c597f7d6d69d059eb4297cd436cdfa730fd5e53b5ad") writev(r6, &(0x7f0000001340)=[{&(0x7f0000000000)="07fc90696acf1ff5", 0x8}], 0x1) fsetxattr(r3, &(0x7f0000001440)=@known='com.apple.FinderInfo\x00', &(0x7f0000001480)='nfs4\x00', 0x5, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$bt_hci(r5, &(0x7f00000025c0)=ANY=[@ANYBLOB="0000001c00006c4a2d54c1107795310d1f00006fef138ca67c1b047e4601019b64a0506136926cd5ab996adc8c79ce316cae5f5860d569fcf90b3005954c13eadd9626671afedcea0950e0299cb51c900c63de2a1e7ebd2e80a516f9f970823bc99a5438eb9500fa03609fbcce4a75913c4ad248fec5a8403fe9144d6de1a2b48ddbdd5412cc0829cbaad514c489d72abcd0db48a9d7a5edebf2c80d4b5263ffe2635a43d751d6cc0f27bf02952ebf94a524830246fea192913db23ab31f00"/205], 0x6) [ 848.958593] Bluetooth: hci0: command 0x0406 tx timeout [ 851.006556] Bluetooth: hci0: command 0x0406 tx timeout [ 853.054627] Bluetooth: hci0: command 0x0406 tx timeout [ 855.102623] Bluetooth: hci0: command 0x0406 tx timeout [ 857.150596] Bluetooth: hci0: command 0x0406 tx timeout 04:24:50 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:50 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() r3 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) tgkill(r1, r2, 0x0) 04:24:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:24:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = getpid() pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) r5 = getpgrp(0x0) r6 = gettid() tgkill(r5, r6, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) clone3(&(0x7f00000002c0)={0x880000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x10}, &(0x7f0000000180)=""/98, 0x62, &(0x7f0000000200)=""/72, &(0x7f0000000280)=[r5, r1, r1, r1], 0x4, {r9}}, 0x58) tee(r2, r4, 0x20000000a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x4, 0x99, 0x3d, 0x0, 0xfffffffffffffffb, 0x4900, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc4a, 0x1, @perf_config_ext={0x80, 0x3}, 0x128, 0x5, 0xfffffffe, 0x5, 0x7528, 0x7, 0x800, 0x0, 0x8, 0x0, 0x7ff}, r1, 0xe, r4, 0x2) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:24:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:50 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f666996ec46943690a9a96aebc21a3acf302b2dbefa54318fa9e4fd02645ea29c400ac435a371bbf98f19aa529d63c2f864933d5459f7d0d9b72edd2a3e7cface8704fe27748d85279101eaf75bc91a46c0c205d8670ef7997de1c7a97fec4bc947bdd46cca9e183231db4ebf4d4f03596e56601fc7a1210f7a74a37b534c7e64d62d0ec757a55b39da5ff50c63275cf95a45416e4ddefe11ba7547844aaf849d2efd497977e777fe8eac3517e6b7d6f243e0"]) r5 = dup2(r3, r0) write$P9_RFSYNC(r5, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) r6 = dup2(r4, r0) r7 = dup3(r1, r2, 0x80000) r8 = signalfd4(r7, &(0x7f0000000000)={[0x8000]}, 0x8, 0x80800) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r9, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)) fchown(r6, r9, r11) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) tee(r1, r3, 0x0, 0x0) 04:24:50 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x31) r5 = dup3(r3, r4, 0x0) write$bt_hci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="011f043b45360f16c2900001fdfb678348c65b86684ac1d8b66149465bc129346b8100d4632bde4409249f3170fb9629728aab1bc43e7c754c4a10c825a96cd004bf8ef6bb5964793d5b96b3c7dcfa4caae85b77c58515f80b1fde7f8fb08c3742d122e4230283fa086f578395c1c9278507ef2fe2c073a0d1e7074e9d136cb8"], 0x6) 04:24:50 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 10) [ 858.388802] FAULT_INJECTION: forcing a failure. [ 858.388802] name failslab, interval 1, probability 0, space 0, times 0 [ 858.390821] CPU: 1 UID: 0 PID: 7966 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 858.390856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.390870] Call Trace: [ 858.390879] [ 858.390889] dump_stack_lvl+0xfa/0x120 [ 858.390923] should_fail_ex+0x4d7/0x5e0 [ 858.390956] ? alloc_inode+0x181/0x250 [ 858.390993] should_failslab+0xc2/0x120 [ 858.391028] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 858.391070] ? __create_object+0x59/0x80 [ 858.391122] ? alloc_inode+0x181/0x250 [ 858.391158] alloc_inode+0x181/0x250 [ 858.391196] alloc_anon_inode+0x26/0x420 [ 858.391229] ioctx_alloc+0x44b/0x1e10 [ 858.391274] ? lock_acquire+0x15e/0x2f0 [ 858.391309] ? __might_fault+0xe0/0x190 [ 858.391337] ? find_held_lock+0x2b/0x80 [ 858.391365] ? __pfx_ioctx_alloc+0x10/0x10 [ 858.391400] ? lock_release+0xc8/0x290 [ 858.391435] ? __might_fault+0xe0/0x190 [ 858.391478] __x64_sys_io_setup+0xc8/0x1f0 [ 858.391518] do_syscall_64+0xbf/0x390 [ 858.391565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.391591] RIP: 0033:0x7f4e76c30b19 [ 858.391611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.391635] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 858.391659] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 858.391676] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 858.391692] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.391707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 858.391722] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 858.391761] 04:24:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) [ 859.198537] Bluetooth: hci0: command 0x0406 tx timeout [ 861.246555] Bluetooth: hci0: command 0x0406 tx timeout [ 863.294599] Bluetooth: hci0: command 0x0406 tx timeout [ 865.342558] Bluetooth: hci0: command 0x0406 tx timeout [ 867.390518] Bluetooth: hci0: command 0x0406 tx timeout 04:24:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x5, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:24:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:59 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') recvmsg$unix(r1, &(0x7f0000000300)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/176, 0xb0}, {&(0x7f0000003780)=""/4111, 0x100f}, {&(0x7f0000001580)=""/246, 0xf6}, {&(0x7f00000002c0)=""/40, 0x28}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000002580)=""/200, 0xc8}], 0x8, &(0x7f0000002700)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014060000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}, 0xcd07e90e16e1dda9) read$char_usb(r1, 0x0, 0x7ffffffff000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = getpgrp(0x0) r6 = gettid() poll(&(0x7f0000000580)=[{r1, 0x400}], 0x1, 0x2) tgkill(r5, r6, 0x0) syz_open_procfs(r5, &(0x7f0000000540)='net/tcp6\x00') dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$int_out(r2, 0x5462, &(0x7f0000000500)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000004c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000480)={0x9, 0x0, 0x7}) 04:24:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:59 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184800) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r3, 0x2, 0x80000}) dup3(r1, r2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r6, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) tee(r1, 0xffffffffffffffff, 0x0, 0x0) 04:24:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f06020000"], 0x6) 04:24:59 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 11) 04:24:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) 04:24:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:24:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = getpgrp(0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) rt_tgsigqueueinfo(r2, r0, 0x9, &(0x7f0000000000)={0x4, 0x2, 0x9e27}) r3 = gettid() tgkill(r0, r3, 0x0) 04:24:59 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003d00)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/138, 0x8a}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f00000003c0)=""/218, 0xda}], 0x5, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000001740), 0x6e, &(0x7f00000018c0)=[{&(0x7f00000017c0)=""/178, 0xb2}, {&(0x7f0000001880)=""/44, 0x2c}], 0x2, &(0x7f0000001900)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}}, {{&(0x7f00000019c0), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/154, 0x9a}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/64, 0x40}], 0x4, &(0x7f0000003b80)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003c00)=""/111, 0x6f}, {&(0x7f0000003c80)=""/31, 0x1f}], 0x2}}], 0x5, 0x40010021, &(0x7f0000003e40)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x110a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x66c5f57eac3fb37c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002}, r1, 0x400001, 0xffffffffffffffff, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000003e80)=""/167, 0xa7) read$char_usb(r2, 0x0, 0x7ffffffff000) 04:24:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3d, 0x2, @tid=r1}, &(0x7f0000000100)) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x7) tgkill(r0, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x3, 0xff, 0xf8, 0x0, 0x9, 0x40000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8eba, 0x3f}, 0x120a2, 0x2, 0x9, 0x4, 0xc4f, 0x3, 0x2, 0x0, 0x0, 0x0, 0x35}, r2, 0x1, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) rt_sigqueueinfo(r2, 0x28, &(0x7f0000000180)={0x40, 0x6, 0x1}) pidfd_open(r3, 0x0) r4 = gettid() tgkill(r3, r4, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x305000, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x5, 0x81, 0x1, 0x0, 0x3, 0x180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x3002, 0x7fff, 0x966a, 0x1, 0x6, 0x9, 0xeb, 0x0, 0x4}, 0xffffffffffffffff, 0xf, r5, 0x0) 04:24:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0x1317, "50ba73", 0x80}) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x121000, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000280)={0x0, 'sit0\x00', {0x3}, 0x6}) r3 = dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000080)="4f99c8bfe7e921fd0345c1d785848e00c9b9022afa48b2788cdc5565100ec2328ae7d7cfa1c73e3fa59edc9839348b72392edd6726c24d6e8ea138a930597702d782d265338b2bf453112f3d6568cca84bdddaee12f843b18d091f80675e8ac5b55ad88b630dd17b38655833574f8eed925978c280") pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3}, 0x6) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000180)={0x8bf1, 0x0, 0x1}, 0xc) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) ioctl$sock_bt_hci(r9, 0x400448cb, &(0x7f0000000200)="db0500256c24784e01ec0000000000004705c004") write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:24:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:59 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 12) 04:24:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x2}}}, 0x178) 04:24:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'veth0_virt_wifi\x00', {0x2, 0x0, @broadcast}}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) ioctl$CDROM_SEND_PACKET(r1, 0x5393, &(0x7f00000001c0)={"3ec9f1ed53dfc7934acf1a85", &(0x7f0000000080)="9982e82b20a3316946696c15bc07ffdf217777136ad0e4ccbcf5de55592a797189d31fe7cd1858daaf18407074dd070ee2550476418d71fe50e5145bcb75831d54763014e2e19252ef755bc383000000000000000000", 0x56, 0x1, &(0x7f0000000000)={0x4b, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, "067d62fb", 0xff, "c8beb4df", 0x81, 0x9, 0x8, "d24232", "db2b2d1252b3973e8068c5b8e96ecca28a0922af4b17fbdd27ce9e5643bebe3bcc288984457134d188940e7fe490"}, 0x0, 0x4, 0x6, &(0x7f0000000180)}) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) [ 867.929395] FAULT_INJECTION: forcing a failure. [ 867.929395] name failslab, interval 1, probability 0, space 0, times 0 04:24:59 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x5) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000040)) r2 = gettid() tgkill(r0, r2, 0x0) [ 867.931080] CPU: 1 UID: 0 PID: 8035 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 867.931109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 867.931122] Call Trace: [ 867.931129] [ 867.931138] dump_stack_lvl+0xfa/0x120 [ 867.931168] should_fail_ex+0x4d7/0x5e0 [ 867.931195] ? security_inode_alloc+0x3e/0x130 [ 867.931220] should_failslab+0xc2/0x120 [ 867.931250] kmem_cache_alloc_noprof+0x80/0x690 [ 867.931284] ? __pfx_map_id_range_down+0x10/0x10 [ 867.931326] ? security_inode_alloc+0x3e/0x130 [ 867.931349] security_inode_alloc+0x3e/0x130 [ 867.931376] inode_init_always_gfp+0xc94/0xff0 [ 867.931410] alloc_inode+0x8d/0x250 [ 867.931441] alloc_anon_inode+0x26/0x420 [ 867.931476] ioctx_alloc+0x44b/0x1e10 [ 867.931513] ? lock_acquire+0x15e/0x2f0 [ 867.931542] ? __might_fault+0xe0/0x190 [ 867.931565] ? find_held_lock+0x2b/0x80 [ 867.931588] ? __pfx_ioctx_alloc+0x10/0x10 [ 867.931617] ? lock_release+0xc8/0x290 [ 867.931658] ? __might_fault+0xe0/0x190 [ 867.931691] __x64_sys_io_setup+0xc8/0x1f0 [ 867.931723] do_syscall_64+0xbf/0x390 [ 867.931752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.931774] RIP: 0033:0x7f4e76c30b19 [ 867.931791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.931811] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 867.931832] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 867.931846] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 867.931859] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 867.931871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.931884] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 867.931917] 04:24:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:24:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:24:59 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r3, &(0x7f0000000040), 0x2, &(0x7f0000000080)) 04:24:59 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x400000000000000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r2, 0x0, &(0x7f00000007c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup3(r5, r6, 0x0) r8 = dup3(r1, r1, 0x80000) io_submit(r2, 0x4, &(0x7f00000008c0)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000004c0)="ebb905daa5adaab6366306ca4e1e61a779cb4f8d264c4cc840c062b14f1136d494cc1c8420cb2e701030b3f28358d3ae1090396fdc2597212ad35925b3254100", 0x40, 0x8, 0x0, 0x1, r1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000540)="35995ac83dd65317d4a2507b382c3f8008fa7f66bcbab7c831d905c6c1a6b89ef1fe827ec4460c2e2ab418ced41ca3cacb61cac382f4ff17aa02174c786e9fab205aad6c1b0ba2741e428401b24ad8df7870a78a5f8d87281f2c64fd9e53345dc6cadfe87946c617d04b3464f4c566ba263423698eca0efa8c194d81e4e0ecfad13289f02efc84b14d72d208dbab2bc84ff077acfbb7b92504c8df17f5e3beca358399a3cec7393995cc7ca1a22a5379bb36dce193e5c568279c39f54cbbd578e0ed62571ae42474df630188e36bd2b9bbc68a39acdc61acbbf8892ff321d8310d75681e", 0xe4, 0x6, 0x0, 0x1, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x81e, r6, &(0x7f00000006c0)="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", 0xfd, 0x0, 0x0, 0x2, r1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x2625, r0, &(0x7f0000000800)="f72b16c6de1d4453c4887f4aaf0e73ce552dd1f2be54e0b1be80b75e9b27bd12843fa30ec4759cf87ac4ec9702bd46ee15dafdc0100555cd492c0dfc06b75e6a809f8c8abc03713ff8bdd92442085c5a239a079644c4341c3a658ebc30ea7a19ef1e", 0x62, 0x0, 0x0, 0x1, r8}]) pread64(r1, &(0x7f0000000040)=""/141, 0x8d, 0xffffffffffffdfa4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) tee(r9, r11, 0x20000000a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000000900)='\x8d\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) r12 = openat$incfs(r1, &(0x7f0000000100)='.log\x00', 0x0, 0x18d) readv(r12, &(0x7f0000000300)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000200)=""/204, 0xcc}, {&(0x7f00000003c0)=""/212, 0xd4}], 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000940)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc, &(0x7f00000010c0)=[{&(0x7f0000000980)={0x64c, 0x33, 0x400, 0x70bd2b, 0x25dfdbff, "", [@nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid}]}, @generic="d58511ddb9def98907e331cdde6ce9c63d3bb255977f84eb7d4434281de6c90b7e5402b67d499710bf4b3c929dfb36fc120a724f48c2e7732096bfbfea4ba4bbac01655c533bc0ba04bc3bc1ff81acdc57f7eb356ea6d07aa9764690b6ce03eceb698c35965a8418a7735510d4def11ac07ea6afc37782fae0517fa071f1795db870d08e962661cff0eadc6d7ed9aeb908b84ea677b822a91600f2fa5c98b7", @nested={0xd6, 0xe, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @pid}, @generic="e81eb813a1647d000e0407da3d673f4072c9bfdb6b0dfa17d91564d0620cc55ed4f2c27a5cfc194d79c099e3dc10c5bfddb92a63b6f27e6670ce51037fb06a81accd2dd25a4334db05cff419bdbf9315d0aa3e6d4a6a7cbfa176b7b696a615c1dd7496cdb372a5efcfa08cbdcc343d41bace67c891b3f5ddd9430bc217508b793f344b4a9edea031e134bfe981dc5e8454b0bd578d822a5ba3e3514acd96f45949398ce2a020a0fea586acdfdf1b1ab075d2ed508dc40263b69d0fdc5ed4e354b3c9b243b75b6eb45774"]}, @generic="11c268ebea5704243f11da25bedc51ff7c0dc56c2511e39ac2d31e10c86d7427", @typed={0x47, 0x72, 0x0, 0x0, @binary="d424a9f3c8c85780c58d27d4966c7d5754d571dbabc42c6c1b9f7b2cec4ae26bb4940fc9125231dd28a6acbca76bfe5b3db505fc493d61d486b0be6e474bb01119a1c2"}, @typed={0xc, 0x62, 0x0, 0x0, @str='pagemap\x00'}, @nested={0x271, 0x5e, 0x0, 0x1, [@generic="551c58c91f001dbc3534d5451b483342a5a6574aed3b954ea401", @generic="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", @typed={0x6, 0x3c, 0x0, 0x0, @str='-\x00'}, @generic="35edade234b0625afaecf31d568eb9ab94f0fc93680b42291830baa440e8962747b72b1f521cbfe67c9ff3b1db30546ef0c664be9dc926be879571ea06d42369a9491cec9a74d89f9587fab006b6d9d70d74eb5c7ae38667e9c04f05047ffd625e8c9ab758175e9631a410a51a0236aa750b8b4d710e11c1fa057e60b69bfdfbfc6fb62616e26f7cabdb42077ddb4246f5db4f20e7a87e226a8302accfcc633c65d5777f99e5b8c2dabc1054622abbf985ebb677c66d5ec307369aedd7c35b7a3750ec3976ad1c", @generic="e6dd7f70a93273f18ee30e4c8e6aa2e19caf5540f58fc0b90ac25de954e51268755f5f0b91d8bed3a92793611ce4fbbac047ed8b04615bf350bdb819f1ff8f2c50b0bc98e9c47847064ea58cc9ac933806c44f87684d52aa55dbcb2f4e884997925e241749b07d640ff53f523a7c1bb07439cd23639713971eaeacd85e746288a6c6e90d712d"]}, @nested={0x90, 0x82, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0x72}, @generic="58123b46778e939496bbffda7f736663b57fb7894cb5cce944e70f2de6a9eb1b0812ddf41b01cab9671a46f4d390e750c8fd6c06553fce098a7f590545fdacb7e7284e7bb83c686b3f4edb82a1474c36454c13ec51414c1e33206ba7c3c1025f692756a823bff5e2ae6803ceb6f342b4bb1d877d769bc9ce695d5b260a0fc67c"]}, @nested={0x13f, 0x40, 0x0, 0x1, [@generic="e195a4448427f5d6aa956da5e13613ae39efda987e37ac5f1547d72a83b566722371caca033f976285eb154ae3097b7103b3f2b0a511e8a7ffd11c1714bcf24396c380fba91b4a3b576f06b63e6386cf6861d5a61ae85dedbed497404ecfdcb6b0b38f8db75183db813401e61481ee0c452d841a52fcdd9dbe657ad231332adfb1ad802c0ddb4d305ebc7a876ff15e6c38d9e860d269a2675e1c87a5b5e059f2d1e2eaea69065e459cee822fb52395ebcfc55fcb92eff72620e9158ba955a2c6b91ed2c4874389d97a500fd68720a802d24347105b07676300a29d178206c87f3bac6e4c8373dfdc8b2d", @generic="b9a011801f5aec53ed1a63b4211f35e21b6329a796413c4287d10e84680ca91ef4c485ae3d0fdb9471606b84c6a3eb2cc813931fe3214d8a0c1abaaca3b2790b1f64bbb319018b830d02f44cdad128b259"]}]}, 0x64c}, {&(0x7f0000001000)={0x78, 0x37, 0x400, 0x70bd25, 0x25dfdbff, "", [@generic="52264eee2136027a87812a7855942c3e1900e2380c2d4f0acfbd4a7da6e012248ede017e62f21ceff8e19683a56cf703144494c32b89f908bd31dc0f16b7477aa90622db8b7614a3a37e6365150353d5cba83fdadb7c511d6ad1497981802c47a2603089dc919d"]}, 0x78}, {&(0x7f0000001400)={0x1318, 0x29, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x1065, 0x52, 0x0, 0x1, [@typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@remote}, @generic="09680eed25b02c21f7a5e30e2664338fd24b52f612f978aaf3105c5feaaef16b2b09d1c229611de18f938cf06d67ad2e277dbb768b440d7fef", @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r7}, @generic="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", @typed={0x4, 0x72}]}, @nested={0xc, 0x29, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x6, 0x67, 0x0, 0x0, @str='\x8d\x00'}, @nested={0x259, 0x2e, 0x0, 0x1, [@typed={0x25, 0x73, 0x0, 0x0, @binary="0e5427c84cdda93cb0c02d16425f56c467b499ae191ddd48226d6f26c38db6fc50"}, @generic="f09831a5da64fb1afd487da8ba306d9659175645dd45b58dcacbcf25c147e523e7969709be822bac115b6a84beef7958e2305a54dbfe3ce0cfc4b9cae1575ab91bbfcd55d1091b9f36ba0317c4627c45779f911e11f6096defd58e8b9bcae226572f5b3fc51a837b96885e78f7b2efe723a7a67bdebba61a49fb35c83bcf0b9465855e01d93a33af6e86e275ed3e37061974204b07369d74a00ece56f2cc1bf4e9e16ec94d", @typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@empty}, @generic="6bd7005eeea40121741b26632578734bc1edc170747b8cd534ac3b22f6f17f923909c11190a982004afa3190573db5a2a803f3bd773c741788de0b2d0c3278b76977ed759d1a03e6c5166f3281dc63cf61de9523d22bc932016cb53b5c923928915a0d91336344b7a1b458a1850a9ed7409bf5", @generic="00decc67453b4062e10fb47b8b055ec6b324ea3b2ac6", @typed={0x5, 0x83, 0x0, 0x0, @str='\x00'}, @typed={0x6, 0x7e, 0x0, 0x0, @str='-\x00'}, @typed={0x4, 0x4c}, @generic="32dfdfc8fe9dd325c82629a98118e4c456c87bd9f62b5d7dcfa98aeb8293b055ea769710ed", @generic="15ea21cdbad835da3f23dac596e4ba1e3f0435647d858b13fde90c18b0b8937c4c1e605502c96957b79316281011526110344cab4c4f214fa8c487d1207a9babfcc6b1673ed6029b611c3bd32d334b9cbb49fc9813682fbd67e2bdc109cf79c1fcc5e67ac1490de9e81fe465d5b4ef2a0bdde1c595061dcfee14ee2f1181697a33b1e7933180d21b1fa44c575842d02f12cfbb5c4328dd97f94fef1cf3fdf3a91b7c27725182c138d31b2f25b377e3916d0d"]}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x7}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@remote}, @nested={0xc, 0x2a, 0x0, 0x1, [@typed={0x8, 0x52, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x4, 