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") 11:29:46 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:29:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:29:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) write$bt_hci(r2, &(0x7f0000000000)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) fcntl$setflags(r3, 0x2, 0x0) 11:29:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) 11:29:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:29:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:29:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) 11:30:02 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) 11:30:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008010}, 0x1) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1ac, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0x7ff8000, 0x7b}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeaf}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "03dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d5"}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f71564234"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000003081676bc79c609a362da34296f6e3214b39b588c5c01b09910e125fe1f7b1c1723ebe3d23c2c8b5f1774589f93f6c0793e697fe330ecb48ee4b51241dfe344e4d1067558cdf440fc04d20892a4364b0445cd31cd34c70915fb515ab0b8e2919cb40447d2e851136e92d348ae445efef5badac9435e79ffcae8b301ff5181980cd3d923c9640f7d4cecd6eac9e4aa15389b32e2dd80d7e2b32abd2e73403b72b63c627d342b961c7b23a3069c952d503", @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25690000000c00990008000000620000000500d200010000000500d30000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) [ 963.346804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:30:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) 11:30:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x9d, &(0x7f0000000080)=0x2d6, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="3036966401"], 0x5) write$bt_hci(r2, &(0x7f0000000000)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc8}}}, 0x6) r3 = dup(r0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 11:30:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:02 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x0, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:02 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x0, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, 0x0, 0x0) 11:30:16 executing program 1: socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:16 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_aout(r2, &(0x7f0000000040)={{0x21f, 0xef, 0x40, 0x28, 0x88, 0x3, 0x276, 0x5}, "5515b9bf82e67971f5c5e0f5e3e347f05852ed994a61049d3cc192b3cb5b2bcd75b05925486c6d4301c2ad0b8999c317ba42ed381f48284b4eabae9c01683b3078b9b25ff3b9a4d7043de408e11a4c42b8fe44136e8d6626433eb82974240ae09749b453c05a77bd3f8115bd9fadcf64c6776bde363d5e363bb59bc790ceb2bf661dadb96e2b80faad2cd40e02d9b6862a5eb48ff5ec51de2a5901babdfc1de57be080089c2d3a2e7efebe5c225d0e773511ea8ab3f8f9cd1ea560790af026350dc169b35e759a909c08ccfa00da215e5093c209c444570fa19bf238cbde17c1a709ee2bc0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x905) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000980)='syz1\x00', 0x200002, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x5, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r4, {0x733b}}, './file0\x00'}) dup(r6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 11:30:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x44804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008010}, 0x1) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x1ac, r3, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8}, @val={0xc, 0x99, {0x7ff8000, 0x7b}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeaf}, @NL80211_ATTR_VENDOR_DATA={0xa7, 0xc5, "03dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d5"}, @NL80211_ATTR_VENDOR_DATA={0xca, 0xc5, "f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f71564234"}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000003081676bc79c609a362da34296f6e3214b39b588c5c01b09910e125fe1f7b1c1723ebe3d23c2c8b5f1774589f93f6c0793e697fe330ecb48ee4b51241dfe344e4d1067558cdf440fc04d20892a4364b0445cd31cd34c70915fb515ab0b8e2919cb40447d2e851136e92d348ae445efef5badac9435e79ffcae8b301ff5181980cd3d923c9640f7d4cecd6eac9e4aa15389b32e2dd80d7e2b32abd2e73403b72b63c627d342b961c7b23a3069c952d503", @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25690000000c00990008000000620000000500d200010000000500d30000000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000880) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:30:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, 0x0, 0x0) 11:30:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:16 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:16 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:16 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x0, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 977.878941] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:30:16 executing program 1: socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:16 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x0, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:32 executing program 1: socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:32 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x0, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:32 executing program 5: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xd4, 0x80000001}, {0x3ff, 0x972}]}, 0x14, 0x2) setsockopt$sock_int(r2, 0x1, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000080)=0x2, 0x4) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:30:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, 0x0, 0x0) 11:30:32 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) 11:30:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(0xffffffffffffffff) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x20000000}) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000100)="27d0690dde6a69ed332744e74f232345fc1e489754e06a357dd1e56bdb0f8d155b63ca8ec43aa6f177ee8cca7a33ae04cfac2a5949") setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r4 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x400) signalfd4(r4, &(0x7f0000000080)={[0x4]}, 0x8, 0x80000) 11:30:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:32 executing program 4: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xd4, 0x80000001}, {0x3ff, 0x972}]}, 0x14, 0x2) setsockopt$sock_int(r2, 0x1, 0x1b, &(0x7f00000000c0), 0x4) setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000080)=0x2, 0x4) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) [ 993.508629] audit: type=1400 audit(1665574232.493:13): avc: denied { block_suspend } for pid=6705 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 11:30:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:32 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:32 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x0, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000000)) 11:30:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) 11:30:32 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) 11:30:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:51 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x0, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) 11:30:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:30:51 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x480002, 0xa}, 0x18) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x110, 0x3, 0x8, "f8339d88004912effb64b614aaa2cffb", "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"}, 0x110, 0x2) 11:30:51 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:30:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x1) fcntl$setflags(r2, 0x2, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:30:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) 11:30:52 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x0, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:52 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:30:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:30:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000002c0)={r3, 0x0, "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", "996663bbf699ddd8e7b1bb8cbfbd61e9c9719c6e72ad5d0fe47b32cb2ba8f6616eefb94abcec06