0x73}]}, 0x1318}, {&(0x7f0000001080)={0x10, 0x27, 0x200, 0x70bd27, 0x25dfdbfd}, 0x10}, {&(0x7f0000002740)={0x470, 0x11, 0x100, 0x70bd2b, 0x25dfdbff, "", [@nested={0x2a2, 0x86, 0x0, 0x1, [@generic="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", @generic="bf0ac05eeb8f528215e135db6d48563e94674f11c78ce53ea1d4a44fb29a1635827680198e44bc01344b715f1561b44a3993397560e34abb6542d6fc740cd7118fe45c38e79892dd8d555f58f9a24481a5dd46495364d8d512b3884b732860b4e3114c77fe6427db727ac9b7336958ae1636d32812406ea16b7eb3b4224a932666822fe16a8689a2d53093", @typed={0x8, 0x7, 0x0, 0x0, @uid=r4}, @generic="a616f8ece25e271ae12618aa58d7ee54950b693d2093c572dee746200dcc800f0fccaca0d3601785255bf0d7365a1dc46daba6c26365e48f39c4b35fdfacb9f5fdd929e29fff0e0ac942ae5396491fea3d66a2a38fe3f3c831ecd534390e9168214722c549dc16dfce62450d90d7f77a05323fa090846712c20413e34f263b7c08251d53b74719c64c7b95e33e628ffda4312bcc5478099ba939599c3bb31554a827ee23b15a9c26d6b6746f0043ff7d2be06313d9311728494141058fe80ec3", @typed={0x6, 0x6, 0x0, 0x0, @str='\x8d\x00'}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x1}, @generic="2c750bc965303d5893279cc790e1de8171de60ecf73a9342482feaa1542e0933cdf2002be610d8ee4083181fb9b1f1b869f8132748807fbfd45f15"]}, @generic="428704ab26fd7fb6745d503942fd6226077769909c7e2052ea32ec0e9a58c434219c35a118dc21d09873a9c1def0106bf1182f75a8dc276db6b801f8c4fe95e692b65bda1610463a76c428d0", @typed={0x4, 0x63}, @typed={0x4, 0x32}, @nested={0x4b, 0x68, 0x0, 0x1, [@generic="ab07d8af4b26f926641edc888f5f93e9f05b3c25ab54dff1ee1c07a677a7b8b196c135ceecd251ff40c198ee46796d66dda991175774f402eda9e9d6d99a9d199669fbf7eed0b9"]}, @nested={0x11a, 0x4f, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="377b1423e192d481dc95ac07c0b408b655a7f653b40ef75c50eda4aaf491347ba9ebd251c23e7e53a8d215cdb7694864e89997d5ad6a2d56dee93cfdff2569d5", @generic="9c065f7b46879b1f61db442f5c25e4a929ac334b3d35f6903f8aa2aec04e3886d33e471f00b415c14bc36b35e5915b59709da1fb23dcc64a8590d471fe1a2b9590b8fc68b4d7e92e6df34eb2baa9bd9bc40195767435f527e1f4a578dac65bd3df4ff6ff9d21cf36645fc908aebf7c58907fbe24944bb614762714b466e4bc56751af7a3510cc667d8843fe1521d", @generic="727ac1f8b753d47d191f406030f0a0e719ae79a75d87eb74ebc81d8dac29444d4d08c800419cfe2485222bdc40a9d50f0391c84acf75bd579add68bf", @typed={0x4, 0x1}]}]}, 0x470}], 0x5, 0x0, 0x0, 0x20000000}, 0x0) 04:24:59 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)) dup3(r0, r1, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x10041, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x40090, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl}, {@access_any}, {@cache_loose}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@fscache}], [{@subj_role={'subj_role', 0x3d, '\'--:+@*\''}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}]}}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r8, r9, 0x0) tee(r8, r10, 0x20000000a, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d320d0000696e74921ec9916176653d72656c3f00457cf6b425856769643d87283c52a90331da242e713269cb93a78878155890f41ba0928118c1bfc4d8211e0adb165fbbbe0ac8922f57bd647df55b2ab2d1d4bf3568e53872a6bab3bd6d90b978f95e7d14614b7c29b7a4539652192dcbe90cb4d8cc1c047c94ac85225c44010e0d07ba7f698a8acad5f645075aacc35b1542669990e56ef8bc6115ac74fb57bddecf7939bd51d71284b207e9d542e964b8302a114784ffb12fc64a50bf3a58e0e6a81fbba558dff53544bf1baaece26d08ac95", @ANYRESHEX=r12, @ANYBLOB=',\x00']) write$P9_RSTATu(r10, &(0x7f0000000240)={0x68, 0x7d, 0x1, {{0x0, 0x4b, 0xfff8, 0x3, {0x4, 0x3, 0x5}, 0x40000000, 0x7, 0xeb, 0x6, 0x2, '!&', 0x8, 'sysadm_u', 0x5, '\x1f-$/+', 0x9, 'trans=fd,'}, 0x8, '\'--:+@*\'', 0x0, r12, 0xffffffffffffffff}}, 0x68) tee(r0, r3, 0x0, 0x0) 04:24:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x4}}}, 0x178) 04:24:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) [ 868.171238] tmpfs: Unknown parameter 'm2' [ 868.195438] tmpfs: Unknown parameter 'm2' [ 869.438546] Bluetooth: hci0: command 0x0406 tx timeout [ 871.486517] Bluetooth: hci0: command 0x0406 tx timeout [ 873.534543] Bluetooth: hci0: command 0x0406 tx timeout [ 875.582603] Bluetooth: hci0: command 0x0406 tx timeout [ 877.631524] Bluetooth: hci0: command 0x0406 tx timeout 04:25:09 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 13) 04:25:09 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f00000003c0)=""/73, 0x49}], 0x4, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/95, 0x5f}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0004000000000000006423759c3ceb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x130}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f00000008c0)=""/248, 0xf8}, {&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/88, 0x58}, {&(0x7f0000000c00)=""/195, 0xc3}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/50, 0x32}, {&(0x7f0000001d40)=""/11, 0xb}], 0x9, &(0x7f0000001e40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x3, 0x2000, &(0x7f0000002040)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1f, 0x5, 0x64, 0x2, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x9}, 0x10104, 0x7f, 0x1, 0x540a18665772d177, 0xbe, 0x4, 0x1000, 0x0, 0xfffffff7, 0x0, 0x7ff}, r2, 0x0, 0xffffffffffffffff, 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r4, 0x0, 0x7ffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x180) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) perf_event_open(&(0x7f00000020c0)={0x5, 0x80, 0x8, 0x2, 0x81, 0x7, 0x0, 0x40, 0x60000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000002080), 0x1}, 0x0, 0x7, 0x3, 0x0, 0x2, 0xfffffffb, 0x9, 0x0, 0x400}, r3, 0x0, r1, 0x2) 04:25:09 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_init() pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x41000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}, {@cache_mmap}, {@version_9p2000}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, '{()&($<{\\(\xb1\\@\'*#,[#+$%\xad'}}, {@obj_type}, {@hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfstransmute}]}}) tee(r0, r4, 0x0, 0x0) 04:25:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000003c0)) r2 = gettid() getpgid(r0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) tgkill(r0, r2, 0x0) r4 = getpgrp(0x0) r5 = gettid() tgkill(r4, r5, 0x0) tgkill(r2, r5, 0x26) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000240)=""/229, 0xe5}], 0x4, &(0x7f0000001800)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001980)=""/253, 0xfd}, {&(0x7f0000001a80)=""/64, 0x40}, {&(0x7f0000001ac0)=""/35, 0x23}, {&(0x7f0000001b00)=""/53, 0x35}], 0x4, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x2, 0x2028de991635c1f8, &(0x7f0000001d40)) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x7f, 0x40, 0x6, 0x0, 0x0, 0x41, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040)}, 0x40, 0x8, 0x8001, 0x4, 0xfffffffffffffffe, 0x9, 0x3f, 0x0, 0x5, 0x0, 0x3c}, r1, 0x10, r6, 0xb) 04:25:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:25:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x5}}}, 0x178) 04:25:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$bt_hci(r2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="71d9a8cc45391248ee7d650c60c2552bda6b8ef515c8dd9d7d858e6ed464d450aeec6bc0dcb9d0bd4ea2a78a29a7887bfd90cc87101c6359a9621913fec1280c2616bc37599449750aa89d86e2fb01e84f4aac8152c8db41214c2c1db3d7f712bb93ed23643d71b79628b5502e280011d4a2"], 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000180)={0x0, 0x100000000, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000580)={0x2, 0xfffffffffffffc01, @start={r3, 0x0, "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", "dd5048c66787e561fa650e46fa727fb57a7d52ecc04edf5fa31dd07c315073aecd882016643d270178de9c12cb4df462906d8bcf09292865a5e6a90087dadc48fa1d52b13e822db3da9caf2b6a16a247f7bf24df78fa79ff3694c5698fe9058e8d806af4099195a468e9bd0ea92d6f1716c5da76da8a8db731bbfa17b5b6681688c83e5a7f10b1ad29024f7cdbfb909c44220ecf7750dc28ceec33b2ca8d935d7c7a246ad72f497ba5468f54b4e77bc94fbba645bf94cafa788317912e00e0edd3e707c5068a74465b2dcd78641af1bc84f0d90f9967d30f49865322d5f53736a9f48bb3442d98426a6902df547a56a8c7928440f24af1abe5a385796116026dc13c501d398ecd4bf7fdaaa063d4a7e382ad04757a9cd882531b4f4049ac43c78343a0207f2ca2746b94692cb8a1be6bc8234bf5b93f095bdbf56a45f8903cffd18ed6c22297ec985540ad8ecd41c56a6a081b5e7f16578a4a2827ccda7520cb6786773971f12b3ffe6e3d94d0668592578e32e2cba5f8e8f497a073f72ee372665d1429d1b082bcaf36604224cdd198c5aa291b04fe8fec8d88418a2255ef3ad8ab68caae5850cc628e9b6c74a71e2f5a539fcbd1d49d4ce2e3250f21a58d87cbfee9eb401e3c4bcc4a67226a7028b2a779b353c45a93e577190a9d22e3701a047a3a0280accf2d8d59ccee289a64f7abc1335bab9431f0aace1edaa894387123e872fb0eaf824cb89a6c6df3428e3293cd0ce7efc34142e4598d1eaeeb7ee6ba2fbc19d6845867e169726c2a93a2e0d699932f4b3967f98d2f2453fe7eeaa58e5539c761a1b928ef6d18647141977413de9a390947840a780e9a7622dd2ba2bab3ce82e5647752ef586e213f592a9b48ba7337875051cf5dceeb6ee54414521b78a4961ff3a671c791aa6cc0ec9174e0f22c1e52f91527a35936e81d0115cbb6185b679d31b169893db3aba0c49ce7f9fc8be0c42857876027f72b567936acafc447a95d67790636a0f1ce3d91bca34da674c475ced66e07c6621cd9d287b17be5d332637607bce7c696e598b27fb43c124ab2525dd49e1ac00b977cbcf7e172d02c0b8bf510d6373922d3c1235d872dca2d328fd9aafacfcf2b9b6ed33061199a921272630a9d70b2d2f2399fa703d7943f5581aa94a2ee358c476162ca4cd4614cd85de47cd2628f0e79ce5527b23813952b12524c9ecc74e7797b73af59b164fbd4c8d6927b0723affd4ac9c1ad50bf28491ebde7cb6e3e98b8cd8320aedee8daf2642ac5bd63c6fba310a3b0dd76676d5ed5284f826632d6a2fcfdec6302b6b54fb53e926b6851e80329e36b80d3d176da7df5bcfb92b0098e21c190046e7035fdd2f06755f59dbcc891db0c8e3ae1a6134e55506d9ed613e9fd2103230162cf4674f88b86a4670987eaaa6b4c5ba401d730f36395442850b83a88ec575f"}, [0x81, 0x5, 0x2, 0x3, 0x6c1, 0x7, 0x3f, 0x9, 0x7, 0x1000, 0x2, 0x2, 0x5, 0x100000000, 0x2, 0x7, 0x1000100000000000, 0x10000, 0x15df46ea, 0x1, 0x5, 0x0, 0x6, 0x5a7a, 0xfffffffffffffffe, 0x9, 0x0, 0x3, 0x1, 0x100000001, 0x101, 0x8, 0x7fffffff, 0x2, 0x444, 0x10000, 0x2, 0x10000, 0x0, 0x8, 0x7, 0xfffffffffffffffc, 0x7b3, 0xf67, 0x80, 0x5, 0x4, 0x9, 0x10001, 0xffffffffffffff4f, 0x6, 0x101, 0x615e, 0x6, 0x0, 0xffff, 0x80000000, 0xa63, 0x3, 0x6, 0xff, 0x7, 0x81, 0x10001]}) [ 879.678533] Bluetooth: hci0: command 0x0406 tx timeout [ 881.726583] Bluetooth: hci0: command 0x0406 tx timeout [ 883.774576] Bluetooth: hci0: command 0x0406 tx timeout [ 885.822553] Bluetooth: hci0: command 0x0406 tx timeout 04:25:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:25:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x6}}}, 0x178) 04:25:18 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x21, @dev={0xfe, 0x80, '\x00', 0x36}, 0x401}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r3, 0x0, 0x7ffffffff000) 04:25:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x807a694a72a2e3d1) r2 = dup3(r0, r1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0xfe, 0x40, 0x100, 0x2, 0x3}) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:25:18 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 14) 04:25:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x80800) tee(r0, r2, 0x0, 0x0) 04:25:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() tgkill(r0, r1, 0x0) rt_tgsigqueueinfo(r0, r1, 0x28, &(0x7f0000000000)={0x0, 0x3, 0x80000000}) [ 886.394683] FAULT_INJECTION: forcing a failure. [ 886.394683] name failslab, interval 1, probability 0, space 0, times 0 [ 886.396738] CPU: 1 UID: 0 PID: 8098 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 886.396773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.396788] Call Trace: [ 886.396796] [ 886.396806] dump_stack_lvl+0xfa/0x120 [ 886.396841] should_fail_ex+0x4d7/0x5e0 [ 886.396873] ? __d_alloc+0x31/0xa10 [ 886.396905] should_failslab+0xc2/0x120 [ 886.396941] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 886.396999] ? __d_alloc+0x31/0xa10 [ 886.397029] __d_alloc+0x31/0xa10 [ 886.397069] d_alloc_pseudo+0x1d/0xc0 [ 886.397093] alloc_file_pseudo+0xbe/0x220 [ 886.397137] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 886.397191] ioctx_alloc+0x549/0x1e10 [ 886.397239] ? __might_fault+0xe0/0x190 [ 886.397267] ? find_held_lock+0x2b/0x80 [ 886.397296] ? __pfx_ioctx_alloc+0x10/0x10 [ 886.397331] ? lock_release+0xc8/0x290 [ 886.397366] ? __might_fault+0xe0/0x190 [ 886.397401] __x64_sys_io_setup+0xc8/0x1f0 [ 886.397440] do_syscall_64+0xbf/0x390 [ 886.397483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.397509] RIP: 0033:0x7f4e76c30b19 [ 886.397529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.397553] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 886.397578] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 886.397595] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 886.397610] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.397626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.397641] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 886.397680] 04:25:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f3ba3da70cb35008bbe525e9b9cffae5ada0ed425420be21cde1b797e974e5e8e2de709000000c66027ae3ba74d651cb21bc0c22289d36de789e75b5a19271547b2e24ccea09afb9f"], 0x1b) 04:25:18 executing program 1: keyctl$update(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:25:18 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 15) 04:25:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x8}}}, 0x178) 04:25:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, 0x0, 0x1b) 04:25:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3d, 0x2, @tid=r1}, &(0x7f0000000100)) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x7) tgkill(r0, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x7, 0x3, 0xff, 0xf8, 0x0, 0x9, 0x40000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8eba, 0x3f}, 0x120a2, 0x2, 0x9, 0x4, 0xc4f, 0x3, 0x2, 0x0, 0x0, 0x0, 0x35}, r2, 0x1, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) rt_sigqueueinfo(r2, 0x28, &(0x7f0000000180)={0x40, 0x6, 0x1}) pidfd_open(r3, 0x0) r4 = gettid() tgkill(r3, r4, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x305000, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x3f, 0x5, 0x81, 0x1, 0x0, 0x3, 0x180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x3002, 0x7fff, 0x966a, 0x1, 0x6, 0x9, 0xeb, 0x0, 0x4}, 0xffffffffffffffff, 0xf, r5, 0x0) 04:25:18 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 16) [ 886.669442] FAULT_INJECTION: forcing a failure. [ 886.669442] name failslab, interval 1, probability 0, space 0, times 0 [ 886.670413] CPU: 0 UID: 0 PID: 8131 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 886.670430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.670437] Call Trace: [ 886.670441] [ 886.670447] dump_stack_lvl+0xfa/0x120 [ 886.670470] should_fail_ex+0x4d7/0x5e0 [ 886.670488] ? alloc_empty_file+0x58/0x1e0 [ 886.670507] should_failslab+0xc2/0x120 [ 886.670524] kmem_cache_alloc_noprof+0x80/0x690 [ 886.670543] ? find_held_lock+0x2b/0x80 [ 886.670563] ? alloc_empty_file+0x58/0x1e0 [ 886.670579] alloc_empty_file+0x58/0x1e0 [ 886.670598] alloc_file_pseudo+0x12b/0x220 [ 886.670617] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 886.670642] ioctx_alloc+0x549/0x1e10 [ 886.670666] ? __might_fault+0xe0/0x190 [ 886.670681] ? find_held_lock+0x2b/0x80 [ 886.670693] ? __pfx_ioctx_alloc+0x10/0x10 [ 886.670709] ? lock_release+0xc8/0x290 [ 886.670725] ? __might_fault+0xe0/0x190 [ 886.670740] __x64_sys_io_setup+0xc8/0x1f0 [ 886.670758] do_syscall_64+0xbf/0x390 [ 886.670775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.670788] RIP: 0033:0x7f4e76c30b19 [ 886.670797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.670808] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 886.670820] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 886.670828] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 886.670835] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.670842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.670849] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 886.670867] [ 887.870567] Bluetooth: hci0: command 0x0406 tx timeout [ 889.918617] Bluetooth: hci0: command 0x0406 tx timeout [ 891.966632] Bluetooth: hci0: command 0x0406 tx timeout [ 894.014581] Bluetooth: hci0: command 0x0406 tx timeout [ 896.062544] Bluetooth: hci0: command 0x0406 tx timeout 04:25:28 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 17) 04:25:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) (fail_nth: 1) 04:25:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, 0x0, 0x1b) 04:25:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r8, {0xff}}, './file0\x00'}) tee(r0, r2, 0x0, 0x0) 04:25:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x177}}}, 0x178) 04:25:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001640)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat(0xffffffffffffffff, &(0x7f0000001880)='./file0/file0\x00', 0x2, 0x20) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r4, r5, 0x0) tee(r4, r6, 0x20000000a, 0x0) io_submit(0x0, 0x8, &(0x7f0000001ac0)=[&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x6, 0x3d4e, r0, &(0x7f00000011c0)="576272eea508b2c0828604cfa55117ef73b5753da238f20ea63e942cc85e57a378b1fe99fdb2e02b979b3a5e055e9b61a63db437e6d0116fe22a05edeed318c677f44aded94038936e037b55c98469db1b850cba9792b620c741f9a6156282336d913a59a2f830c0d5e1dd0f2e986a32331e5643084b8e9bcab14fc6775744587db50119aa572e0d36b850eee6dfdf1864fbe1e258af6ffcd4f745e8ff7155a92e0fa1b942dc6e59f00a55dbf169973b08be1220476410ba50678b56b4458621c27b3957401b3327ca472b4b8947d9dd879ace1a73ddf731d366e7ec5be3e123324b0255865979552ac09f308b0b9ed03434d1", 0xf3, 0x200, 0x0, 0x1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x8, 0x37a, r0, &(0x7f0000001300)="e54ae92fa5d6da3e77d280103622edaa10067ca68592ccbfdf30ad44cbdba55cd813dd75b4654b845f2b2fc2511e020965a8de95c8efdc299914bbd53d86979a6b31efd3a51dfd214e36ca4c43e02e3ee01869757659a77be095f83efcc3e148483d215b863c7f0cf5c0d499c1", 0x6d, 0x4, 0x0, 0x3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0xff67, 0xffffffffffffffff, &(0x7f0000001400)="78beea72e56a9bff5c4df5bfeff0897dcf950cf0d5b7fad0a9af32c4f4b1c652bc4cd39f1d8b5208aec23287e4a9f71f97a4190704dd40e5caa8ebe05c2c261c7b519ec0edd480b5312a82a536f38617b58c2d12d384807e3e7bd50c7c9797a81619b2b4fde3e024f57d55898f8d975f2a410f86a76310620e03c12b2dbf9780f3644ddd696ccc94d647f364228e348d006c200a03e651d9338887441b7cb7cfa59b7416acb1e43d6a5be344b1db4beeebca4e13348d5293f567572546a53ff80f74f9ee1fa6f5e1a605f9f2d71ba61945a6c9ab7f", 0xd5, 0xffff, 0x0, 0x1}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x400, 0xffffffffffffffff, &(0x7f0000001580)="8d83c89a82c576237dbf97e0a3450d0dd69ad782133af0012e7ffa07a4a1d26b4ee5178df20c0506bc031fcc0a743f9008e4da39c073f2852b28a85a7e10a3637da35695d55014d20f393de89dc3210b0fac5535bfae6f05f78a61e2", 0x5c, 0xe4, 0x0, 0x2}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x7, 0x5, r1, &(0x7f0000001680)="165ba0765f56dc3d2f06906dedbe29d2a0a1366a4894310d626295cc8972273422c4d354bc50d4de0cf08cea6e337b3aaf5553caeea9a8b4da2434408419ef293962cdbe36d2315cb84247c8a745feae1caf59f478aa15dcdf6c93ba3692560302cf415a7af886d0f4209b229eae22807883a07bda1d2b580df2b5897f5f62d357", 0x81, 0xfffffffffffff801, 0x0, 0x1}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x86, r2, &(0x7f0000001780)="d5f04f53d5f565512989e1a0039d9778ce53c0c3f93dab389a36938310fb992925cacb9f45bdf15a0b9245a17fdc687f528b12a2aeec1a2037ae334d3ffcf2e5ad368b7eb4d37602f7374c17b2bc10f4d45cb0a2947d952c437237287c749d7355038c68afc2af85cee8c3cba56a384a4c84fb482ff143868b49defbb6c1ba24fd95ccd77b421d539bee2f5ea8fa46d5472f3c871121a7b80b87777e12b86ef0cd2a56dd3443091c7b502e8a192bd37eff8fedc1c18ec3aafd1619d607de4dbe2c24c80bbb5e47b39189f6d36925b77bb0efd30c4aff03", 0xd7, 0x2, 0x0, 0x3, r3}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000001900)="e340b9d48bdcdf44a059abd31b3d5fbbcdcec4b7f8ffad64b0ef64f4f5725e90195eb10be72aaceec35524d62ba6212811a9dd7cd18107dbb0945512a5c9247182b1ceba7eca0794423728c9d3320473926039239198ac73ee6dd20076894f155c11467a2f8751a531f67dd74b967445c20d986eacb4d244be47805251e729d6e49c8834ef6d8dcdf8956e58e54f2406930c3bd3760a3a7a012aba623ec793c1fb2324238f33703d4ef8ccb1a27b7cf8a718acea3121c4053083be79826a599788e66e344359757fa3", 0xc9, 0x3ee0, 0x0, 0x1, r6}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x2, 0xfffe, r0, &(0x7f0000001a40)="13e6771b91c6761d707a38ad9e", 0xd, 0x9, 0x0, 0x2}]) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r8 = dup3(r0, r7, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) tee(r9, r11, 0x20000000a, 0x0) io_setup(0x20, &(0x7f0000000080)=0x0) r13 = memfd_secret(0x0) io_submit(r12, 0x1, &(0x7f0000001180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r13, &(0x7f0000000180)="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", 0x1000, 0xf001, 0x0, 0x2, r8}]) write$bt_hci(r11, &(0x7f0000000000)={0x1, @set_conn_encrypt={{}, {0xc9}}}, 0x40) 04:25:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) read$char_usb(r0, 0x0, 0x7ffffffff000) [ 896.436363] FAULT_INJECTION: forcing a failure. [ 896.436363] name failslab, interval 1, probability 0, space 0, times 0 [ 896.438619] CPU: 0 UID: 0 PID: 8149 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 896.438649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.438662] Call Trace: [ 896.438669] [ 896.438677] dump_stack_lvl+0xfa/0x120 [ 896.438706] should_fail_ex+0x4d7/0x5e0 [ 896.438734] should_failslab+0xc2/0x120 [ 896.438764] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 896.438802] ? __alloc_skb+0x2ab/0x370 [ 896.438832] ? kasan_unpoison+0x27/0x60 [ 896.438864] ? __alloc_skb+0x2ab/0x370 [ 896.438891] __alloc_skb+0x2ab/0x370 [ 896.438921] ? __pfx___alloc_skb+0x10/0x10 [ 896.438966] alloc_skb_with_frags+0x8f/0x7c0 [ 896.438992] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 896.439029] sock_alloc_send_pskb+0x7cb/0x950 [ 896.439058] ? lock_acquire+0x15e/0x2f0 [ 896.439087] ? avc_has_perm_noaudit+0x59/0x3d0 [ 896.439122] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 896.439157] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 896.439187] ? avc_has_perm_noaudit+0x150/0x3d0 [ 896.439223] ? sock_has_perm+0x21c/0x2b0 [ 896.439254] ? __pfx_sock_has_perm+0x10/0x10 [ 896.439291] hci_sock_sendmsg+0x190/0x2270 [ 896.439320] ? __lock_acquire+0x694/0x1b70 [ 896.439352] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 896.439390] sock_write_iter+0x57e/0x610 [ 896.439417] ? __pfx_sock_write_iter+0x10/0x10 [ 896.439439] ? lock_release+0xc8/0x290 [ 896.439490] ? security_file_permission+0x22/0x90 [ 896.439526] vfs_write+0xbe9/0x1150 [ 896.439554] ? __pfx_sock_write_iter+0x10/0x10 [ 896.439578] ? __fget_files+0x34/0x3b0 [ 896.439603] ? __pfx_vfs_write+0x10/0x10 [ 896.439653] ksys_write+0x1ef/0x240 [ 896.439679] ? __pfx_ksys_write+0x10/0x10 [ 896.439716] do_syscall_64+0xbf/0x390 [ 896.439744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.439766] RIP: 0033:0x7efd9e093b19 [ 896.439783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.439804] RSP: 002b:00007efd9b609188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 896.439825] RAX: ffffffffffffffda RBX: 00007efd9e1a6f60 RCX: 00007efd9e093b19 [ 896.439839] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000003 [ 896.439852] RBP: 00007efd9b6091d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.439864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.439876] R13: 00007ffc1554e1af R14: 00007efd9b609300 R15: 0000000000022000 [ 896.439908] 04:25:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:25:28 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 18) 04:25:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, 0x0, 0x1b) 04:25:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x500}}}, 0x178) 04:25:28 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="e80000001900100025bd7000fedbdf2516000000725bb63324d342093163718b46fe52a85897892713b34498b7a1c77592656644f5cab394e5f3b60d299bd18906df2c550c19c1a9380f3ed38dc1c59e3e4860e69f04339224ba508f819f0b497b71e8cb413f953b087f1372405185f90eb6c603a06d1629f396626c07b24214c70e5413c9e94b989adb002e4e7dcd59fdd9163939c504dca48ddfee7fe55c2f225f94c8607145462a85623802085c63ad3b7c6ef6fb13dd262faf28997ef63e23da07a68c07fa015c914a7f45a189d7a2985e4f7f12bf178a026e6683eb4b"], 0xe8}, 0x1, 0x0, 0x0, 0x20001}, 0x40000400) [ 896.659173] FAULT_INJECTION: forcing a failure. [ 896.659173] name failslab, interval 1, probability 0, space 0, times 0 [ 896.660711] CPU: 0 UID: 0 PID: 8167 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 896.660735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 896.660746] Call Trace: [ 896.660752] [ 896.660759] dump_stack_lvl+0xfa/0x120 [ 896.660784] should_fail_ex+0x4d7/0x5e0 [ 896.660808] ? security_file_alloc+0x35/0x130 [ 896.660831] should_failslab+0xc2/0x120 [ 896.660856] kmem_cache_alloc_noprof+0x80/0x690 [ 896.660886] ? __create_object+0x59/0x80 [ 896.660919] ? security_file_alloc+0x35/0x130 [ 896.660942] security_file_alloc+0x35/0x130 [ 896.660966] init_file+0x95/0x4c0 [ 896.660994] alloc_empty_file+0x76/0x1e0 [ 896.661023] alloc_file_pseudo+0x12b/0x220 [ 896.661052] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 896.661089] ioctx_alloc+0x549/0x1e10 [ 896.661122] ? __might_fault+0xe0/0x190 [ 896.661141] ? find_held_lock+0x2b/0x80 [ 896.661162] ? __pfx_ioctx_alloc+0x10/0x10 [ 896.661185] ? lock_release+0xc8/0x290 [ 896.661209] ? __might_fault+0xe0/0x190 [ 896.661233] __x64_sys_io_setup+0xc8/0x1f0 [ 896.661260] do_syscall_64+0xbf/0x390 [ 896.661284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.661302] RIP: 0033:0x7f4e76c30b19 [ 896.661316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 896.661332] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 896.661349] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 896.661361] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 896.661372] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 896.661382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 896.661392] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 896.661419] 04:25:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) write$bt_hci(r4, &(0x7f0000000000)={0x1, @link_key_reply={{0x40b, 0x16}, {@any, "b2cbd51c532f4497bd0c21e96f5d21de"}}}, 0x1a) r5 = dup3(r0, r1, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:25:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x600}}}, 0x178) 04:25:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) (fail_nth: 2) 04:25:28 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x24}}, 0x800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) 04:25:28 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 19) 04:25:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[], 0x1b) [ 898.110598] Bluetooth: hci0: command 0x0406 tx timeout [ 900.158644] Bluetooth: hci0: command 0x0406 tx timeout [ 902.206567] Bluetooth: hci0: command 0x0406 tx timeout [ 904.254596] Bluetooth: hci0: command 0x0406 tx timeout [ 906.302608] Bluetooth: hci0: command 0x0406 tx timeout 04:25:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[], 0x1b) 04:25:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) open_tree(r3, &(0x7f0000000000)='./file0\x00', 0x89801) 04:25:39 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) r2 = clone3(&(0x7f00000001c0)={0x20000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x41}, &(0x7f0000000100)=""/77, 0x4d, &(0x7f00000003c0)=""/4096, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58) r3 = getpgrp(0x0) r4 = gettid() tgkill(r3, r4, 0x0) kcmp(r2, r3, 0x3, r0, r1) 04:25:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) (fail_nth: 3) 04:25:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0x7701}}}, 0x178) 04:25:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) write$bt_hci(r4, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) r5 = dup3(r0, r1, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:25:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:39 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 20) [ 907.380260] FAULT_INJECTION: forcing a failure. [ 907.380260] name failslab, interval 1, probability 0, space 0, times 0 [ 907.381503] CPU: 0 UID: 0 PID: 8209 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 907.381522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.381531] Call Trace: [ 907.381536] [ 907.381542] dump_stack_lvl+0xfa/0x120 [ 907.381564] should_fail_ex+0x4d7/0x5e0 [ 907.381585] should_failslab+0xc2/0x120 [ 907.381606] __kmalloc_noprof+0xcd/0x680 [ 907.381630] ? ioctx_alloc+0x147c/0x1e10 [ 907.381655] ioctx_alloc+0x147c/0x1e10 [ 907.381683] ? find_held_lock+0x2b/0x80 [ 907.381700] ? __pfx_ioctx_alloc+0x10/0x10 [ 907.381719] ? lock_release+0xc8/0x290 [ 907.381739] ? __might_fault+0xe0/0x190 [ 907.381760] __x64_sys_io_setup+0xc8/0x1f0 [ 907.381782] do_syscall_64+0xbf/0x390 [ 907.381801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.381817] RIP: 0033:0x7f4e76c30b19 [ 907.381828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.381842] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 907.381856] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 907.381866] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 907.381875] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.381883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.381892] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 907.381914] 04:25:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[], 0x1b) 04:25:39 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 21) 04:25:39 executing program 1: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x3c29f48c2b7daf1, 0x0) ioctl$FITHAW(r1, 0xc0045878) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:25:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r4, 0x3, r1, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r6 = accept(0xffffffffffffffff, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000200)=0x80) ppoll(&(0x7f0000000280)=[{r0, 0x80}, {r5, 0x4420}, {r6, 0x8000}, {0xffffffffffffffff, 0x81}], 0x4, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0x7]}, 0x8) 04:25:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) (fail_nth: 4) 04:25:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x3) 04:25:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000080)=0xfc000000, 0x4) r4 = dup3(r0, 0xffffffffffffffff, 0x0) write$bt_hci(r4, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) [ 908.350595] Bluetooth: hci0: command 0x0406 tx timeout [ 910.398643] Bluetooth: hci0: command 0x0406 tx timeout [ 912.446650] Bluetooth: hci0: command 0x0406 tx timeout [ 914.494608] Bluetooth: hci0: command 0x0406 tx timeout [ 916.542604] Bluetooth: hci0: command 0x0406 tx timeout [ 918.590549] Bluetooth: hci0: command 0x0406 tx timeout 04:25:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:25:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:25:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x404) 04:25:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) (fail_nth: 5) 04:25:50 executing program 0: r0 = io_uring_setup(0x5328, &(0x7f0000000100)={0x0, 0xd1af, 0x9, 0x3, 0x1ac}) copy_file_range(r0, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffbdd, 0x100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x0, 0x0) 04:25:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:25:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendto(r0, &(0x7f0000000080)="0cc5542ebd4224d7d265a3ebad70d8e45b6de603b52a90d05180a90e44986e1fda81440da904cedbfa8a4eb94ec43e9b605284519e627c233ec64383d0de6d27f8ab22ef4243d591a029e7ba32c67562052d93a736ac904625f17a2495b75a981d49902152e455", 0x67, 0x4000000, 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:25:50 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 22) [ 918.775219] FAULT_INJECTION: forcing a failure. [ 918.775219] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 918.776220] CPU: 0 UID: 0 PID: 8253 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 918.776236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.776243] Call Trace: [ 918.776247] [ 918.776252] dump_stack_lvl+0xfa/0x120 [ 918.776272] should_fail_ex+0x4d7/0x5e0 [ 918.776290] should_fail_alloc_page+0xe0/0x110 [ 918.776309] prepare_alloc_pages+0x1eb/0x550 [ 918.776324] ? arch_stack_walk+0x9c/0xf0 [ 918.776340] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 918.776364] ? stack_trace_save+0x8e/0xc0 [ 918.776383] ? stack_depot_save_flags+0x2c/0xa20 [ 918.776402] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 918.776425] ? ioctx_alloc+0x147c/0x1e10 [ 918.776445] ? __lock_acquire+0x694/0x1b70 [ 918.776467] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 918.776488] ? policy_nodemask+0xeb/0x4e0 [ 918.776502] alloc_pages_mpol+0xed/0x340 [ 918.776514] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 918.776523] ? find_held_lock+0x2b/0x80 [ 918.776535] ? filemap_get_entry+0x1b1/0x3b0 [ 918.776552] ? lock_release+0xc8/0x290 [ 918.776570] folio_alloc_noprof+0x21/0x80 [ 918.776584] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 918.776597] ? mark_held_locks+0x49/0x80 [ 918.776614] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 918.776628] ? kasan_save_track+0x14/0x30 [ 918.776643] ? __kasan_kmalloc+0x7f/0x90 [ 918.776662] __filemap_get_folio_mpol+0x513/0x9a0 [ 918.776678] ? ioctx_alloc+0x147c/0x1e10 [ 918.776697] ioctx_alloc+0x6d2/0x1e10 [ 918.776721] ? __pfx_ioctx_alloc+0x10/0x10 [ 918.776736] ? lock_release+0xc8/0x290 [ 918.776752] ? __might_fault+0xe0/0x190 [ 918.776769] __x64_sys_io_setup+0xc8/0x1f0 [ 918.776787] do_syscall_64+0xbf/0x390 [ 918.776803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.776816] RIP: 0033:0x7f4e76c30b19 [ 918.776825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.776836] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 918.776848] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 918.776856] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 918.776863] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.776870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.776876] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 918.776894] 04:25:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0xfdef) [ 918.856646] FAULT_INJECTION: forcing a failure. [ 918.856646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.858633] CPU: 1 UID: 0 PID: 8262 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 918.858665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.858678] Call Trace: [ 918.858685] [ 918.858694] dump_stack_lvl+0xfa/0x120 [ 918.858725] should_fail_ex+0x4d7/0x5e0 [ 918.858755] _copy_from_iter+0x1dc/0x1660 [ 918.858782] ? lock_acquire+0x15e/0x2f0 [ 918.858813] ? __virt_addr_valid+0x1c6/0x5d0 [ 918.858838] ? find_held_lock+0x2b/0x80 [ 918.858863] ? __pfx__copy_from_iter+0x10/0x10 [ 918.858885] ? lock_release+0xc8/0x290 [ 918.858921] ? __virt_addr_valid+0x100/0x5d0 [ 918.858946] ? __check_object_size+0x579/0x880 [ 918.858978] hci_sock_sendmsg+0x402/0x2270 [ 918.859009] ? __lock_acquire+0x694/0x1b70 [ 918.859044] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 918.859085] sock_write_iter+0x57e/0x610 [ 918.859115] ? __pfx_sock_write_iter+0x10/0x10 [ 918.859139] ? lock_release+0xc8/0x290 [ 918.859186] ? security_file_permission+0x22/0x90 [ 918.859225] vfs_write+0xbe9/0x1150 [ 918.859255] ? __pfx_sock_write_iter+0x10/0x10 [ 918.859281] ? __fget_files+0x34/0x3b0 [ 918.859308] ? __pfx_vfs_write+0x10/0x10 [ 918.859362] ksys_write+0x1ef/0x240 [ 918.859389] ? __pfx_ksys_write+0x10/0x10 [ 918.859429] do_syscall_64+0xbf/0x390 [ 918.859466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.859490] RIP: 0033:0x7efd9e093b19 [ 918.859508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.859530] RSP: 002b:00007efd9b609188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 918.859552] RAX: ffffffffffffffda RBX: 00007efd9e1a6f60 RCX: 00007efd9e093b19 [ 918.859568] RDX: 0000000000000006 RSI: 0000000020000040 RDI: 0000000000000003 [ 918.859581] RBP: 00007efd9b6091d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.859595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.859608] R13: 00007ffc1554e1af R14: 00007efd9b609300 R15: 0000000000022000 [ 918.859642] 04:25:50 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 23) 04:25:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) [ 918.960765] FAULT_INJECTION: forcing a failure. [ 918.960765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 918.961756] CPU: 0 UID: 0 PID: 8274 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 918.961772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.961780] Call Trace: [ 918.961784] [ 918.961789] dump_stack_lvl+0xfa/0x120 [ 918.961808] should_fail_ex+0x4d7/0x5e0 [ 918.961826] should_fail_alloc_page+0xe0/0x110 [ 918.961845] prepare_alloc_pages+0x1eb/0x550 [ 918.961860] ? perf_trace_lock_acquire+0xc9/0x700 [ 918.961882] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 918.961900] ? __lock_acquire+0x694/0x1b70 04:25:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) [ 918.961917] ? css_rstat_updated+0x1b8/0x4d0 [ 918.961932] ? __pfx_css_rstat_updated+0x10/0x10 [ 918.961948] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 918.961966] ? find_held_lock+0x2b/0x80 [ 918.961978] ? perf_trace_lock_acquire+0xc9/0x700 [ 918.962000] ? __lock_acquire+0x694/0x1b70 [ 918.962017] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 918.962037] ? policy_nodemask+0xeb/0x4e0 [ 918.962051] alloc_pages_mpol+0xed/0x340 [ 918.962063] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 918.962073] ? find_held_lock+0x2b/0x80 [ 918.962084] ? filemap_get_entry+0x1b1/0x3b0 [ 918.962101] ? lock_release+0xc8/0x290 [ 918.962120] folio_alloc_noprof+0x21/0x80 [ 918.962133] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 918.962150] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 918.962163] ? kasan_save_track+0x14/0x30 [ 918.962178] ? __kasan_kmalloc+0x7f/0x90 [ 918.962197] __filemap_get_folio_mpol+0x513/0x9a0 [ 918.962213] ? ioctx_alloc+0x147c/0x1e10 [ 918.962234] ioctx_alloc+0x6d2/0x1e10 [ 918.962258] ? __pfx_ioctx_alloc+0x10/0x10 [ 918.962274] ? lock_release+0xc8/0x290 [ 918.962289] ? __might_fault+0xe0/0x190 [ 918.962306] __x64_sys_io_setup+0xc8/0x1f0 [ 918.962324] do_syscall_64+0xbf/0x390 [ 918.962340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.962353] RIP: 0033:0x7f4e76c30b19 [ 918.962362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.962373] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 918.962385] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 918.962393] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 918.962400] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.962407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.962414] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 918.962432] 04:25:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0xff, 0x5, 0x1, 0x0, 0x81, 0xc000, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000280), 0x3}, 0x4a, 0x3ff, 0x7ff, 0x8, 0x7f, 0x5, 0x2d40, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000003) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) r4 = getpgrp(0x0) r5 = gettid() tgkill(r4, r5, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x7, 0x80, 0x1, 0x0, 0x10000, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x50}, 0x10108, 0x3f, 0x80000000, 0x5, 0x3, 0xfffffff7, 0x8000, 0x0, 0x5, 0x0, 0x25ea}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) tee(r1, r3, 0x20000000a, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000003c0)={r6, 0x1}) read$char_usb(0xffffffffffffffff, 0x0, 0x7ffffffff000) 04:25:50 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdbdf251a000000080001001a00000008e0b9304527009a00010000000700210061610000080001002e00000006002100620000000400cc0008000100750000002c0022ea2949bc80080001000000000008000400780c0000080017e888a076ebba6f0080080002"], 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x0, 0x0) 04:25:50 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 24) 04:25:50 executing program 1: clone3(&(0x7f00000003c0)={0x81000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x37}, &(0x7f0000000100)=""/151, 0x97, &(0x7f00000001c0)=""/195, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x9, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x1}, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r0, 0x7, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/stat\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) 04:25:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) close(0xffffffffffffffff) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) write$bt_hci(r4, &(0x7f0000000080)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) [ 920.638536] Bluetooth: hci0: command 0x0406 tx timeout [ 922.686661] Bluetooth: hci0: command 0x0406 tx timeout [ 924.734593] Bluetooth: hci0: command 0x0406 tx timeout [ 926.782656] Bluetooth: hci0: command 0x0406 tx timeout [ 928.830626] Bluetooth: hci0: command 0x0406 tx timeout [ 930.878555] Bluetooth: hci0: command 0x0406 tx timeout 04:26:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:26:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0xfffffdef) 04:26:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r8, r9, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r10, 0x0) recvmmsg$unix(r4, &(0x7f0000000ec0)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/48, 0x30}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f00000002c0)=""/222, 0xde}], 0x3}}, {{&(0x7f0000000400), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000480)=""/17, 0x11}, {&(0x7f00000004c0)=""/51, 0x33}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e300"], 0x120}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000740)=""/126, 0x7e}, {&(0x7f00000007c0)=""/62, 0x3e}, {&(0x7f0000000800)=""/26, 0x1a}, {&(0x7f0000000840)=""/169, 0xa9}], 0x5, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/62, 0x3e}, {&(0x7f0000000ac0)=""/243, 0xf3}, {&(0x7f0000000bc0)=""/115, 0x73}, {&(0x7f0000000c40)=""/166, 0xa6}], 0x5, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x4, 0x3, &(0x7f0000001000)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x100020, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@fscache}], [{@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '\xab%'}}, {@euid_lt={'euid<', r10}}, {@fowner_gt={'fowner>', r11}}]}}) bind$bt_hci(r3, &(0x7f0000000000), 0x6) r12 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r13 = dup3(r0, r12, 0x0) write$bt_hci(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="011f04020010"], 0x6) 04:26:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x8000, 0x0, 0xd9, 0x200}, {0x0, 0x6, 0xc0, 0x3f}, {0x1, 0xfb, 0x7f, 0x9}, {0x20, 0xd2, 0x7f, 0x9}, {0x5, 0x6, 0x1f, 0xa53}, {0x4, 0x11, 0x7f, 0x3}, {0x5, 0x20, 0x20, 0x6}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:26:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) (fail_nth: 6) 04:26:03 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 25) 04:26:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:03 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x4, @perf_config_ext={0xff}, 0x1, 0x8000, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000, 0x0, 0x800}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) [ 931.390425] FAULT_INJECTION: forcing a failure. [ 931.390425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.392721] CPU: 1 UID: 0 PID: 8311 Comm: syz-executor.4 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 931.392754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 931.392768] Call Trace: [ 931.392776] [ 931.392785] dump_stack_lvl+0xfa/0x120 [ 931.392818] should_fail_ex+0x4d7/0x5e0 [ 931.392849] _copy_to_user+0x32/0xd0 [ 931.392879] simple_read_from_buffer+0xe0/0x180 [ 931.392909] proc_fail_nth_read+0x18a/0x240 [ 931.392943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.392978] ? security_file_permission+0x22/0x90 [ 931.393013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.393046] vfs_read+0x1eb/0xc70 [ 931.393083] ? __pfx_vfs_read+0x10/0x10 [ 931.393114] ? lock_release+0xc8/0x290 [ 931.393153] ? __fget_files+0x20d/0x3b0 [ 931.393195] ksys_read+0x121/0x240 [ 931.393223] ? __pfx_ksys_read+0x10/0x10 [ 931.393265] do_syscall_64+0xbf/0x390 [ 931.393297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.393321] RIP: 0033:0x7efd9e04669c [ 931.393340] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 931.393362] RSP: 002b:00007efd9b609170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 931.393385] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007efd9e04669c [ 931.393401] RDX: 000000000000000f RSI: 00007efd9b6091e0 RDI: 0000000000000005 [ 931.393415] RBP: 00007efd9b6091d0 R08: 0000000000000000 R09: 0000000000000000 [ 931.393429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.393443] R13: 00007ffc1554e1af R14: 00007efd9b609300 R15: 0000000000022000 [ 931.393487] [ 932.926617] Bluetooth: hci0: command 0x0406 tx timeout 04:26:14 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 26) 04:26:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x6, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000100)="5d3a738bf44db71beb02b79dfd43af7c2678c79fe9941e30", 0x18, 0x80000000}, {&(0x7f0000000140)="a7108676d4600194a49a2fcc4e2cea867e5ae3bc7d52b7a1299738d868762f880dee5c4c4e2c97676302ba51d69ea99b7357b0ac3763a037c89443e0f40587094c537bf84f27d8c1c4998ea6cdb7363bc1bc15628fba8a62d8a54a385573c6ebffe37a225ff48ef2f6f9b9867544ef92dd804e5b8457c997f6b73b2c5679c34beb78e7e0fbbba1ec9cb98a6298116ffed492c8112f4bd9a3dc6f638d57ceeffb728a4274b4deb12a2497edf32d182b818a65ababfc0406c2", 0xb8, 0x1f}, {&(0x7f0000000200)="d39ca4a17f04c49e5581300d5efea07b8d73c6a1d5827c8ab74ac45871604a75f6e0c1563490e408ecf88e8d0777baec41a05cb6c3644060361ce31b397964d974", 0x41, 0x700}, {&(0x7f0000000280), 0x0, 0x9}, {&(0x7f00000002c0)="becad73a78a8cc902ab04798d7c7dbbd86cdd2eab7eaeefd23b3e1c5943cf371620d8f025bb63878848fddf8d9bdf642feb26525f772bfd07b269683bf466518568fca1e451e91fcad73574194407623bc3a90928e1c5f6cb929180fa40c12ae266e7cc1c021d865c9303b3b281ef4cd65233b213117f7135830f29e6f829bfb15041b646a4c0f1b529dd277643bd68b20ae0ac3b8c3e64728698b64975972e37696907a66", 0xa5, 0x200}, {&(0x7f0000000380)="e888", 0x2, 0x4}, {&(0x7f00000003c0)="edb3012d59968abcfb4fdf1dfc7ae110337fa380b0117a73a41709b219089f4661b47bf0893a012845f48279d8560332766f56e2e988b170fe86cfa1", 0x3c, 0x6d5}, {&(0x7f0000000400)="540f644514caf2da0c6f95a4d9c9cfe5a1f71ce9e9fa7ff1ace656391be6221ca762e721576764a17bc65fe141b4fa23cfaf7e66afc5aaee5e6dd675c83f591f5284952b92d0957886de596cdba2683c6756ec8e2aefccb3eab8c0c8fba041c7129a59df398d4734b7b49744229f4897b1fb6ffb749b1329242493b69fcfe5d69b75a5799c87db59faac3bf34d3579a8bbd616f4652bf3252fe69dc2205408b3", 0xa0, 0x1}], 0x0, &(0x7f0000000580)={[{@utf8}, {@shortname_win95}, {@shortname_win95}], [{@hash}, {@seclabel}, {@appraise_type}, {@uid_lt}, {@hash}, {@permit_directio}]}) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/5, 0x5}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000780)=""/2, 0x2}], 0x5) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r3, 0x0, 0x0) 04:26:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd424820282280d5e87a333da13f116d3187a0fe1223e6cd12437eb02637faf511946ceae0b00cac8f"], 0x1b) 04:26:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, @in_args={0x1}}, './file0\x00'}) ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000000180)="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") tee(r1, r4, 0x20000000a, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = dup3(r0, r6, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r7, &(0x7f0000001180)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0xffe1}}}, 0x8) 04:26:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, 0x0, 0x0) 04:26:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0xfffffffffffffdef) 04:26:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:26:14 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x20, 0x2, 0x5, 0xff, 0x0, 0x7ff, 0x1020, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x1, @perf_config_ext={0x2, 0x2}, 0x4b31, 0x6, 0xf8000000, 0x3, 0x3, 0x2, 0x7, 0x0, 0x4}, 0x0, 0x5, r0, 0x1) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = gettid() tgkill(r2, r3, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='numa_maps\x00') r4 = gettid() tgkill(r1, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x7, 0x81, 0x1b, 0x0, 0x1, 0x2001, 0x19, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x4}, 0x51104, 0x20, 0x8, 0x8, 0x4, 0x1, 0x4, 0x0, 0x7, 0x0, 0x1}, r4, 0x7, r0, 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r5, 0x0, 0x7ffffffff000) 04:26:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) [ 942.917018] FAULT_INJECTION: forcing a failure. [ 942.917018] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 942.918820] CPU: 0 UID: 0 PID: 8343 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 942.918849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.918862] Call Trace: [ 942.918869] [ 942.918878] dump_stack_lvl+0xfa/0x120 [ 942.918908] should_fail_ex+0x4d7/0x5e0 [ 942.918937] should_fail_alloc_page+0xe0/0x110 [ 942.918970] prepare_alloc_pages+0x1eb/0x550 [ 942.918996] ? perf_trace_lock_acquire+0xc9/0x700 [ 942.919034] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 942.919067] ? __lock_acquire+0x694/0x1b70 [ 942.919098] ? css_rstat_updated+0x1b8/0x4d0 [ 942.919123] ? __pfx_css_rstat_updated+0x10/0x10 [ 942.919151] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 942.919184] ? find_held_lock+0x2b/0x80 [ 942.919206] ? perf_trace_lock_acquire+0xc9/0x700 [ 942.919247] ? __lock_acquire+0x694/0x1b70 [ 942.919278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 942.919314] ? policy_nodemask+0xeb/0x4e0 [ 942.919339] alloc_pages_mpol+0xed/0x340 [ 942.919360] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 942.919378] ? find_held_lock+0x2b/0x80 [ 942.919400] ? filemap_get_entry+0x1b1/0x3b0 [ 942.919430] ? lock_release+0xc8/0x290 [ 942.919471] folio_alloc_noprof+0x21/0x80 [ 942.919495] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 942.919524] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 942.919549] ? kasan_save_track+0x14/0x30 [ 942.919577] ? __kasan_kmalloc+0x7f/0x90 [ 942.919611] __filemap_get_folio_mpol+0x513/0x9a0 [ 942.919640] ? ioctx_alloc+0x147c/0x1e10 [ 942.919677] ioctx_alloc+0x6d2/0x1e10 [ 942.919722] ? __pfx_ioctx_alloc+0x10/0x10 [ 942.919751] ? lock_release+0xc8/0x290 [ 942.919780] ? __might_fault+0xe0/0x190 [ 942.919809] __x64_sys_io_setup+0xc8/0x1f0 [ 942.919842] do_syscall_64+0xbf/0x390 [ 942.919870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.919892] RIP: 0033:0x7f4e76c30b19 [ 942.919909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.919929] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 942.919950] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 942.919964] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 942.919977] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.919989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 942.920002] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 942.920034] 04:26:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:26:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x8, 0x4, 0x5d, 0x0, 0x4a, 0x40040, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x2, 0xffff}, 0x100, 0x1f, 0x98c, 0x8, 0x5, 0x6, 0x0, 0x0, 0x80000000, 0x0, 0x2}, r0, 0xffffffffffffffff, r0, 0xd) 04:26:14 executing program 6: r0 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000001c0)={0x0, 0xfc00000000000000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000000c0)=0x2, 0x4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_VS_SO_GET_TIMEOUT(r5, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r1, r8, 0x200000006, 0x0) setsockopt$bt_BT_SNDMTU(r8, 0x112, 0xc, &(0x7f0000001280)=0xfffb, 0x2) r9 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r10 = dup3(r1, r9, 0x0) write$bt_hci(r10, &(0x7f00000011c0)=ANY=[@ANYBLOB="013504020000ad01546086b8a44738181867aad0471e047db943b55f78166e3c04028508d2b53c4880441994b2eded31b5fbce5a46eab0064da0b3c02738c81d09c0de4a43d687de8bc49c50823cda8a4501ef3b637b94772b82038512fd5b9aee2aa8682598bc7e6f78d1f32ad76a075c784711a37a883b7cc834529725e0e836"], 0x178) 04:26:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x9}, {0x40, 0x19, 0x80}, {0x9, 0x3, 0x20, 0x8001}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:26:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x88}}, './file0\x00'}) tee(r2, r4, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = dup3(r0, r1, 0x0) write$bt_hci(r9, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40080, 0x0) write$P9_RWSTAT(r10, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) 04:26:14 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 27) 04:26:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) (fail_nth: 1) [ 943.246226] FAULT_INJECTION: forcing a failure. [ 943.246226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 04:26:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) [ 943.248101] CPU: 0 UID: 0 PID: 8371 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 943.248129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.248140] Call Trace: [ 943.248147] [ 943.248154] dump_stack_lvl+0xfa/0x120 [ 943.248183] should_fail_ex+0x4d7/0x5e0 [ 943.248210] should_fail_alloc_page+0xe0/0x110 [ 943.248241] prepare_alloc_pages+0x1eb/0x550 [ 943.248265] ? perf_trace_lock_acquire+0xc9/0x700 [ 943.248300] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 943.248331] ? __lock_acquire+0x694/0x1b70 [ 943.248360] ? css_rstat_updated+0x1b8/0x4d0 [ 943.248384] ? __pfx_css_rstat_updated+0x10/0x10 [ 943.248411] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 943.248441] ? find_held_lock+0x2b/0x80 [ 943.248482] ? perf_trace_lock_acquire+0xc9/0x700 [ 943.248521] ? __lock_acquire+0x694/0x1b70 [ 943.248549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 943.248584] ? policy_nodemask+0xeb/0x4e0 [ 943.248607] alloc_pages_mpol+0xed/0x340 [ 943.248626] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 943.248643] ? find_held_lock+0x2b/0x80 [ 943.248664] ? filemap_get_entry+0x1b1/0x3b0 [ 943.248692] ? lock_release+0xc8/0x290 [ 943.248724] folio_alloc_noprof+0x21/0x80 [ 943.248746] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 943.248773] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 943.248797] ? kasan_save_track+0x14/0x30 [ 943.248823] ? __kasan_kmalloc+0x7f/0x90 [ 943.248855] __filemap_get_folio_mpol+0x513/0x9a0 [ 943.248882] ? ioctx_alloc+0x147c/0x1e10 [ 943.248917] ioctx_alloc+0x6d2/0x1e10 [ 943.248959] ? __pfx_ioctx_alloc+0x10/0x10 [ 943.248986] ? lock_release+0xc8/0x290 [ 943.249014] ? __might_fault+0xe0/0x190 [ 943.249041] __x64_sys_io_setup+0xc8/0x1f0 [ 943.249077] do_syscall_64+0xbf/0x390 [ 943.249104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.249125] RIP: 0033:0x7f4e76c30b19 [ 943.249141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.249159] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 943.249179] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 943.249192] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 943.249204] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 943.249216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 943.249227] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 943.249258] [ 943.304406] FAULT_INJECTION: forcing a failure. [ 943.304406] name failslab, interval 1, probability 0, space 0, times 0 [ 943.306356] CPU: 1 UID: 0 PID: 8372 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 943.306386] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 943.306405] Call Trace: [ 943.306416] [ 943.306430] dump_stack_lvl+0xfa/0x120 [ 943.306472] should_fail_ex+0x4d7/0x5e0 [ 943.306503] should_failslab+0xc2/0x120 [ 943.306534] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 943.306574] ? __alloc_skb+0x2ab/0x370 [ 943.306605] ? kasan_unpoison+0x27/0x60 [ 943.306637] ? __alloc_skb+0x2ab/0x370 [ 943.306665] __alloc_skb+0x2ab/0x370 [ 943.306695] ? __pfx___alloc_skb+0x10/0x10 [ 943.306740] alloc_skb_with_frags+0x8f/0x7c0 [ 943.306766] ? __alloc_frozen_pages_noprof+0x296/0x1f20 [ 943.306803] sock_alloc_send_pskb+0x7cb/0x950 [ 943.306837] ? lock_acquire+0x15e/0x2f0 [ 943.306869] ? avc_has_perm_noaudit+0x59/0x3d0 [ 943.306903] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 943.306938] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 943.306969] ? avc_has_perm_noaudit+0x150/0x3d0 [ 943.307004] ? sock_has_perm+0x21c/0x2b0 [ 943.307036] ? __pfx_sock_has_perm+0x10/0x10 [ 943.307073] hci_sock_sendmsg+0x190/0x2270 [ 943.307102] ? __lock_acquire+0x694/0x1b70 [ 943.307135] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 943.307173] sock_write_iter+0x57e/0x610 [ 943.307201] ? __pfx_sock_write_iter+0x10/0x10 [ 943.307223] ? lock_release+0xc8/0x290 [ 943.307267] ? security_file_permission+0x22/0x90 [ 943.307302] vfs_write+0xbe9/0x1150 [ 943.307331] ? __pfx_sock_write_iter+0x10/0x10 [ 943.307355] ? __fget_files+0x34/0x3b0 [ 943.307381] ? __pfx_vfs_write+0x10/0x10 [ 943.307431] ksys_write+0x1ef/0x240 [ 943.307457] ? __pfx_ksys_write+0x10/0x10 [ 943.307494] do_syscall_64+0xbf/0x390 [ 943.307522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.307545] RIP: 0033:0x7f677090fb19 [ 943.307562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 943.307583] RSP: 002b:00007f676de85188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 943.307604] RAX: ffffffffffffffda RBX: 00007f6770a22f60 RCX: 00007f677090fb19 [ 943.307618] RDX: 0000000000000005 RSI: 0000000020000000 RDI: 0000000000000003 [ 943.307631] RBP: 00007f676de851d0 R08: 0000000000000000 R09: 0000000000000000 [ 943.307644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.307656] R13: 00007ffc7f281d3f R14: 00007f676de85300 R15: 0000000000022000 [ 943.307698] 04:26:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x2}}}, 0x6) 04:26:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) 04:26:15 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) write$P9_RLERROR(r2, &(0x7f0000000000)={0x9, 0x7, 0x2}, 0x9) tee(r0, r3, 0x0, 0x0) 04:26:15 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r4, 0x20000000a, 0x0) ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r5, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8fd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r6 = memfd_create(&(0x7f0000000040)='pagemap\x00', 0x5) pread64(r6, &(0x7f00000003c0)=""/4096, 0x1000, 0x3) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:26:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) (fail_nth: 2) 04:26:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="011f0800000000000000e3903fca96ad7dae80d158f455d729e842cd76500ef377fb91bd67700e347acc7fecce4894020ebc73f9f121e117ed6f85b70c79656e103e95b1eacdccc891a2e7517cc3f901762c33cb517277c5cef4081fe8f36760053adf01c9667d728f03139fad1ca9446de4bd6d8861be6b1a497ec3090c76ba2778fe8564aa98e40f7f7e06ae5b6c4fac47dbd2facc46ead30b4d5f74f3b28da889080aa11269b2bd684e385a0000f082214c1c67423ca2bc865e8ab1e322954d0bd3ffb3f50d"], 0x6) [ 944.894592] Bluetooth: hci0: command 0x0406 tx timeout [ 946.942577] Bluetooth: hci0: command 0x0406 tx timeout [ 948.990608] Bluetooth: hci0: command 0x0406 tx timeout [ 951.038605] Bluetooth: hci0: command 0x0406 tx timeout 04:26:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = accept4(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80, 0x0) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f00000001c0)="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") r3 = dup3(r0, r1, 0x0) write$bt_hci(r3, &(0x7f00000011c0)=ANY=[@ANYBLOB="011f040200002252fdf3e0bea4f606ade70f203a472e258317dde7b5009a5fc42ff916e34b4045933d3be713b57ba5f82fd1d4751099b75e0947ac1fb9c3a84e59f58d3432e3fbfffe36d18632ae6f0300000000000000ee043799ad7f96f7cbf17c0e215b893b37de6f1549"], 0x178) 04:26:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) (fail_nth: 3) 04:26:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x4}}}, 0x6) 04:26:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) recvmmsg(r3, &(0x7f0000003880)=[{{&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000000)=""/3, 0x3}], 0x5, &(0x7f0000000480)=""/78, 0x4e}, 0x3}, {{&(0x7f0000000500)=@nl=@proc, 0x80, &(0x7f0000000900)=[{&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/202, 0xca}], 0x4, &(0x7f0000000940)=""/54, 0x36}, 0x3}, {{&(0x7f0000000980)=@ax25={{0x3, @null}, [@netrom, @bcast, @default, @null, @rose, @null, @netrom, @null]}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/12, 0xc}, {&(0x7f0000001a40)=""/116, 0x74}], 0x3, &(0x7f0000001b00)=""/86, 0x56}, 0xe9}, {{&(0x7f0000001b80)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c00)=""/249, 0xf9}, {&(0x7f0000001d00)=""/3, 0x3}], 0x2, &(0x7f0000001d80)=""/220, 0xdc}}, {{&(0x7f0000001e80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f00)=""/74, 0x4a}, {&(0x7f0000001f80)=""/127, 0x7f}], 0x2, &(0x7f0000002040)=""/4096, 0x1000}}, {{&(0x7f0000003040)=@tipc=@id, 0x80, &(0x7f0000003480)=[{&(0x7f00000030c0)=""/144, 0x90}, {&(0x7f0000003180)=""/54, 0x36}, {&(0x7f00000031c0)=""/182, 0xb6}, {&(0x7f0000003280)=""/59, 0x3b}, {&(0x7f00000032c0)=""/60, 0x3c}, {&(0x7f0000003300)=""/73, 0x49}, {&(0x7f0000003380)=""/223, 0xdf}], 0x7, &(0x7f0000003500)=""/112, 0x70}, 0xfff}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003580)=""/195, 0xc3}, {&(0x7f0000003680)=""/226, 0xe2}, {&(0x7f0000003780)=""/22, 0x16}], 0x3, &(0x7f0000003800)=""/91, 0x5b}, 0xffffffff}], 0x7, 0x10002, &(0x7f0000003a40)) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = dup3(r0, r4, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:26:24 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@l2tp, &(0x7f00000000c0)=0x80) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2001) r1 = getpgrp(0x0) r2 = gettid() tgkill(r1, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffa}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r3, 0x0, 0x7ffffffff000) 04:26:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@fuse={0xc, 0x81, {0xfffffffe, 0x9, 0x8000}}, 0x8000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup3(r4, r5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000200)=0xe8) recvmsg$unix(r8, &(0x7f0000001a40)={&(0x7f00000012c0), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001340)=""/67, 0x43}, {&(0x7f0000001400)=""/214, 0xd6}, {&(0x7f0000001500)=""/229, 0xe5}, {&(0x7f0000001600)=""/102, 0x66}, {&(0x7f0000001680)=""/216, 0xd8}, {&(0x7f0000001780)=""/212, 0xd4}, {&(0x7f0000001880)=""/67, 0x43}, {&(0x7f0000001900)=""/71, 0x47}], 0x8, &(0x7f0000001a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x40}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001a80)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, 'O.\x9b{/'}}, {@afid={'afid', 0x3d, 0x7}}, {@access_user}, {@msize={'msize', 0x3d, 0x4}}, {@cachetag={'cachetag', 0x3d, '@\\^-%&,::'}}, {@noextend}, {@cache_loose}, {@msize}, {@fscache}], [{@smackfsroot}, {@fsname={'fsname', 0x3d, '\x00'}}, {@euid_lt={'euid<', r9}}, {@uid_eq={'uid', 0x3d, r10}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '@\''}}, {@euid_lt={'euid<', 0xee01}}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x100}}]}}) tee(r4, r7, 0x20000000a, 0x0) ioctl$LOOP_CLR_FD(r7, 0x4c01) 04:26:24 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 28) [ 952.846044] FAULT_INJECTION: forcing a failure. [ 952.846044] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 952.847061] CPU: 0 UID: 0 PID: 8420 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 952.847077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 952.847084] Call Trace: [ 952.847089] [ 952.847093] dump_stack_lvl+0xfa/0x120 [ 952.847112] should_fail_ex+0x4d7/0x5e0 [ 952.847128] should_fail_alloc_page+0xe0/0x110 [ 952.847147] prepare_alloc_pages+0x1eb/0x550 [ 952.847162] ? perf_trace_lock_acquire+0xc9/0x700 [ 952.847183] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 952.847201] ? __lock_acquire+0x694/0x1b70 [ 952.847218] ? css_rstat_updated+0x1b8/0x4d0 [ 952.847233] ? __pfx_css_rstat_updated+0x10/0x10 [ 952.847248] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 952.847266] ? find_held_lock+0x2b/0x80 [ 952.847277] ? perf_trace_lock_acquire+0xc9/0x700 [ 952.847300] ? __lock_acquire+0x694/0x1b70 [ 952.847316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 952.847337] ? policy_nodemask+0xeb/0x4e0 [ 952.847350] alloc_pages_mpol+0xed/0x340 [ 952.847362] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 952.847372] ? find_held_lock+0x2b/0x80 [ 952.847383] ? filemap_get_entry+0x1b1/0x3b0 [ 952.847400] ? lock_release+0xc8/0x290 [ 952.847418] folio_alloc_noprof+0x21/0x80 [ 952.847431] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 952.847447] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 952.847465] ? kasan_save_track+0x14/0x30 [ 952.847480] ? __kasan_kmalloc+0x7f/0x90 [ 952.847498] __filemap_get_folio_mpol+0x513/0x9a0 [ 952.847514] ? ioctx_alloc+0x147c/0x1e10 [ 952.847534] ioctx_alloc+0x6d2/0x1e10 [ 952.847558] ? __pfx_ioctx_alloc+0x10/0x10 [ 952.847574] ? lock_release+0xc8/0x290 [ 952.847590] ? __might_fault+0xe0/0x190 [ 952.847606] __x64_sys_io_setup+0xc8/0x1f0 [ 952.847624] do_syscall_64+0xbf/0x390 [ 952.847640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.847652] RIP: 0033:0x7f4e76c30b19 [ 952.847662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 952.847675] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 952.847688] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 952.847696] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 952.847703] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 952.847710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 952.847717] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 952.847734] 04:26:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895aeb9ae6fa8eb318158071e0c20fecd42482028"], 0x1b) 04:26:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="019f04020000"], 0x6) 04:26:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x5}}}, 0x6) 04:26:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) (fail_nth: 4) 04:26:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000f0ff"], 0x178) 04:26:24 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x7, 0x80, 0x7b, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40240, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x80000000, 0x9, 0x8}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x20, 0x2, 0x7, 0x0, 0x5, 0x59000, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x231b, 0x78c2, 0xfffff971, 0x4, 0x942, 0x8, 0x6, 0x0, 0x6, 0x0, 0x40}, 0x0, 0xd, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r2, 0x0, 0x7ffffffff000) clock_gettime(0x0, &(0x7f00000056c0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000005480)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/234, 0xea}, {&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000580)=""/78, 0x4e}], 0x5, &(0x7f0000000680)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)=""/167, 0xa7}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/40, 0x28}], 0x3, &(0x7f00000009c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000000a80), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000b00)=""/79, 0x4f}, {&(0x7f0000000b80)=""/180, 0xb4}, {&(0x7f0000000c40)=""/75, 0x4b}, {&(0x7f0000000cc0)=""/197, 0xc5}, {&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/54, 0x36}, {&(0x7f0000001e40)=""/195, 0xc3}], 0x8, &(0x7f0000001fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002080), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/156, 0x9c}], 0x1, &(0x7f0000002200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000002280)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000002300)=""/207, 0xcf}, {&(0x7f0000002400)=""/243, 0xf3}], 0x2, &(0x7f0000002540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{&(0x7f0000002640), 0x6e, &(0x7f0000002a00)=[{&(0x7f00000026c0)=""/80, 0x50}, {&(0x7f0000002740)=""/201, 0xc9}, {&(0x7f0000002840)=""/178, 0xb2}, {&(0x7f0000002900)=""/29, 0x1d}, {&(0x7f0000002940)=""/154, 0x9a}], 0x5, &(0x7f0000002a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002b40)=""/194, 0xc2}, {&(0x7f0000002c40)=""/58, 0x3a}, {&(0x7f0000002c80)=""/40, 0x28}, {&(0x7f0000002cc0)=""/208, 0xd0}, {&(0x7f0000002dc0)=""/252, 0xfc}], 0x5, &(0x7f0000002f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000002f80)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003000)=""/239, 0xef}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2, &(0x7f0000005780)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000c0c289510000"], 0x30}}, {{&(0x7f0000004180)=@abs, 0x6e, &(0x7f0000005400)=[{&(0x7f0000004200)=""/5, 0x5}, {&(0x7f0000004240)=""/73, 0x49}, {&(0x7f00000042c0)=""/7, 0x7}, {&(0x7f0000004300)=""/199, 0xc7}, {&(0x7f0000004400)=""/4096, 0x1000}], 0x5}}], 0x9, 0x0, &(0x7f0000005700)={r3, r4+60000000}) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000005740)) fcntl$setsig(r0, 0xa, 0x2f) 04:26:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) r5 = dup3(r0, r1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setstatus(r6, 0x4, 0xc00) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x5, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x80fd83485e0ad2e6) write$bt_hci(r5, &(0x7f0000000080)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x81, 0x88, 0x6, 0x8ead}}}, 0xb) [ 953.086663] Bluetooth: hci0: command 0x0406 tx timeout [ 955.134601] Bluetooth: hci0: command 0x0406 tx timeout [ 957.182595] Bluetooth: hci0: command 0x0406 tx timeout [ 959.230580] Bluetooth: hci0: command 0x0406 tx timeout [ 961.278597] Bluetooth: hci0: command 0x0406 tx timeout [ 963.326573] Bluetooth: hci0: command 0x0406 tx timeout 04:26:36 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 29) 04:26:36 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000180)="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") r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="014dcd146ccd"], 0x178) 04:26:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x39) close(r2) r3 = dup3(r0, r1, 0x0) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:26:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x42d87, &(0x7f00000000c0)={0x0, 0xe61c, 0x0, 0x3, 0x33}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d706f6c3d69ee7465726c656176653d72656c61746976653a30ac6769643de2d58a61d56a5805355346220bf8cbbaf3abcd95ab02a42d", @ANYRESHEX=r2, @ANYBLOB="0ceb7fde03882e2d9f411bb4716a97331c9ecff01654a8ed61d023ce74229cfcd2f43d448fe5e4f1b34bcdfcaf18cca59906be0b456d9ab9b5238818f79051e3df70fe5dc0797d23d58201da0bde954bb0ceffdcef640917b2d583ba48904b7580f18098290b52a40268e4fe3b98cb2952d4b5283530540a8e6a72374e380a5de5744bb5c4c1bafe5ac81f0f9abdcf4a43653be94bb30b3fccc73108e7102e5e2399193f"]) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x4}, [{0x2, 0x0, 0xffffffffffffffff}], {}, [{0x8, 0x0, r2}], {0x10, 0x4}, {0x20, 0x6}}, 0x34, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r3, 0x0, 0x7ffffffff000) 04:26:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x6}}}, 0x6) 04:26:36 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:26:36 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:36 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) (fail_nth: 5) [ 964.220869] FAULT_INJECTION: forcing a failure. [ 964.220869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 964.222760] CPU: 0 UID: 0 PID: 8465 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 964.222791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 964.222804] Call Trace: [ 964.222811] [ 964.222819] dump_stack_lvl+0xfa/0x120 [ 964.222849] should_fail_ex+0x4d7/0x5e0 [ 964.222877] should_fail_alloc_page+0xe0/0x110 [ 964.222909] prepare_alloc_pages+0x1eb/0x550 [ 964.222935] ? perf_trace_lock_acquire+0xc9/0x700 [ 964.222973] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 964.223006] ? __lock_acquire+0x694/0x1b70 [ 964.223037] ? css_rstat_updated+0x1b8/0x4d0 [ 964.223062] ? __pfx_css_rstat_updated+0x10/0x10 [ 964.223091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 964.223126] ? find_held_lock+0x2b/0x80 [ 964.223150] ? perf_trace_lock_acquire+0xc9/0x700 [ 964.223191] ? __lock_acquire+0x694/0x1b70 [ 964.223222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 964.223260] ? policy_nodemask+0xeb/0x4e0 [ 964.223285] alloc_pages_mpol+0xed/0x340 [ 964.223306] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 964.223324] ? find_held_lock+0x2b/0x80 [ 964.223345] ? filemap_get_entry+0x1b1/0x3b0 [ 964.223375] ? lock_release+0xc8/0x290 [ 964.223408] folio_alloc_noprof+0x21/0x80 [ 964.223431] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 964.223471] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 964.223509] ? kasan_save_track+0x14/0x30 [ 964.223552] ? __kasan_kmalloc+0x7f/0x90 [ 964.223599] __filemap_get_folio_mpol+0x513/0x9a0 [ 964.223628] ? ioctx_alloc+0x147c/0x1e10 [ 964.223666] ioctx_alloc+0x6d2/0x1e10 [ 964.223710] ? __pfx_ioctx_alloc+0x10/0x10 [ 964.223739] ? lock_release+0xc8/0x290 [ 964.223768] ? __might_fault+0xe0/0x190 [ 964.223798] __x64_sys_io_setup+0xc8/0x1f0 [ 964.223831] do_syscall_64+0xbf/0x390 [ 964.223859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.223881] RIP: 0033:0x7f4e76c30b19 [ 964.223898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 964.223919] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 964.223940] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 964.223954] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 964.223967] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 964.223979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 964.223992] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 964.224025] [ 964.243284] FAULT_INJECTION: forcing a failure. [ 964.243284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.262612] CPU: 1 UID: 0 PID: 8468 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 964.262644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 964.262658] Call Trace: [ 964.262666] [ 964.262675] dump_stack_lvl+0xfa/0x120 [ 964.262708] should_fail_ex+0x4d7/0x5e0 [ 964.262739] _copy_from_iter+0x1dc/0x1660 [ 964.262766] ? lock_acquire+0x15e/0x2f0 [ 964.262799] ? __virt_addr_valid+0x1c6/0x5d0 [ 964.262824] ? find_held_lock+0x2b/0x80 [ 964.262850] ? __pfx__copy_from_iter+0x10/0x10 [ 964.262872] ? lock_release+0xc8/0x290 [ 964.262908] ? __virt_addr_valid+0x100/0x5d0 [ 964.262934] ? __check_object_size+0x579/0x880 [ 964.262966] hci_sock_sendmsg+0x402/0x2270 [ 964.262997] ? __lock_acquire+0x694/0x1b70 [ 964.263032] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 964.263073] sock_write_iter+0x57e/0x610 [ 964.263103] ? __pfx_sock_write_iter+0x10/0x10 [ 964.263128] ? lock_release+0xc8/0x290 [ 964.263175] ? security_file_permission+0x22/0x90 [ 964.263214] vfs_write+0xbe9/0x1150 [ 964.263245] ? __pfx_sock_write_iter+0x10/0x10 [ 964.263271] ? __fget_files+0x34/0x3b0 [ 964.263298] ? __pfx_vfs_write+0x10/0x10 [ 964.263352] ksys_write+0x1ef/0x240 [ 964.263380] ? __pfx_ksys_write+0x10/0x10 [ 964.263420] do_syscall_64+0xbf/0x390 [ 964.263450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.263481] RIP: 0033:0x7f677090fb19 [ 964.263499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 964.263521] RSP: 002b:00007f676de85188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 964.263543] RAX: ffffffffffffffda RBX: 00007f6770a22f60 RCX: 00007f677090fb19 [ 964.263558] RDX: 0000000000000005 RSI: 0000000020000000 RDI: 0000000000000003 [ 964.263572] RBP: 00007f676de851d0 R08: 0000000000000000 R09: 0000000000000000 [ 964.263586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.263599] R13: 00007ffc7f281d3f R14: 00007f676de85300 R15: 0000000000022000 [ 964.263634] [ 964.318866] tmpfs: Bad value for 'mpol' [ 964.335944] tmpfs: Bad value for 'mpol' [ 965.374625] Bluetooth: hci0: command 0x0406 tx timeout [ 967.423502] Bluetooth: hci0: command 0x0406 tx timeout [ 969.470509] Bluetooth: hci0: command 0x0406 tx timeout [ 971.519534] Bluetooth: hci0: command 0x0406 tx timeout [ 973.566508] Bluetooth: hci0: command 0x0406 tx timeout 04:26:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:26:47 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 30) 04:26:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x8}}}, 0x6) 04:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:26:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000480)={{r0}, r2, 0x9, @inherit={0x50, &(0x7f0000001480)={0x0, 0x1, 0x40, 0x2, {0x1a, 0x7fffffff, 0x20, 0x1, 0x7f}, [0x8]}}, @devid}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r4, &(0x7f0000000180)={0x1, @write_local_name={{0xc13, 0xf8}, {"526bf02e83b8a65e366e4715f1f97aea512b0f02e948b3f04f9c79745105ccfdd50cb47b6cc3426a886e990ceba39b25a71af64ce56308f9f1a7b09ced56642c32c75b4f8cdc37ed9d0a4b224840f506004abe8d76d9503d04bfde1a353ea888d7544fdb801a936a606253b39fa2eb7d4dc4d9ea5d5b30f607a2ee1a74f75d2651fecf54190bc6f5e531d9068b02e0cd3bc8dc24bd03269d27674ebd317329d675079ac4ae17a40efb1215cdcde9346a50e3c810d3c82e6c57a66d2cae69e57315a8236a7885dc66a6104ec724e17d500ce02bbbe31b2dea1aeb27813eb01b22357995104f68923ed60405aff5198a941e9b37af6e0500"}}}, 0xfc) 04:26:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) (fail_nth: 6) [ 975.267423] FAULT_INJECTION: forcing a failure. [ 975.267423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.268403] CPU: 1 UID: 0 PID: 8489 Comm: syz-executor.3 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 975.268427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.268445] Call Trace: [ 975.268461] [ 975.268468] dump_stack_lvl+0xfa/0x120 [ 975.268487] should_fail_ex+0x4d7/0x5e0 [ 975.268504] _copy_to_user+0x32/0xd0 [ 975.268520] simple_read_from_buffer+0xe0/0x180 [ 975.268536] proc_fail_nth_read+0x18a/0x240 [ 975.268554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.268571] ? security_file_permission+0x22/0x90 [ 975.268588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 975.268604] vfs_read+0x1eb/0xc70 [ 975.268623] ? __pfx_vfs_read+0x10/0x10 [ 975.268637] ? lock_release+0xc8/0x290 [ 975.268657] ? __fget_files+0x20d/0x3b0 [ 975.268678] ksys_read+0x121/0x240 [ 975.268692] ? __pfx_ksys_read+0x10/0x10 [ 975.268712] do_syscall_64+0xbf/0x390 [ 975.268728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.268741] RIP: 0033:0x7f67708c269c [ 975.268750] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 975.268761] RSP: 002b:00007f676de85170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 975.268773] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f67708c269c [ 975.268781] RDX: 000000000000000f RSI: 00007f676de851e0 RDI: 0000000000000005 [ 975.268788] RBP: 00007f676de851d0 R08: 0000000000000000 R09: 0000000000000000 [ 975.268795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.268801] R13: 00007ffc7f281d3f R14: 00007f676de85300 R15: 0000000000022000 [ 975.268820] [ 975.295618] FAULT_INJECTION: forcing a failure. [ 975.295618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 975.296640] CPU: 1 UID: 0 PID: 8494 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 975.296655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.296661] Call Trace: [ 975.296664] [ 975.296669] dump_stack_lvl+0xfa/0x120 [ 975.296684] should_fail_ex+0x4d7/0x5e0 04:26:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x20000000a, 0x0) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="6995d874f476240f389e5d754c01a43ef8aabaa9", 0x14}], 0x80408, &(0x7f0000000140)={[{@huge_never}], [{@permit_directio}, {@context={'context', 0x3d, 'staff_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '*('}}, {@dont_measure}, {@obj_type={'obj_type', 0x3d, 'pagemap\x00'}}, {@obj_type={'obj_type', 0x3d, ':'}}]}) dup2(r0, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r4, 0x0, 0x7ffffffff000) [ 975.296698] should_fail_alloc_page+0xe0/0x110 [ 975.296716] prepare_alloc_pages+0x1eb/0x550 [ 975.296730] ? perf_trace_lock_acquire+0xc9/0x700 [ 975.296751] __alloc_frozen_pages_noprof+0x17f/0x1f20 04:26:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa1107b19188846895ae"], 0x1b) [ 975.296768] ? __lock_acquire+0x694/0x1b70 [ 975.296786] ? css_rstat_updated+0x1b8/0x4d0 [ 975.296800] ? __pfx_css_rstat_updated+0x10/0x10 [ 975.296815] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 975.296840] ? find_held_lock+0x2b/0x80 [ 975.296852] ? perf_trace_lock_acquire+0xc9/0x700 [ 975.296874] ? __lock_acquire+0x694/0x1b70 [ 975.296891] ? __sanitizer_cov_trace_switch+0x54/0x90 04:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="011f0402000045eef1553b0f28bb03fae8163cbe4b6ad60247c76b8689f3b4244d55f32c5f5b5fd4eb922de50d4be2fd749d737c7cb6a88364d067af40960700c3569d64de983a16b1b7a398374d1abd0d9cba7e5c4a3e9332ebecd729d3d18f58ee395244887496838db27082cbb4e2797fb42246d16201d3249d711a617e8ab821fd0f14d9ed203e907f97f10e101e2b8d2a3905d90d0274b85f6e8669b7072b19086bb0602a6795f8df1c80ce7bb56ebbd64715e7111803ceffc104fcdb73fc5c23e503ba5b2cd5b6df253d3e"], 0x6) [ 975.296913] ? policy_nodemask+0xeb/0x4e0 [ 975.296927] alloc_pages_mpol+0xed/0x340 [ 975.296938] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 975.296948] ? find_held_lock+0x2b/0x80 04:26:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x500}}}, 0x6) [ 975.296959] ? filemap_get_entry+0x1b1/0x3b0 [ 975.296976] ? lock_release+0xc8/0x290 [ 975.296995] folio_alloc_noprof+0x21/0x80 [ 975.297008] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 975.297024] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 04:26:47 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 31) [ 975.297037] ? kasan_save_track+0x14/0x30 [ 975.297053] ? __kasan_kmalloc+0x7f/0x90 [ 975.297071] __filemap_get_folio_mpol+0x513/0x9a0 [ 975.297087] ? ioctx_alloc+0x147c/0x1e10 [ 975.297107] ioctx_alloc+0x6d2/0x1e10 [ 975.297131] ? __pfx_ioctx_alloc+0x10/0x10 [ 975.297147] ? lock_release+0xc8/0x290 [ 975.297163] ? __might_fault+0xe0/0x190 [ 975.297182] __x64_sys_io_setup+0xc8/0x1f0 [ 975.297200] do_syscall_64+0xbf/0x390 [ 975.297214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.297226] RIP: 0033:0x7f4e76c30b19 [ 975.297234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.297246] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 975.297257] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 975.297265] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 975.297272] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 04:26:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x100) [ 975.297279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.297286] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 975.297304] [ 975.434045] FAULT_INJECTION: forcing a failure. [ 975.434045] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 975.435080] CPU: 1 UID: 0 PID: 8510 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 975.435097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.435104] Call Trace: [ 975.435109] [ 975.435114] dump_stack_lvl+0xfa/0x120 [ 975.435133] should_fail_ex+0x4d7/0x5e0 [ 975.435150] should_fail_alloc_page+0xe0/0x110 [ 975.435169] prepare_alloc_pages+0x1eb/0x550 [ 975.435184] ? perf_trace_lock_acquire+0xc9/0x700 [ 975.435205] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 975.435223] ? __lock_acquire+0x694/0x1b70 [ 975.435240] ? css_rstat_updated+0x1b8/0x4d0 [ 975.435255] ? __pfx_css_rstat_updated+0x10/0x10 [ 975.435270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 975.435288] ? find_held_lock+0x2b/0x80 [ 975.435301] ? perf_trace_lock_acquire+0xc9/0x700 [ 975.435323] ? __lock_acquire+0x694/0x1b70 [ 975.435340] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 975.435361] ? policy_nodemask+0xeb/0x4e0 [ 975.435374] alloc_pages_mpol+0xed/0x340 [ 975.435385] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 975.435395] ? find_held_lock+0x2b/0x80 [ 975.435407] ? filemap_get_entry+0x1b1/0x3b0 [ 975.435424] ? lock_release+0xc8/0x290 [ 975.435442] folio_alloc_noprof+0x21/0x80 [ 975.435460] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 975.435476] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 975.435489] ? kasan_save_track+0x14/0x30 [ 975.435505] ? __kasan_kmalloc+0x7f/0x90 [ 975.435523] __filemap_get_folio_mpol+0x513/0x9a0 [ 975.435539] ? ioctx_alloc+0x147c/0x1e10 [ 975.435560] ioctx_alloc+0x6d2/0x1e10 [ 975.435584] ? __pfx_ioctx_alloc+0x10/0x10 [ 975.435600] ? lock_release+0xc8/0x290 [ 975.435615] ? __might_fault+0xe0/0x190 [ 975.435632] __x64_sys_io_setup+0xc8/0x1f0 [ 975.435649] do_syscall_64+0xbf/0x390 [ 975.435666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.435678] RIP: 0033:0x7f4e76c30b19 [ 975.435687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.435699] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 975.435710] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 975.435718] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 975.435725] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 975.435732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.435739] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 975.435756] 04:26:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) 04:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) r3 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8001, 0x5, &(0x7f0000001240)=[{&(0x7f0000000180)="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", 0x1000, 0x4}, {&(0x7f00000000c0)="b42009f2c740aa2ee26fa24c", 0xc, 0x9}, {&(0x7f0000001180)="6e86a4b0e98c07f907ca075fbb59e27b42", 0x11, 0x10001}, {&(0x7f00000011c0)="c1705c32fc115c418acb44a3f81f9a9554a29cafbfa57e7799605fde4061dc2eb8802da73942ccbcdebb3576ccf557", 0x2f, 0x71c8}, {&(0x7f0000001200)="242e6d8054e2d7ee425d5810b37cbc4da6a3e2b3fa73d642df3072f9276e60a0883aa7d6ad9c61725174f3f504f1c1e510eafeb52a", 0x35, 0x80000001}], 0x1, &(0x7f00000012c0)={[{@fat=@errors_remount}, {@dots}, {}, {@fat=@gid}, {@dots}], [{@seclabel}, {@fsname={'fsname', 0x3d, '\'#'}}, {@hash}, {@dont_measure}, {@audit}, {@fsuuid={'fsuuid', 0x3d, {[0xf1, 0x62, 0x3, 0x32, 0x34, 0x0, 0x37, 0x36], 0x2d, [0x35, 0x65, 0x30, 0x61], 0x2d, [0x0, 0x35, 0x39, 0x31], 0x2d, [0x36, 0x36, 0x32, 0x34], 0x2d, [0x38, 0x62, 0x37, 0x35, 0x36, 0x6, 0x39, 0x53]}}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}) dup3(r3, r1, 0x80000) 04:26:47 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:47 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 32) 04:26:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x2, @write_sc_support={{0xc7a, 0x1}}}, 0x5) 04:26:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0x600}}}, 0x6) [ 975.614534] Bluetooth: hci0: command 0x0406 tx timeout 04:26:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)) read$char_usb(0xffffffffffffffff, 0x0, 0x7ffffffff000) 04:26:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000180)="74b56340aa579ac116ef5d3b90383b0dcf4ea1ef8d1bd6b6ae03427efc75f5ea476db8d3372caace7bc4839250dc106a937c85ac4765882442a77f07857abdcff71b02a0f8dc4aca3330c8e4dd9395995d43b9d6ee2f08b4f4b6f59243b418c0deeeb715df8e737b10edd711c0495dbc2380f5c8d65f76b7ac5435e9ddd3606b78b864f82e34c12068f922e64b0bc3332e4c0503e0e4e288850aadf791576e9ccdf79f768ad8945254bb1db4453f70298bb0e9f8d8863a72446445117108e113aea640d3456192f864653353bbdda19727aa57596b0c37460220904d0c8230e9484a8bc5663b67") bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x68) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x69, 0x502680) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:26:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xfffffd78, 0x3, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x8041}, 0x20004081) tee(r1, r4, 0x20000000a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000000)={'vlan0\x00'}) r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = dup3(r0, r6, 0x0) write$bt_hci(r7, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) [ 975.641195] FAULT_INJECTION: forcing a failure. [ 975.641195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 975.642259] CPU: 1 UID: 0 PID: 8530 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 975.642275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.642283] Call Trace: [ 975.642288] [ 975.642293] dump_stack_lvl+0xfa/0x120 [ 975.642312] should_fail_ex+0x4d7/0x5e0 [ 975.642329] should_fail_alloc_page+0xe0/0x110 [ 975.642348] prepare_alloc_pages+0x1eb/0x550 [ 975.642364] ? perf_trace_lock_acquire+0xc9/0x700 [ 975.642386] __alloc_frozen_pages_noprof+0x17f/0x1f20 [ 975.642404] ? __lock_acquire+0x694/0x1b70 [ 975.642421] ? css_rstat_updated+0x1b8/0x4d0 [ 975.642436] ? __pfx_css_rstat_updated+0x10/0x10 [ 975.642451] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 975.642474] ? find_held_lock+0x2b/0x80 [ 975.642486] ? perf_trace_lock_acquire+0xc9/0x700 [ 975.642509] ? __lock_acquire+0x694/0x1b70 [ 975.642525] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 975.642546] ? policy_nodemask+0xeb/0x4e0 [ 975.642560] alloc_pages_mpol+0xed/0x340 [ 975.642571] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 975.642581] ? find_held_lock+0x2b/0x80 [ 975.642593] ? filemap_get_entry+0x1b1/0x3b0 [ 975.642610] ? lock_release+0xc8/0x290 [ 975.642630] folio_alloc_noprof+0x21/0x80 [ 975.642646] filemap_alloc_folio_noprof.part.0+0x372/0x410 [ 975.642663] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 975.642677] ? kasan_save_track+0x14/0x30 [ 975.642692] ? __kasan_kmalloc+0x7f/0x90 [ 975.642711] __filemap_get_folio_mpol+0x513/0x9a0 [ 975.642726] ? ioctx_alloc+0x147c/0x1e10 [ 975.642747] ioctx_alloc+0x6d2/0x1e10 [ 975.642771] ? __pfx_ioctx_alloc+0x10/0x10 [ 975.642787] ? lock_release+0xc8/0x290 [ 975.642803] ? __might_fault+0xe0/0x190 [ 975.642819] __x64_sys_io_setup+0xc8/0x1f0 [ 975.642837] do_syscall_64+0xbf/0x390 [ 975.642853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.642865] RIP: 0033:0x7f4e76c30b19 [ 975.642875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.642887] RSP: 002b:00007f4e741a6188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 975.642898] RAX: ffffffffffffffda RBX: 00007f4e76d43f60 RCX: 00007f4e76c30b19 [ 975.642906] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 975.642913] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 975.642921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.642928] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 975.642945] [ 977.662520] Bluetooth: hci0: command 0x0406 tx timeout [ 979.710550] Bluetooth: hci0: command 0x0406 tx timeout [ 981.758559] Bluetooth: hci0: command 0x0406 tx timeout [ 983.806566] Bluetooth: hci0: command 0x0406 tx timeout [ 985.854524] Bluetooth: hci0: command 0x0406 tx timeout 04:26:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000915ecd47787964cdbac39d2c406c4b3a79f7b0a6abe9ce1103a0e57f535780000000000000000000"], 0x178) 04:26:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x6, 0x0, [0x0, 0x1, 0x401, 0x7, 0x20], [0xffff, 0xd62, 0x7b, 0x3, 0x584, 0x800, 0x7, 0x6, 0x7ca, 0xfffffffffffffffb, 0x3, 0x923a, 0x4, 0x8001, 0x1, 0x8001, 0x0, 0x5048, 0x9, 0xaa8, 0xeafc0000, 0x8, 0x80000000, 0x9, 0x53f, 0xa31, 0x2, 0x8, 0x6, 0x4, 0x5, 0x9, 0x2, 0x7f, 0xfffffffffffffffb, 0xbc, 0x2, 0x3, 0x7, 0x401, 0x100000000, 0x8, 0x0, 0x800, 0x2, 0x5, 0x2, 0x401, 0x101, 0x68, 0xfffffffffffffffb, 0x1, 0x2, 0x5, 0x2, 0xffff, 0x3, 0x2, 0xffffffffffffffe0, 0x0, 0xc96f, 0x0, 0x4, 0x9, 0x0, 0x7, 0x0, 0x1ac0000000, 0x0, 0x0, 0x5, 0x4, 0x101, 0x7, 0x3, 0x80000001, 0x7, 0x7fffffff, 0x0, 0x2, 0x7, 0x1, 0x1, 0x80000001, 0xff, 0x73, 0x7, 0xafa, 0x3, 0x3, 0x3, 0x6, 0x9, 0x7, 0x101, 0xfff, 0x6, 0x9, 0x5, 0x9, 0x3ff, 0xcf5, 0x80000001, 0x80000000, 0x8, 0x81, 0x1, 0x0, 0x7fff, 0x10001, 0x1, 0xffffffffffffff49, 0xe7, 0x1, 0x8f, 0x8, 0x3, 0x663, 0x1, 0x5, 0x9a1]}) 04:26:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x3) 04:26:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x5, @write_sc_support={{0xc7a, 0x1}}}, 0x5) 04:26:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x6) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xd7) 04:26:58 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 33) 04:26:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:26:58 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 34) 04:26:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x1e4fea9e215aa521}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000118de000054738e7617dafbc6ac75a2f0161ed3a3c01cdfb607cc1e68124fd4102869c7e660c61c34"], 0x178) 04:26:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aaaaaaaaaa"], 0x1b) 04:26:58 executing program 2: syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f3c670004"], 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r3, r4, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xe600, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x200000004, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) tee(r5, r7, 0x20000000a, 0x0) dup2(0xffffffffffffffff, r5) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) 04:26:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:26:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x1b9) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:26:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x2}}}, 0x5) 04:26:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x404) [ 987.903521] Bluetooth: hci0: command 0x0406 tx timeout [ 989.950536] Bluetooth: hci0: command 0x0406 tx timeout [ 991.998519] Bluetooth: hci0: command 0x0406 tx timeout [ 994.046503] Bluetooth: hci0: command 0x0406 tx timeout [ 996.094594] Bluetooth: hci0: command 0x0406 tx timeout 04:27:08 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) (fail_nth: 35) 04:27:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x3, 0x4}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x2}, {0x1}, 0x182, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)="c9f79fc9c7acdc5832d8b25e600f7d1599ad58c5adf9c6a25532dacd38c90215874db473bbf266307605c8e11d6bbaa391eca8cb31ba5d683ecbc441b690aa72ee2927588db42d333d383a47a10e538d5fd1b2e9703827ea085d44c4b4b7d3bf87bd571b8da043b8353901fbcd0b94084223e3076047459505003a95304bd1ecfaefc2010d3ce45e70e569ca1590797bd91d81b99ae1b309dcfe7346affc2f0a1ac76499732311ddad", 0xa9, 0x0, &(0x7f0000000340)={0x2, 0xed, {0x0, 0xc, 0xe, "e3f15e9996bedea61b29ae8de726", 0xd2, "19200cada7b99dd0e2ea82f839598d787826d44055c99f5182629d38fd3532e0c159f0a7c4dbdcbd17f66f622351d151fd48bf31734a3b77117617f5257f8aeef05dabaa5f001e19e6ab5ac39987103eae8eb6fa0d034f568b52561b93facc621c648ad73514f19e1a6c50b52a58edf0fc6872db31d53005586e5e757441fb3132692d56f69d3ef565eea3b4ef760afb82deb8125cdb030d189f2ac95f3aa6f2ea3e43c99dd564e9cbcdfa20e855539d8f5cab187dff0c2056e666bbc98a841490b34089b93df51c62096a7786d1f93dc6fe"}, 0x19, "fc26ad7ea18afafad16403e15855e2b6de193e14cfb92a8d84"}, 0x112}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup3(r4, r5, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000074500)={0x0, 0x0, "ba8de9365806d1732ba36fba7d87ecaa3a89840dbe3093a3af1370b20ef22ce2ae1ac176bd3ed9aead104fbfe2e0c759d5ce4ab17c25626c69514101fb763cbbe02d64241fb0621fbf5b309e80823debeceb502b93dfe6864bc32b0b83f8c747574b5ba3f1f12d079e7c3418cd37a6cc1a7e70bec56532c1c7d8b47486a61ef0fbe992e072ca537b8fe08ed7c7e83a1a23e34400b6ebdf8e7de7332d6afdad6fc4250e1db08fbea2220742c3e6c452f51f335e147cafeb06ac2bb1cd96f52874c6eda7158c1438d601304ef4cff76bb7cd406719b54c9054494cd53e77905c696ebb71f18e297cec6abefa5554f80795c235fc01c4241ca3a09ec5a1ef3b2553", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000075500)={{0x0, 0x52a, 0x9, 0xffff, 0x2, 0x10001, 0x0, 0x3, 0x80000000, 0x5, 0x1, 0x9, 0x100, 0x8000, 0xd0}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000075580)={{0x0, 0x1, 0x9, 0x5, 0x81, 0x1, 0x2, 0xf0000000, 0x1a1, 0x5, 0x5d, 0x1f, 0xac29, 0x6a827d57, 0x2}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000075640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000075840)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9b, "dc1b3d6487e1cb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000076840)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000076a40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000076c40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {r10}, {}, {}, {r11}, {0x0, r12}, {}, {}, {}, {}, {r13}, {r14}, {}, {r15}], 0x9, "9e7a3e2d4e680e"}) r16 = syz_open_dev$rtc(&(0x7f0000000080), 0xffffffff, 0x14000) pwrite64(r16, &(0x7f0000000100)="d5a1fd20f4c23ae94d46322dc3fb5a20864b7291704f04182dcd9f18c7b455599871b69414652bb0807a525b7988854640edc482be8c0c3d929bddefb9c73c191e8931d693660189bc77f0f6d79a64f2a93e2323d73fa4f4289979497e17170a98fd853d75002d5c989f09d9465baf6206c4a48b65c7398811d54e9fa965178cfd485873aa7dcab0624204084c6b98a2db044bbaaa2f4708d38a27793e07fafde554faf59840ef1d7a0d9be4540175759e869a765134bc71e0539c95117a81f623a3822404", 0xc5, 0x200) tee(r4, r7, 0x0, 0x0) 04:27:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0xfdef) 04:27:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$cgroup_pressure(r1, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) close_range(r3, r4, 0x2) 04:27:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x5}}}, 0x5) 04:27:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:27:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x60) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:27:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') fcntl$setstatus(r0, 0x4, 0x40000) read$char_usb(r0, 0x0, 0x7ffffffff000) r1 = getpgrp(0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) fchdir(r4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r5, r6, 0x0) ioctl$BTRFS_IOC_SEND(r6, 0x40489426, &(0x7f0000000180)={{r2}, 0x1, &(0x7f0000000140)=[0x0], 0x200, 0x4, [0x9, 0x1f, 0x72035168, 0x2]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={0x0, 0x7fffffff, 0x10001, 0x1}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff9e20, 0x4, @perf_bp={&(0x7f0000000100), 0x5}, 0x20, 0x101, 0x7ff, 0x7, 0xf8, 0x5, 0x800, 0x0, 0xfff, 0x0, 0x9}, r1, 0x7, r2, 0x2) 04:27:08 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r0, 0x7, 0x2, 0x3}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0xda95, '\x00', 0x4, 0x6}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000000)='`') r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000240)={0x1, 0x100, 0x5, 0x8, 0x2, 0x100, 0x10001, 0x3ff, 0x5d5, 0x2, 0x5, 0x550, 0xecd, 0x807}) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000000280)={0x42, "abebe9386496331ea1cf1cadc307daf0c7426dab37ae5e40236a2abb66e72a89919e15e7b0bdb94d16f325df106cfd01f191a15c6bade6f34709f8df3e912f063d1d"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000200)={0x3, [0x0, 0x0, 0x0]}) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="011f0402000059d2179df3fbe9906bf3b2b275cc4f87fdd9643dbb79c2a7c70951230f4eb54db3c00d430202e69e4d0849a93f71d3074348b173be828fca8c0fe82584c1aaebad8e7757f1790e1c2281002e4d941ff7e769a3b06f01c7903400449f298480ab3292a11320e8431da7e713925a7a0be2b7bf610bc800"], 0x178) [ 996.728683] FAULT_INJECTION: forcing a failure. [ 996.728683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.729810] CPU: 1 UID: 0 PID: 8619 Comm: syz-executor.7 Not tainted 6.18.0-rc2-next-20251027 #1 PREEMPT(voluntary) [ 996.729827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 996.729834] Call Trace: [ 996.729839] [ 996.729844] dump_stack_lvl+0xfa/0x120 [ 996.729863] should_fail_ex+0x4d7/0x5e0 04:27:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) [ 996.729880] _copy_to_user+0x32/0xd0 [ 996.729896] simple_read_from_buffer+0xe0/0x180 [ 996.729913] proc_fail_nth_read+0x18a/0x240 [ 996.729932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 996.729948] ? security_file_permission+0x22/0x90 [ 996.729967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 996.729983] vfs_read+0x1eb/0xc70 [ 996.730002] ? __pfx_vfs_read+0x10/0x10 [ 996.730017] ? lock_release+0xc8/0x290 [ 996.730037] ? __fget_files+0x20d/0x3b0 [ 996.730058] ksys_read+0x121/0x240 [ 996.730072] ? __pfx_ksys_read+0x10/0x10 [ 996.730092] do_syscall_64+0xbf/0x390 [ 996.730109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.730122] RIP: 0033:0x7f4e76be369c [ 996.730131] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 996.730143] RSP: 002b:00007f4e741a6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 996.730155] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f4e76be369c [ 996.730163] RDX: 000000000000000f RSI: 00007f4e741a61e0 RDI: 0000000000000004 [ 996.730170] RBP: 00007f4e741a61d0 R08: 0000000000000000 R09: 0000000000000000 [ 996.730177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 996.730184] R13: 00007fff885d11ef R14: 00007f4e741a6300 R15: 0000000000022000 [ 996.730202] 04:27:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) r5 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) dup3(r5, r6, 0x80000) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x0, "1fa28d", 0xf8, 0x7}) r8 = dup3(r0, r7, 0x0) write$bt_hci(r8, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc8}}}, 0x6) 04:27:08 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x200, &(0x7f00000000c0)) 04:27:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0xfffffdef) 04:27:08 executing program 1: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x4a35, 0x1}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) write(r1, &(0x7f0000000080)="26427b35e383b96fda5aaeed668d1b8798acff8b", 0x14) 04:27:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) [ 998.142567] Bluetooth: hci0: command 0x0406 tx timeout [ 1000.190578] Bluetooth: hci0: command 0x0406 tx timeout [ 1002.238560] Bluetooth: hci0: command 0x0406 tx timeout [ 1004.286586] Bluetooth: hci0: command 0x0406 tx timeout [ 1006.334547] Bluetooth: hci0: command 0x0406 tx timeout 04:27:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0xfffffffffffffdef) 04:27:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="010d0417aa"], 0x1b) 04:27:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x2}}}, 0x5) 04:27:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001580)={0x3, 0x1, 0x1, 0x4cc, 0x100, 0x5}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000001600)=0x900, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001640)={0xffffffffffffffff, 0x13d8, "bbaa7e", 0xc1, 0x3f}) r2 = dup3(r0, r1, 0x0) pwritev2(r0, &(0x7f0000001500)=[{&(0x7f0000000000)="9f9c", 0x2}, {&(0x7f0000000180)="0f2bceda5085d1c99a79e6f91c8efc44cd59527354421899e66b106d77aa22d2d07eeb27e0675d8b051bf45d1ed5867e128910a9968b3f21f24f6081e72caa3f808c0b27c3a125d6292f897e381e1807b158fc059aaa5491c59d8efe7d2eddde9165ac8fcec1e12e2e47fff84ddb4a196fe82e92adc9fc2118bb3def69c7048031c44d2be8381246511bbf4d9de29c19c5431eb5e983d5137b08c77ef1cb", 0x9e}, {&(0x7f0000000240)="39b2995504088a8c52b465baf8ceb8092cfe399dc49c92c000fba482f8b7ff8af7f430d54d5446705d00d115a1f74721da16a81839ba89a093127bf5bf460b6a1aea6bdad93bca1ac4a336626be1bd1ffe7b20dea8db150de1098500d339b548affed0df1776c9b2aa61ee824d9fea3437b2cbd617d348369a292d333a000da3addbb321718ff0d3592b5f6d9a2d4939a7ce6291588d80374c1e03786e4b1c979556a82746f752704a09b9149d6e981c2139ef2b3f842de890985bfeb1dddd1c3df0cf29a137e6291e0e20fcf4870218c76e889af00570b010f2228ea781fabb9f0987384b9e4617b5a8ce559b6c5d893cb34e1950ffd7cb212d15ec7183f1dc7c17fbd1b71ebb7b5f1029592f56bbb24e37d2956498ab545c277975f3293ca77ffaa3c8470b4d242b03afd4bbf2cefdf7873364833cc87fd349daab470f1c797cfcff5d63de7cf49522ef18d505dbfb98526685f976b45bf1d1349f917d356ecc665fc0b01062e5d12bdc339d5efb67ecae6c6d7ddb5c1409261411e89672a8158e512a6b09701260ded9c5ad279d08ad7b50a1dca17d8e6a8c9d087191d8c657d6bcd5552d76a605db43bfdf8ccb0d325dbceca825065f73eaa55daf3c7ec4eafb8975fc091fa6cf8ab4eafaf5ab376fb04511413b1d523a8b86ca1fc6578003ef4ff0f77c0a8ca46d10f714269483cc48a013786c909677368ffbffdbece9956476f03e262907549f65340478344ad981b2a52648e359095d8d57370ee8215fde06937792c7f253557455c00d9925d511a76cc5692409621b6d76d83b23934a226f6c76c98de33f20e7bd4760d55f9732e68232765a85bb1414bbcd491515ae31a86b8e83030610578c2d6d4a86626d0604235c43d063e075add5eb9ce9f35c1c84bac2c44cb915db3bb50930b84cbfbea68ae4f4aa0324dcd4990bb891b7f218562adda6bb4232a1ef08e92eb1d74177b464b06b3a58b08adc17f994d47a0c023cd36271d8b1c1626cf2fd9970b676b5d2a148453fbad0fcbdefea0899591223d2b7a0320e777e99f921f76800ff4f6680a77e78b356aaa8e67f4331bd29da7570e60bcbdddb9f304a2d6a98f70e23858fb6746c0eb99fb09e1712e294723ba8ab54dd0c7202682a5a82de3926b090e778f799e742d7e475e41cd6bac8382e5d49f20b0c80d9b1317009e336c56046993bbf6b4e95ae11550d5840393d517792039da1edf1ba95e46e441289fb644d81c70d0339d8602d8acc8056aaf1055c10cf4c2fa967fc67904968c7ba9ae07a908107f68b441f03ef8682c525a93449be1b0a6961e8402614f4a99ee7b4290a589e4fa09102ad14664081851f9d7e3da137647413510c848dbe7a76f4fcc0297870baafbf85e2d8d573558970418545c7e03daab858a098aac16b17871047d463c4ae581ec079031ba16bb3d02f57d50b3bd6d5f41fb932ee67c50b0f3fef869762180c122a50c6458ef96ae95ce209acfa8cc09412dd44549a980dbd19042280baed8ffa5fad8eeef5794936ba2a9fdfd87073a373e745f56df8426a3e9580cf70c25f9ca2f70f412c70e4cf205ac4bd897ae69456ea4e768911d1758317d3293829e68547fb18233ca652fbaa5b4253143e9fca2c2bb5a2df8c8defd0c617047d94b553b3ca18d40722a4ea4de503eafcf8d1846f8440eaadcde39a8540672f414d80c4e6a4543ad0c1f3b4fc625bb2c42cd3a4971204a194aecb0c820a8442c594a7457631813162a91760e758ddad33337efb799bbd148b7d8541bc0143eb52c53254bc7c7c6c43cd23a83e03602a8da1551460f31af2238b9964a870ce8a70eb42104dd0430e06605adf894bf2c36ac489e5c3ecb332388c93da9fd298dc4d43d2ff4ee3da014485a1a6162c27f5375a1f9e71de46870fede249350a90208756e927f91e8f2b74b12a0093180af1b67b8d3d784228596f9708dcde43df5474fee6f44ef59aec8d9cf466e7bebf7e7d15365987af2672a61bdf78ab3a43bb4aae25e2a210a199beb5465528ff2361f788a1352c64fb88deea586a4a947e3faa6846673380d94d43ed0620ebfcd36acde23b727e7c89c37ee24bef1849e422bfc766ab04c59dd021eb59bc11de1a548ef43e0f42ddc2ca9a2964b14162e95eb529bec21b7c8a439750a32e7606bf5ff5bb271b95e2917016e1b4d8d2495cfe7a2e3257c1755a5a74a9aa37e2e51106eee5ff931cd15d01887c5456a0b3c4637e1a840fc79bc22687c1fcd560e59a7919f7fc2aa0e68d9c6c5b0db1edeb90eba39078e01775f9e8f2c2bd11a00b16ccf65c4a08e02b0df6f17fc069f01aaf6c09c38db78d3e87b753d98064bfe7efdae03492f9d2924a35859a590d6a0a3f796b0d109606169d1becef519aa34b191b2cbe5199c9e8050f92011f84eba9ce94235624432d3ba528f8c3ba79c50f5207b990fd9d5181f6635e14638a38be250c94b468826e96a0c569d1ddf54a5a9df8615f9292d7ba677c5caedb298329e398e84347f1da5ab1c9ed3f14b296444ce55687ae2d465b6638117aea286fdd3500ac767f0dbfe91d61320995b03b2efb202b4dd2ca6ac516ee093fb52c416728d69a962a75c59d03c0ab9fdc3caf7d61f797fc16fdaa84b04da40d03b9d6a4d0ec3e4c4cb8a71c53d06990044cb44d161d8df9a4d9d331681d738c2766826f9586b8396d98d9243a13574b5e4ab5e3de1a3192a851a44071bf43e6b3203758c43c1db234e0dcac948eba2640703a91ff77d48aab82744d9dad08cf3887a4336ba07115e54bb8591479c0bd01b39cf59a8510b0939c86569515bf01a098bda563c6069f854c92ec6e83ff527a4b49f73da322ca0ef032940946e14949882f8d16e7a6874235a278542631a3040328a78ada218a797455d5e390b346a95f461483f74e9deee1ad20a8aa26179bd624434803e3e8e9fe8a48ad9c447df8aefa1f50bbe891f9d68f079538d962fbc60b5cbbb6cbd8a66d5287689dea0f511d9e98db172155bf317a35c7479d473b79bf9603c6a76567e19b388d6ab21e68d795114b904cbf50654f2d8bdcc61ec3094c9476846bb7cc89693625c38faca2fffe79475c34b5a270ed6667f88140bc1305d1d1de3419dcd4c76a4801e9c7d82d5bca7da3074d6bc2f76e369070c6e1d993baff62fdbc1ec577c55005f98127f2cd4c62a3489e6821db0d0de9ee3f655f80ad7f44fb989957dfdd21f41e5960e5558871a8b132601506d0b0f63533e3edd348a842a5f8210c1da887e7275127efacf73bad3045cda7b0fbfddc536dbf6f6e991c3c884c3a4063a48307be89a2d3944a50dcb74b6a57942a0e166d217243099718b11b7a23d091f783f2e6b48c7eefeef4a4fa13c980c7045055ddfec1e762eb7e319ecf83068ce16dd8c1876fab57f597b03c277326cbb99abf7348cea405913176de1e8abb2a661b941b7b4b0571746b101b962c92276cf6d1636ce8517c5f70de594bb34cf49db30c0684f992b7d5bd0f2a81d284f01b3bb292ee138d7b71e80a9cab273ef35f8baa1d972c63492941b89b6a54f7e9b1d9a75158ccddd5ac669336f0ef0c624ccd51d0a15f9cb844e99df62f797603746bdb1b5ec99b7655ff46335cb4d563a47db9c56dba88213fe91a588b43d965322248a42904c4e4477c4b5dc4e253fd4610bdddf3057d14d26022dc0d99cd2cd127835a39d5ebcbd1ed72a7c53c9dec9e70ef60b7aaa2d01f7fbf385db0c648e51db595eab8b5257ac9152e74871f56ab94049b875d08fce5e3cdcf8db03026358b93f05d5d93ef9ff87a982525fd6f7855de3d6cf6c9c3564c1908d7f519c2c09ef5f7174257612c2a36e9c1037e198f0ae0e1b48a87ea57769133187c2d82bce4515342feb929bb9b657591636ebc7e85eed0fbc5a89ec60234caed10766c7f3b52c9e1a178f7bfadad6f68f3bd2e0f756853f357ca561c089b49d961dc73ca454e918cb5656e89221eb6d30441e04c7655a3f38c2566f4f806939e1fac439935ed80a6474e4320a1e6d67650ba9fb5371bc9cc1bd21146ebc4e9c6e6be610a2ffefc4353852a93165bbb766478aa4dc645dcbb1e2b733d7a9fa508db426d9d94a52243a47eeb796225b75969ce6ed0cc4507bdd965ac6127fa5bfc1b381a5387e8715bf6cca119226b1909cd14d5aa3c491d9331f2de3f7cb0c6027cba277d8fc300afafff61db0768942ba7861146b284a98396324655d12549b342cb826ae5e7dfa39cec7368891561b71f090fef95a6d8c2ed55aec06bd88ce8b72f27573df9369f9fca3ad03de05354a83bdc871457cd14e612ec62cfc9439bfa1b2a24e1d9d53c44d32ac6fa61e6fd25557a26d64bd38a1f6d3a2b994ca08958f55c1bfe0843b78107974efe95b2bbdd130bcf445285ac09907785d83d512b6e3a6c785d887496a9f17e77da22b5d9d3480a2f5bffa05ce00bca14300d8b35ec68ed1629e1a4a55695807383aefb5add3ee6ea565a13ddccc5bdd494bab0fa33cf009118716e0c82beac29ad85be3e50187e2b1065db77d80a9e013bff78b2d6fae6fc2d9683f27efcc4ccb12376029f6958986cef7aaa52801fe19a40c644f2f06b2efb476e6238bcac0f6bff99d1d29876166f816e3dab99d2563558a212e8453e9a8386033656dcf5a73a03fdb1e627a87d367a662d68622086e946b7496e6afb7a7d0b6e106c473f1799b98a471914aa3405c28e60c32e2ba0582e7a622ba8125e77298dd1444828d6910fde04f71473e209cf04085f20ce9983c982c231499347210d332625014f253248a544e99c4ae1e1b07bcb61000d871223fb16b546134f7ded8b55c14e95ec32e7e18f76ccb5636cccd531cabc897979174c1b0621d71bd8d6005a2b10e65fbb6b3101b5d38538ade23e8ade930497ee964ba5fcb123ad2a0da82ffd029eb55df775dd2b8148ac420951a11df2393f6b562c51450c06ed3d8f331f293dfa8107529a301361c03873020448c7e51dd409c6fcb409edecfefee1dd65094db2f4c14f617026bdf07be4a0193429341b725701067a6c0ea43740362a162dca3e28ef7d725fcf7fb0adff268f0542b29d113de36ccd129c7f901be4662a4c3697b4b5b9e6996c3a98a80550ec7b26f20894af1df796331f6cb0db406ea4d399f00c79d71d2afe0ed1a79eee221a3912641fee76e3a05f13c12cbab7ecc09f8bc708e8f921216c2f6de99b5078abc3fc7a2e39d3713984d2e8b46caf835638610b880e2bd2292e12f01b6e5d830aeaa395bf9c0c969f3c214be2c02179e77b5d0adfbaa36f1eee06e17facca69883bc716cec2e82c61461897718de7afa8369e65bded66b0098f2bf75c47516c00e5e6118e3bb74cceff13f2d9aae20e8606730eca59c8044ccd8718fd63da58b66fa84feef33a02386b0cba1d1167939831ee01cd95ce04a6e3c5a61027bbe17c964cabd869b5c2644f3badacf46d88c7c1efc20810d6b43f6588b3ee128a2212c31e8dcd0d58cccedfaad41b2e098743581c994397accfdebddb9da22b416dd706f320d95231208c95f9894eb30dff8e62792afdd879bdfdb40a47c6ee4817b0efca2b1f37625b4cc97f8ee4122821bcf4ecd30b3e17d7694ef7b4f28370b8e37607fb8e5191ee0473c1591129a284a90c39c8c70742517f3b87032d923ceddae789e41d03b5ba256501565e6c38202bd7d0b449b6a478a22efb7c033e63187965bf18dfd43982b72a6746cf3348ab9810cb46ccf96db902a1844ba0bce86ded1a0b0bfc61a56d01fef035420a0c0a56b90d5eac", 0x1000}, {&(0x7f0000000080)="2db9b3b8fc276308b18b6b2d6c24c21f49b3eab2e4a05adb", 0x18}, {&(0x7f0000001240)="ceb22b04e5d5c5107421aff9b650addfc3cbcf0d8abe2c5187b2cfefef2c5f75134f1c6ec9f28bcf25b8bc483eb178748ef1459e273bec6113ded956589ba1451b1057c491ef0b45a6887542124241ff8a67e14546cf99339b62ab557364e7867ee1d91dfcc88662279435ffa448aefc80822835ad0b89baa89032f2148b7d671375656fbcec134469f8004bbcbebb7058", 0x91}, {&(0x7f0000001300)="e2b192fcb3bee47ffd8c65ae92cd1624d62755d2eaf1afe5e4e32751ffed1d28ddfc7516b0e8b3c2b951db7047270ba763b0c91a83b42db653953ca58be2d9900cf623ed660cc235cfe84b24eac5a0d1c45b08df70e20d7495451dd0dc219412ca5f46502446e4d60c3e4ff0281ad3d5cbaf74aa47fa350c5bc0f1cb200a6a77d2e4e9b8e91e04be80bdc3bba91d93d3595846454eea8c28a55ed5ae6306891fa734fe45ed372050e16f9f794124bf49440a0093723a9abad3efe84d1e84c51a28e02bb9f29bf6fe0ad43103079b3d9684ac584c22adedcd67378275538b3aa5ebdb735b7d569dbd42fc65", 0xeb}, {&(0x7f00000000c0)="2ef7146ae6265dd4d2a0c91b7f9e4166a686fb51e59c921d", 0x18}, {&(0x7f0000001400)="1e37e66e3030fbe897bcdac3a207fb30ec5691cec9307270a0a7e4b6fd1ad1a1d8d0fa5c3d04f4912cf42a0933596ca63059d7ff99b8faabd672232cac56b1605fcf046d92242a10487d271af948af0fb7723042ed7b5bf6295c5e3edd1a2d9f6c16d21993c50db5f85bc25463a9fd5071fe67d0fc54558cf616bb7a7a43e0a56b8b37981a77247a74693558a50671ac9ac8cfb80bc201d557497b8859f7967e5f6c335b4970a24d60e7b742149b28016cdacce565e6df93f8f5b377129575c58d80b6004988aaf0eef19fdba194ac4eb7b3f5cfd6a8c854b1fd", 0xda}], 0x8, 0x8, 0x5, 0x2) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:18 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f00000000c0)) 04:27:18 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000010000001800000078947ab3d84839ae731a2683078a0314cbb5a2b53747bb9bf25a5ff1187d2e195c5685cbe30276a92db2b273e1cb3ca0e365d3b25dc7914b279845298f18b0d7d5d7e51bbf4869112b3f4ca18563d48d03805a41e7db208a245d79b46c32d6e197c9d0558dada42fda60b09d5683acfc9bd9549464e9e2bd6378071f85d18be2c1020d7abc792d45856b18a268518370a6e961ed91fd", @ANYRES32=r0, @ANYBLOB="1f000000000000002e2f66696c653000"]) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x32, 0x7, 0x80, 0x80, 0x0, 0x2, 0x40409, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x0, 0x57}, 0x3826, 0x0, 0x63c8, 0x7, 0x2, 0x8, 0xffff, 0x0, 0x1, 0x0, 0xccb}, r2, 0xe, r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x902, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30]}}}}, {@gid={'gid', 0x3d, r6}}]}) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30]}}}}, {@gid={'gid', 0x3d, r9}}]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30]}}}}, {@gid={'gid', 0x3d, r11}}]}) r12 = getgid() setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x2}], {}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x1, r6}, {0x8, 0x6, r7}, {0x8, 0x3, r9}, {0x8, 0x4, r11}, {0x8, 0x5, r12}], {0x10, 0x5}, {0x20, 0x3}}, 0x5c, 0x0) ioctl$FICLONE(r4, 0x40049409, r3) 04:27:18 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000006540), 0x1, 0x0) getresgid(&(0x7f0000006580), &(0x7f00000065c0), &(0x7f0000006600)=0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r7, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000006640)={0x4, 0x80, 0x5, 0x7, 0x7, 0x7f, 0x0, 0x1, 0x1804, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x7}, 0x4, 0x376, 0x1f, 0x6, 0x5, 0x2a822177, 0x2, 0x0, 0x4, 0x0, 0xfffffffffffff464}, r4, 0x7, r3, 0x8) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r9, r10, 0x0) tee(r9, r11, 0x20000000a, 0x0) r12 = socket(0x1a459c0a4e96a8aa, 0x4, 0x1) r13 = dup(r2) sendmmsg$unix(r3, &(0x7f0000006800)=[{{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="532ca09f0183a44f2b380fd781d2993ada62", 0x12}, {&(0x7f0000001240)="c47d5c133615698b45c4760bd4495eed89058b2b7709f83b5cf97a5c3354cd437c4d710e537b6329e0e2eb5ae99041587f25cb9f7dac2ce6a1cc150231ca90ff8e48ca91ba7544e125d1db06d6d8e2d2e9df59ac85359afe6ecedadf90def0722f9f7fe5936d43077bc96dae963aa90a45ee58a5fbdd0d8ca3c8fa44dc99934f4eba3bcd8cd7489ea969eb2ed74547dc2a62e8d1917ac4e7d3f7fe288775f845340eca03e5fed7429863112c0904a37c22d0e969c6a3ee7eba5827937ea6d916a3a9e1f24410f02a6c58f4ae29f379729932d799a78e95b02f8787c1a42c7c42fa1ec3f473a5f733d48b03", 0xeb}], 0x3, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000001400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001380)="76f18224912babb7a8014ad04fedb5d67f306178e269546efe05ace816e931b811a3a29edfdd5127f062adba", 0x2c}, {&(0x7f0000001480)="030ba53049fca6797c9152cbe7201ae440c3996c18e1600bdf144a9cbb84717c5af919fcf0f1a194060917e259e131d4c940c535e1a8dda089f4d2135c555477", 0x40}, {&(0x7f00000014c0)="3fcf71937609aeac65b82f4d4cd75630923453a5061fdbf5bee63a3a3bd1646e2b238ee7582b176ed957625d80121ebf5522949073d7c57e76e587e0ea841be440de75fd626cc189f52a4f415792d7529ba65d044f8106b7b22daa499735688c44bd80099367e6318208904e8934d94bbefa185add96b32ad0587a450b79237c55cdfbc362f5a9e40cb644480598e31d8812b31422646aff659d99a22d50a5", 0x9f}], 0x3, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x38, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xe8}}, {{&(0x7f0000001a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001b00)="88eb8e2658d54daf8076c35ec7d63808eda209a6d204d66db13c2b298efb57fd68287f1702e9583278bbecd1f77b8d0882a36f658782ae5fc0490abf4396d2274c21d058898d25f181ebb00af2286620e7f4bbb29dea2c95ded71c639878b0763128c2377e47bd71d89a8866b808eb8a13702667732f382d9fb467b1d61065595b142a8ded3644bdab4adf8542530bc7d72a6051d901c17ae601accc6df29ef973ffb61ec13b90412c640d865818caa26eaf9d2d7e04017a63763c42e8052d2fd2c613ba9a6691a84d6998bfb9a14ab1893b20deab816840335379356410", 0xde}], 0x1, &(0x7f0000001c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000001d00)="a72e7234365ca851b342f3c147aa4dbb29c481194898c44fde591b5c0aab04f3ac8b310815154e0264ac97cdc0859c9625adb52c96a27364b73cfd5838e170dec10ee80c6c8651f0b02b9a575fcbb57151a80113d193697a5a56e693725790ea54ec3fed748aae73ff8bea9c443b57c4d2087585cb503f9ae41229aef9da9a8b9c92c28d2ac8fc09985007873ee50e16803749ff126db00f5ead7128ffda9d9afa57c81b8ad3fe74bf209c3df8944e9fc20201b9e32bcf56fc1989ad3af2d4603cbaf16ff906fdeb62a3e636", 0xcc}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="f84876e9d9e551203d3e3d49ba78615ddfd8060371f0497f1d74d9d2c9a9fa2495a6c15fb31c4834c557b88f4fca9221c874ec4206124b8ecdb0cf2bc6b35c9e0d2b45eb2ce09dde", 0x48}, {&(0x7f0000002e80)="5fde0109e4266809c4fb612228215e3d49b7c4a79019fce7ef85e813a2f11524f47312251eb7cf5c9d24bbcfe007e64eee3d538771d27d26f61ae2cb2a5854f9b33dc51fe62840f6c7cde82e1734d4784e85184b2d4883d37b92ce98ef7e591ca35d49ccf9e4d9841dc07193a0ed60ec4c93ef3ef227", 0x76}, {&(0x7f0000002f00)="7c0c01be2c396232128b06cb74890831b11e17d1413c185141839c339b56e79c2442258de0f6d390d37a133519142c6250caae3599710783251d0a6344b73378ee1d3e6d456e388dbbeb4e08db1489e81432cd0cb58a3e4a434292fe9a0bd9970ff8fbd1b1bb9456305b7179e525acd26e64edfbbe91424ccaee90aeb4f4c895e1c6bd7320fa7463b98595db37b8edcf8a589aa64d05acaf2c4a3ea276bd382e4df344cb6683fef7778ce4cc67d88ac21a6953c7203b4f507485634a1162bd06b0c9320c1cc2ee42f33879", 0xcb}, {&(0x7f0000003000)="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", 0x1000}], 0x6, 0x0, 0x0, 0x40000}}, {{&(0x7f0000004080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000004100)="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", 0xfa}, {&(0x7f0000004200)="dbbd8832d429f5ed07601198a99115e3c708aeb299813cb0b4d01185bca1e124db8faab474889aa8d8ff63e588574fc136daa7b1351cec474278bba37cb038612816b2b54cf7a43fe83d0b414a43160ef0e7b97940bcd9523374bada2dc493e77f9396bb489ce09ba604ffd2d2d90800ecd5f2db094c745375ab8d4b07e67093ae3204c2fc90d9f44c83b5fd9383c4f3f85a04575cd3ffe8ba55", 0x9a}, {&(0x7f00000042c0)="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", 0x1000}, {&(0x7f00000052c0)="4ce189e8a89987a4871aa7139b8b539dc9f3cab71fb148ee4bea9e3f933dfd84bc7213817c84b622bd0f4e1b02ece5e493bfd6584cde3e2ca046fd46c7b27cfe5f608061ed1de503859060fca786be8f1a31ba9a0232f5ad5ff1b013a54d6464b35f325362f7709a66923e190a1bbae838367feea71fb00ec997fcf89b5f10b5e4a6b1e8afe64b", 0x87}, {&(0x7f0000005380)="6665cc3e4fcb42d29f2468daf6e0bef1a33669ea3add774003c1011e86c63080932e750642a85b8d1bc9ed21afc77585b3481c781c887bded1786b6cef55064bf1638fe38efe645d18c70ae0af1f9631f215e090f1497babed9f8208034eac1c7e463eb1c8439927106c38804410e475ebfabc231ad82f816a924c179fb6a4f86cba08a05500668f60f10a475fa93f8e7101091d09cf66ba4ddbffc034112b7460ba3a029437c807fb6485a685f4c4918516f633f71c043dc5af7de69372f43e2a3981de584bf320dc0721758ab1013978e81986ff19db0744833064a8b0890836a4086688fa03c8fe9045ae04afebe684dd40", 0xf3}, {&(0x7f0000005480)}, {&(0x7f00000054c0)="1f11e2f90e78aa83f0b1d09f6a10b81b078bd7fa34534da253cf92af4baebf89f435f3e2ffddf5d16a074f0fe5d9b08592bc9d7caa31cc674c458cd1041c0c58e2675cb3d30ec2ddcbc713b81a9a572badc51bce8f8ecdc4e8aaa58248cd328b6afd19a1b267872b2694f5557228fbbd", 0x70}], 0x7, 0x0, 0x0, 0x20048084}}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f00000055c0)="ce3e457519b8817cdcdda42bec07fe596fc43ee6a1ac48c179942a3e99d355595405283cc069135a3f8e39ebeb20539aa71fdaf3cfaad18951c4cc7368a2e7972d75a8cad18965a42c7c0985a1a81911cba94c14736d23c90da5be64347853f39b2748c9e206eb456c16497b14fbd0c2be390186c926d99df50c99bdfe4f0e995475", 0x82}, {&(0x7f0000005680)="2ecffeca9119092471da80c4b44a49d98d22ca7d685a8b272aa142f08e0877b76bb3c2440b04e88a2c38e33d70e6716700750a3b9bfbff01176a7c6a0abb782bd7c89dc14b3fda9410c81682f5329127f971c51a6d57f345f3fa5fa40bbd9411cfd3ccb32bbdbf2c9a9e096a6447a41e0908994f845c48ffc68c15063ae55fdbc1571dcffb5e0be4c4c91ccebfa1d459a8b7e5daf4a5af0b9b27958a62da1f7792f5c3", 0xa3}, {&(0x7f0000005740)="ad479d210275d24c66ee89adad814ffb716b2f30380f921a9617ea83010abb56188b07598c90992fb06b268acb348d6d13cc00", 0x33}, {&(0x7f0000005780)="3caa56317d3c8a835a80bd2468897e68fce282cc773db44c687bce229af09454444ff8bac142dddababb17a492c103d77eaf7229fb79c21fa7983a7faf23dcb93d9c63cfd9a7fdd1c2eb8af0d0db2b4b273311de4066b68b439b49968edc23c9c14d27667136aa4babbb0ce2fa25e327eefb6d49ca41d956dd52cbb18f451b6425490123d6451f84a4618ce728f2d8557676c5e320b5ac7d38be795ca845d0", 0x9f}, {&(0x7f0000005840)="8d30f00d24a5a766c4a5b3999ad8e406ad7394dcf175faa92326b25358e992a74c7adbf08418655fa2c9ad4e8f1cb6886f15cc051ebf2a7447852087f11aa4eb13c62c4b1640dd2d12370ab0b7d553f6bf64b9daade7a9332b8ca18a27cbd50f4868eca366a8d8b9591bca59c11dde234b02793eb51eae991a907ac1de849038a3ecdfd17d43855366ee753497b42e381ea38c4a94a2a62e23b98c29ef797f4980fc8ea0a63e292c39e398c1ef850651", 0xb0}, {&(0x7f0000005900)="a2b4a390261f0343c4765393f11618ca85d3cdd4bfb04466519b5ccb47174d3f0f2bb6e469b95bf0937a5818399e9c19c90c6a70e6773c8c0f09cfae6e238f46a1c287df2f89b7896be3675eee2d3197e3fab8812048a6948b8240bc43178da5fa48c0a0a767dc103004a5945d31853c329d3db4d43d34eec9d64d1c24ce45eba00bf16f59a595c30df39ada4a993fe899b9497de9a1e22329f25661480a1ccec59b9a9c252dd8c320b7f1bbb3d181bbd7a9a845b418ef56bd58e66da968f11fd17d5b4d88c5f54260e423f8fe9adef83dab1c515be1b8b27c37b1d0f7262c998c52cd3ef7be951fad4429cec54f09278d544f", 0xf3}, {&(0x7f0000005a00)="2b1318b989a92fb4a7865ad434ac3cf83a35f1612b2f5c838d0c7d260f244e4b888cc12c723516bd8d567ed13b48a2e14a34fba6dfacc402d8901deae672fb0e4c1df46bf9088a629a15dbe9b303ab65276069c9466b113efc3743738572691f5993b5b60a9a70cc6e974e6e3d54cbb7d782b854448de3a989c44f45f47bac896201f357f2a101a6fbc615887a907f86cd790a2efb961e48a58b0a25af53fc40ce889c6269109f2ebaf49516f108f6464927f4ffc406ef79fa2a", 0xba}], 0x7, &(0x7f0000005c40)=[@rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xa0, 0x1c080}}, {{&(0x7f0000005d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006040)=[{&(0x7f0000005d80)="f6119eb4f6f530fd7a6a52bb499af47ba2ee2997dd0e53c4a8e376656200b280b7899534b7087374f71bcd2e8b106e0b9b6be45a322859733ce678cb9de47cfab40d5dc1bec7d4bda5831cf2a4b420d4a645414d6c6dbda061a6bba7eb446770da26bacdca546209f162f5e071034bdc6b0701238d3a4b1a7ecc4d0526093ed7af0c459ad948466ab898f49022d74faccb99b342cffd", 0x96}, {&(0x7f0000005e40)="cd7bd32241a4f07fea1b4476976101e9ec445a1a7b5dd539787e065eb2e13f063f27792100e9782b8b827d0ac48dbc17e1158c105d1da625838f9988dec333bde83f23b6641cb6e5b0148bc3aa", 0x4d}, {&(0x7f0000005ec0)="13e6022f99977737f04bfbe17b6d653af055a0ced68fefb95c84d1d0c80fa82a1aa48804f59fc4d83f5599dee62bf53abedb586fdd322dd5", 0x38}, {&(0x7f0000005f00)="b51ef1bdbd7caa91431b034ebf0fb100c28dbe6671d0e052a7fda1932758ca86e1a492140176a948a9e608d6f7db1e91b718", 0x32}, {&(0x7f0000005f40)="a6c2b9f6b2cc6f1b3957f162c9c10020aaa3ebbbd1927bad9eb51ac11ef5d0f0f4ba4f987e020a2325eb1938c340328f6ef01918e238e3a0fac7f7c34ebe6a1d60e5af6b687f0f5cc5009f6453cdca8b96c4e1a4eecf3430f13ed218c479c4a3d4523c53fc4c2dd763978f7c52e499c742a6ef6bc8017f7047eb38b7e4b519", 0x7f}, {&(0x7f0000005fc0)="3c7bc2d789d9109770ed6a5178a144d26bc783b0d8b3c0bca7aff879c30d7eb6156fdf373f0ae7ab117e90c87c9ac5dd061d3e5482b232e94d4c7718ac3f483c287f41b5ac8da41e4c3b08ad885431fdaa7e6316155ece26cf9bb289628009036ba5", 0x62}], 0x6, &(0x7f00000066c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x24, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r0, r4]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r3, r8, r2, r11, r12, r4, r13, r4, r0]}}], 0x128, 0xc000}}], 0x7, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r14, 0xc0502100, &(0x7f0000000100)) dup3(r1, r2, 0x0) tee(r1, r4, 0x0, 0x0) 04:27:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_open_dev$mouse(&(0x7f00000007c0), 0x4, 0x2900) bind$bt_hci(r1, &(0x7f0000000800)={0x1f, 0x4, 0x3}, 0x6) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r5, 0x20000000a, 0x0) ioctl$sock_bt_hci(r5, 0x800448f0, &(0x7f0000000180)="34c38782f1b256dc4bb7c02c604ae21e3fa55c6f9634d6a788774ae36c63fefed3794c454812b002487ce31a2fe89279daadf131fb4d0a4cddc79beb3953e2ab45c2f8c4c17bd5f3b7329be449b8eb24892cd6bb4369f7f86d9d5c824c4242c7756afd8ff0e2f2b27a5548e65ca3656ef833f2adeb1e184b91b1eb2d4ec2e5c27d9dbfc27251fb1f3cf727c8d257d2fb32bbdbb584c3499460518e4f4ae5948353914169404d168266e114c94e8a7b343bb7178a37251a3a543e19ab4b38fb6c4dbc8ec627f8") ioctl$sock_bt_hci(r5, 0x400448ca, &(0x7f0000000000)="f7ff") r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r7 = dup3(r0, r6, 0x0) write$bt_hci(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="011f0402de16"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, @out_args}, './file0\x00'}) readv(r10, &(0x7f0000000740)=[{&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/145, 0x91}, {&(0x7f0000000540)=""/173, 0xad}, {&(0x7f0000000600)=""/106, 0x6a}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000680)=""/189, 0xbd}], 0x7) tee(r8, r9, 0x20000000a, 0x0) dup3(r8, r0, 0x0) 04:27:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="01"], 0x1b) [ 1006.527151] tmpfs: Invalid gid '0x00000000ffffffff' [ 1006.535051] tmpfs: Invalid gid '0x00000000ffffffff' [ 1006.539119] tmpfs: Invalid gid '0x00000000ffffffff' [ 1006.550435] tmpfs: Invalid gid '0x00000000ffffffff' [ 1006.553054] tmpfs: Invalid gid '0x00000000ffffffff' [ 1006.554318] tmpfs: Invalid gid '0x00000000ffffffff' 04:27:18 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x202, &(0x7f00000000c0)) 04:27:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup3(r0, r1, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000000), 0x2, 0x0) tee(r4, r2, 0x0, 0x0) 04:27:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) 04:27:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd4(r0, &(0x7f0000000000)={[0x20]}, 0x8, 0x80000) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x40, 0x81}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) write$bt_hci(r3, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:27:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r2 = syz_io_uring_complete(0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) r5 = dup3(r4, r2, 0x80000) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x101) ioctl$sock_bt_hci(r6, 0x400448e1, &(0x7f0000000080)="8fdca4b70656119a70a8319676e210171a71aa831a9e61d0411bdbd65af7beb39558dc865ddd37b95e96ce8cdc9c2f4954ef5b3a0193b10cfe27eaa767515d02e6b83ab28f08") ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x4, 0x1ff, "63aa02", 0x9, 0x1}) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:18 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x1, 0x916cab0071dc8b98, 0x1000000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/221, 0xdd) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0xffffffffffffffff, 0xee01, r2}, 0xc) read$char_usb(r1, 0x0, 0x7ffffffff000) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) 04:27:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)={0x16, 0x0, '\x00', [@pad1]}, 0x10) r6 = dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cachetag}, {@access_uid={'access', 0x3d, 0xee00}}, {@version_u}, {@access_any}, {@access_user}], [{@euid_eq={'euid', 0x3d, r10}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '+$%@,['}}]}}) 04:27:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) [ 1008.382586] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.430538] Bluetooth: hci0: command 0x0406 tx timeout [ 1012.478619] Bluetooth: hci0: command 0x0406 tx timeout [ 1014.527542] Bluetooth: hci0: command 0x0406 tx timeout [ 1016.574543] Bluetooth: hci0: command 0x0406 tx timeout 04:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x5}}}, 0x5) 04:27:29 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x203, &(0x7f00000000c0)) 04:27:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="99011402c900"], 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) r5 = dup3(r0, r1, 0x0) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:27:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x1b) 04:27:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x80000001, 0x7, 0x0, 'queue0\x00', 0xff}) dup3(r3, r4, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000000)=0x4) 04:27:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:27:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xa) r1 = dup3(0xffffffffffffffff, r0, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:29 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="3bcaab3b553e22f0ff"]) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fadvise64(r1, 0x0, 0xc00000000000000, 0x3) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x20, 0xff, 0x3f, 0x0, 0x9, 0x81230, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x42002, 0x1, 0x1000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0xab}, 0xffffffffffffffff, 0xb, r1, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r2, 0x400}, {r5, 0x1008}, {r0, 0x40}, {r6, 0x100}, {r9, 0x4}], 0x5, 0xd9) read$char_usb(r1, 0x0, 0x7ffffffff000) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000000040)=0x2) 04:27:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) 04:27:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x6}}}, 0x5) 04:27:29 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) pidfd_getfd(r2, r3, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)=0x1) tee(r0, r6, 0x0, 0x0) 04:27:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(r0, r1, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) r5 = dup3(r0, r0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r6, r7, 0x0) tee(r6, r8, 0x20000000a, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000000)) write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:29 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x204, &(0x7f00000000c0)) 04:27:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="ed62e376951d589bad94e080ca5ebf618241dd060000"], 0x6) 04:27:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) [ 1018.623529] Bluetooth: hci0: command 0x0406 tx timeout [ 1020.670554] Bluetooth: hci0: command 0x0406 tx timeout [ 1022.718600] Bluetooth: hci0: command 0x0406 tx timeout [ 1024.766576] Bluetooth: hci0: command 0x0406 tx timeout [ 1026.814668] Bluetooth: hci0: command 0x0406 tx timeout 04:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) 04:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @exit_sniff_mode={{0x804, 0x2}, {0xc8}}}, 0x6) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r4, 0xffffffffffffffff, 0x20000000a, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xfffffffffffffeff, 0x101}) dup3(r5, r0, 0x0) 04:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x3) 04:27:40 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x205, &(0x7f00000000c0)) 04:27:40 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x0, r1, 0x2400, 0x80000}) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = getpgrp(0x0) r6 = gettid() tgkill(r5, r6, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x9, 0x1, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb2, 0x2, @perf_bp, 0x1200a, 0x1000002, 0xfffffffc, 0x0, 0x100000000, 0x1, 0x9ea6, 0x0, 0x6, 0x0, 0xff}, r5, 0x4, r4, 0x0) dup3(r1, r2, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000240), 0x5, 0x80000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) tee(r1, r4, 0x0, 0x0) 04:27:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000580)={0x7, 0x1, {0x1ff, @usage=0x2, 0x0, 0x8, 0x3a, 0xef, 0xce30, 0x7, 0x10, @usage=0x1, 0x2497, 0x3f, [0x8, 0x8, 0xffffffff80000001, 0x5, 0x3ff, 0x101]}, {0x4, @struct={0x7, 0xc3e9}, 0x0, 0x7, 0x3, 0xf912, 0x5d, 0x8fbe, 0x20, @usage=0xf31, 0xfffffffb, 0x5, [0x1e, 0x0, 0xf608, 0x0, 0xfffffffffffffffb, 0x9]}, {0x7, @struct={0x0, 0x1}, 0x0, 0x2b69, 0xb9d, 0x624c, 0x6, 0xfffffffffffffffb, 0x80, @usage=0x6, 0x9, 0x9, [0x0, 0x0, 0xee, 0x7, 0xffffffff, 0x5]}, {0x8000, 0x5, 0x4}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000980)={0x0, 0x2, {0x2, @usage=0xff, r3, 0x9, 0x3, 0x0, 0xc3d, 0x2, 0x80, @struct={0x69, 0x7}, 0x800, 0x1, [0x20, 0x100000001, 0x5, 0x100000001, 0x80000001, 0x250b]}, {0x80000000, @usage=0x3ff, r4, 0x8, 0x9, 0x3, 0x3, 0x5, 0x420, @struct={0x5, 0xb92}, 0x1, 0xc, [0x9, 0x0, 0xffffffffffff8000, 0x184, 0x3, 0x2]}, {0x3, @usage=0x7fffffff, 0x0, 0x681, 0x80000001, 0x80000000, 0x100000001, 0x100000000, 0xd0, @struct={0x0, 0x40}, 0x1, 0x0, [0xfffffffffffffffb, 0x0, 0x7fffffff, 0xa044, 0x8, 0x8bdc]}, {0x58fa, 0xcb7, 0xd38}}) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r0, 0x426d4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) 04:27:40 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x206, &(0x7f00000000c0)) 04:27:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6409, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r0, 0x0, 0x7ffffffff000) 04:27:40 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x800, 0x7f, 0x7, 0x7}, {0xf801, 0x8, 0x81, 0x3}, {0x401, 0x0, 0xfa, 0xbcad}, {0x9b80, 0x5, 0x40, 0x3ff}, {0x1, 0x40, 0x21, 0x3}, {0x9, 0x5, 0x1f, 0x3}]}) dup3(r1, r2, 0x0) tee(r1, r4, 0x0, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r7, r8, 0x0) tee(r7, r9, 0x20000000a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r12 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000001340)={{0x1, 0x1, 0x18, r4, {0xffff0001}}, './file0\x00'}) dup3(r13, r14, 0x0) tee(r13, r15, 0x20000000a, 0x0) io_submit(r6, 0x3, &(0x7f0000001300)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x8, 0x6, r7, &(0x7f0000000140)="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", 0x1000, 0x101, 0x0, 0x2, r10}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0x400, r11, &(0x7f0000001200)="083bd2f89158b983ab8e59b5dc948d67222d990a10a7dee476536a204c70cbbabe8b7a4d69be15", 0x27, 0x3, 0x0, 0x1, r3}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x5, r12, &(0x7f0000001280)="0fb221143467563293b2ee6523b16ad4c9f7fd951fffb98b8122f68db1b39e7a3e9888", 0x23, 0x1, 0x0, 0x0, r15}]) 04:27:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x400400, 0x2) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) r5 = fsmount(r1, 0x1, 0x82) r6 = dup3(r0, r5, 0x80000) write$bt_hci(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="023c040b0000"], 0x6) 04:27:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000080)=0x8) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x3f, 0x5, 0x7, 0xbd}}}, 0xb) 04:27:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x178) 04:27:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) [ 1028.862955] Bluetooth: hci0: command 0x0406 tx timeout [ 1030.910713] Bluetooth: hci0: command 0x0406 tx timeout [ 1032.958612] Bluetooth: hci0: command 0x0406 tx timeout [ 1035.007554] Bluetooth: hci0: command 0x0406 tx timeout [ 1037.054532] Bluetooth: hci0: command 0x0406 tx timeout 04:27:49 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x207, &(0x7f00000000c0)) 04:27:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01ffffffff00fd314958a1680009a41cd3104b3b5ff0c8c202a8ddcec564be438c203170866a"], 0x178) 04:27:49 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x9e6) getsockname(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000000)=0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r2, r3, 0x0) tee(r2, r4, 0x20000000a, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000180)) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = dup3(r1, r5, 0x0) write$bt_hci(r6, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) tee(r3, r5, 0x20000000a, 0x0) 04:27:49 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x2, &(0x7f0000001200)=[{&(0x7f0000000100)="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", 0x1000, 0x1}, {&(0x7f0000001100)="88b8d3b68b833a8fed4a6491fc4be2934c4b2c62c6b16b3d27c72cec821150b964a7240781340c32f5eaed6f91cd4179d45327eefe07711dae7551ba070330d6e32cf7e9c5c2dfd9e29cf9922848e5e2528ae16f4c2ae69add4f569d74e67437c4025daf7dbf3c1b53f7710a06b18799f3387dba1b7ed577f3f14bf4bb669590283a411f6e5cc5246f02b6944b4fa5b6af149a2c7c56ece89e830dba2e6a60a4814728c66d0b339ce9dc08c7e2322f4e1ea3e03ef0b2efe980f15ff3484111f82bfa7fefedf36b8f77c4", 0xca, 0x8}], 0x1880002, &(0x7f0000001240)={[{@shortname_win95}, {@fat=@usefree}, {@shortname_win95}, {@shortname_win95}, {@shortname_mixed}, {@uni_xlate}, {@nonumtail}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x34, 0x36, 0x32, 0x30, 0x61, 0x30, 0x35], 0x2d, [0x34, 0x6e, 0x39, 0x62], 0x2d, [0x31, 0x39, 0x39, 0x38], 0x2d, [0x39, 0x0, 0x64, 0x35], 0x2d, [0x31, 0x61, 0x62, 0x61, 0x62, 0x61, 0x37, 0x66]}}}]}) mknodat$loop(r0, &(0x7f0000001300)='./file0\x00', 0x6000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x0, 0x0) 04:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x404) 04:27:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x0) 04:27:49 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') read$char_usb(r1, 0x0, 0x7ffffffff000) io_setup(0x81, &(0x7f0000000040)=0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x3ff, r0, &(0x7f0000000080)="edc9bec929e85dd5c0326119a990eff663666021965305d98da160ab3cc6676eb806cfda3a3d07aea24ed45a0ee82921ca9a6b2802f572c2b02cf946317936ebada8c1185f5aa57c4d45460b37994ac964c6974d3622985838e54e63b178f418f96f51f2f216df827ce755d144469cc6df97e06aedf699120ccd0552cebf1022a6a67d61d5523fd13425320169bc2300f76c419f923e", 0x96, 0x80, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0xb4d4, r3, &(0x7f00000001c0)="f68e3cec42fe0b51071e7b12b2717b7f201667ce5c28a6e8aaaaa6dcb719a3977ee59f654254e955c7d1fdd43c841e19a92666e9d586cb2511330cb244df1ee6463aaa7a7da0d2c2c04ddbdfa490d2c592bd7165aad446672ab4b571b3181278b2c9791990c301f1fb9cfcd0d6d5d53ef0b43b4d719ee22cf5a4c75e18ab113ddd6827a46349ee8a6737aad3b7603fd06cf7255d2aa253ed67fb36", 0x9b, 0x8, 0x0, 0x3, r1}]) 04:27:49 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f00000000c0)) 04:27:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0xfdef) 04:27:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x410022, 0x22) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:27:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0), 0x0) dup3(r3, r4, 0x0) 04:27:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) tee(r1, r3, 0x20000000a, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000040)={0x1, 0x200, 0x80000000}) read$char_usb(r0, 0x0, 0x7ffffffff000) 04:27:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) creat(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r1, r2, 0x0) r3 = dup3(r0, r2, 0x0) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="010b0807aaaaaa03cc36b403a2c71db075c0ffdc3c1ec2127be23e01f529efd9756506facc3769e32337e1ab759f094e789723a343f59058364a4e4cd9cd45da4a6278c106aaaf1baebd73bc389d032037308eaf540c697b1fa0e6e00f438e803ad99a12c12c928cf1b1eb52b90f2e455a42ac17310541d2f23d6375715c4776448e698587026eb070fb19e55bc173c7b3a863cca5d5dc2d9688cf97449490e8c048aa58a214f9f18606b90979b31f5c52c9db32"], 0x7) 04:27:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="a12eb9d60000e8525670702a1115b933ae281bb3632813bc2cf3eae949cc33bb7058404577069b4040bcb1fa33643a82f85af370d5f356c9dada9ffefedda6715cf166761fb6a5735bf04deca90050309d90af72ef232dc59dfeebd89371b6d64bc415ac9df59ab0a275a1e36acca794aa52a922c804a63bbc7675cdc6f2ba6da70f7cd8671c8c3cf1e6181140ca3c1333739b291b0fcd566bc986de3650e6affa13ba6177df8d7bf2534134d20a96d11a99a9c0f3047c212d"], 0x6) 04:27:49 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r2, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r3, r4, 0x0) ftruncate(r4, 0x3f8) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) [ 1039.102514] Bluetooth: hci0: command 0x0406 tx timeout [ 1041.150566] Bluetooth: hci0: command 0x0406 tx timeout [ 1043.198552] Bluetooth: hci0: command 0x0406 tx timeout [ 1045.246559] Bluetooth: hci0: command 0x0406 tx timeout [ 1047.294576] Bluetooth: hci0: command 0x0406 tx timeout 04:28:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x10480, &(0x7f0000000180)='-\x00') r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}}}, 0x178) 04:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0xfffffdef) 04:28:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f046b0000"], 0x6) 04:28:00 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x209, &(0x7f00000000c0)) 04:28:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="011f2dea0402"], 0x178) pipe2$9p(&(0x7f0000000040), 0x0) pipe2(&(0x7f00000013c0), 0x0) 04:28:00 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x401, 0x3, 0x7, 0x20001}]}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) tee(r0, r2, 0x0, 0x0) 04:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = fsmount(r2, 0x1, 0xb) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000180)={0x0, 0x8}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)=ANY=[]) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x2600, "e6b38a", 0x7f, 0x6}) write$bt_hci(r2, &(0x7f0000000040)={0x2, @read_clock_offset={{0x41f, 0x2}}}, 0x6) 04:28:00 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x1, 0x1f, 0x3f, 0x6, 0x0, 0x8, 0x21, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000500), 0xf}, 0x0, 0x80000000, 0x8, 0x2, 0x7fffffff, 0x4, 0xfe01, 0x0, 0x7, 0x0, 0x80000001}, 0x0, 0xe, r0, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x60) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/connector\x00') read$char_usb(r3, 0x0, 0x7ffffffff000) sendfile(r3, r3, &(0x7f0000000300), 0x8) setxattr$trusted_overlay_opaque(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x2, 0x1) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x4, 0xe1, 0x81, 0x20, 0x0, 0x1000, 0x1004, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x16, 0xc7}, 0x0, 0x400, 0x81, 0x1, 0x1ff, 0xffff, 0x5, 0x0, 0x9, 0x0, 0x80}, r1, 0x0, 0xffffffffffffffff, 0x1) process_madvise(r2, &(0x7f0000000480)=[{&(0x7f00000007c0)="7df30c75e1cb74f0ac0bb539cc48e45e90b826b504918c9e651494a8596e4178f3c3901e5ccb96215a40a19aa16325de545f225bab86fbaf8d7b50bbbdf44940e8cdfd928796d0a3bdf2bfda0a7a8972f8a1ccf91c163d262a513bf23926d0ab305b097dc0d3eedb86a6441f990bd5fae663f064f5a4d5c35504b7db291f30f1b91c60abbbe77ea6d5df6e734571e81c240f0fad16c2f157cbc271d6a94177403037455e772f8f5a66bec256814604ad34df84", 0xb3}, {&(0x7f0000000180)="445ad1554b1be8eaccb03b", 0xb}, {&(0x7f00000000c0)="fe0b6289299b176ac64c30074964da6a8e598a2e265ec84cbc376feae6a7181eb4b1f7b58be2e0c3240abd53379bc1ffa2cd3c1d09abff268e2d671f6d5dfb99e82b", 0x42}, {&(0x7f00000003c0)="9812aa7eaf79f30c091bed37a06f30d2f2fb4fc4d65769c3a36440a088be261be3e8730ba4672f27d88836a48a34ab99bfd6a1dbe7b86ff19b2174e171cfc9b58c6f6504d2e7a4c24cc8c0fc8a8b7dd6239dec74906f", 0x56}, {&(0x7f00000002c0)="8f837d0e14058fe6f6b56d9347329dc79814b23851bf3e17cd28dccb73a51633ba09667b3156792a016979dc3d009a58763f127f2386be73d82a949fa4e1", 0x3e}, {&(0x7f0000000680)="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", 0x12f}], 0x6, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000140)={{0x8, 0x3}, {0xc2f0, 0x3}, 0xfff, 0x1}) 04:28:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0xfffffffffffffdef) 04:28:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4}, 0x39) r1 = creat(&(0x7f0000000080)='./file0/../file0\x00', 0x5e) r2 = dup3(r0, r1, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="021f0b000000"], 0x6) 04:28:00 executing program 7: setrlimit(0x9, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x2f5, &(0x7f00000000c0)) [ 1049.342518] Bluetooth: hci0: command 0x0406 tx timeout [ 1051.390536] Bluetooth: hci0: command 0x0406 tx timeout [ 1053.438546] Bluetooth: hci0: command 0x0406 tx timeout [ 1055.486546] Bluetooth: hci0: command 0x0406 tx timeout [ 1057.500521] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1057.535537] Bluetooth: hci0: command 0x0406 tx timeout [ 1059.582572] Bluetooth: hci0: command 0x0406 tx timeout [ 1061.630570] Bluetooth: hci0: command 0x0406 tx timeout [ 1062.488256] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800cef9500 (size 184): comm "syz-executor.5", pid 287, jiffies 4295673390 hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 2925e6f2): kmem_cache_alloc_noprof+0x42f/0x690 prepare_creds+0x2c/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf59/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800bd67800 (size 128): comm "syz-executor.5", pid 287, jiffies 4295673390 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 ................ backtrace (crc 10116262): __kmalloc_noprof+0x426/0x680 security_prepare_creds+0x101/0x160 prepare_creds+0x579/0x7e0 copy_creds+0x7a/0xa20 copy_process+0xf59/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888048a01980 (size 288): comm "syz-executor.5", pid 287, jiffies 4295673412 hex dump (first 32 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 ad 4e ad de .............N.. ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ backtrace (crc 54c57712): kmem_cache_alloc_noprof+0x42f/0x690 alloc_pid+0xd5/0x1100 copy_process+0x3bd1/0x7410 kernel_clone+0xea/0x7f0 __do_sys_clone+0xce/0x120 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88804aa17000 (size 2048): comm "syz-executor.5", pid 8676, jiffies 4295673430 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 1f 00 03 40 00 00 00 00 00 00 00 00 00 00 00 00 ...@............ backtrace (crc 510ab687): __kmalloc_noprof+0x426/0x680 sk_prot_alloc+0x157/0x280 sk_alloc+0x34/0xc60 bt_sock_alloc+0x3a/0x3b0 hci_sock_create+0xb2/0x170 bt_sock_create+0x15d/0x2c0 __sock_create+0x369/0x810 __sys_socket+0x145/0x260 __x64_sys_socket+0x73/0xb0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88801e8df6c0 (size 32): comm "syz-executor.5", pid 8676, jiffies 4295673430 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01 00 00 00 03 00 00 00 4b 00 00 00 00 00 00 00 ........K....... backtrace (crc ad019dda): __kmalloc_noprof+0x426/0x680 security_sk_alloc+0x101/0x160 sk_prot_alloc+0x20b/0x280 sk_alloc+0x34/0xc60 bt_sock_alloc+0x3a/0x3b0 hci_sock_create+0xb2/0x170 bt_sock_create+0x15d/0x2c0 __sock_create+0x369/0x810 __sys_socket+0x145/0x260 __x64_sys_socket+0x73/0xb0 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff888018e6dc80 (size 232): comm "syz-executor.5", pid 8676, jiffies 4295673445 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 70 a1 4a 80 88 ff ff .........p.J.... backtrace (crc b08d53ad): kmem_cache_alloc_node_noprof+0x40a/0x6b0 __alloc_skb+0x2ab/0x370 alloc_skb_with_frags+0x8f/0x7c0 sock_alloc_send_pskb+0x7cb/0x950 hci_sock_sendmsg+0x190/0x2270 sock_write_iter+0x57e/0x610 vfs_write+0xbe9/0x1150 ksys_write+0x1ef/0x240 do_syscall_64+0xbf/0x390 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed [ 1063.678599] Bluetooth: hci0: command 0x0406 tx timeout [ 1065.726586] Bluetooth: hci0: command 0x0406 tx timeout [ 1067.774576] Bluetooth: hci0: command 0x0406 tx timeout [ 1069.822632] Bluetooth: hci0: command 0x0406 tx timeout [ 1071.870630] Bluetooth: hci0: command 0x0406 tx timeout VM DIAGNOSIS: 04:28:14 Registers: info registers vcpu 0 RAX=00000000002c249b RBX=0000000000000000 RCX=ffffffff84c4dcf7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814ca810 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86646950 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c4c9ee RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53f4000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feead321000 CR3=000000001f999000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934383120657a697328203030353966 XMM03=3220646970202c22352e726f74756365 XMM04=3030202020200a2e2e2e2e2e2e2e2e2e XMM05=30203030203030203030203030203030 XMM06=3030203030203130202020200a3a2973 XMM07=6d75642078656820200a303933333736 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000065b2a3 RBX=0000000000000001 RCX=ffffffff84c4dcf7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814ca810 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86646950 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c4c9ee RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54f4000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3493efc708 CR3=0000000013e0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004183e05800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000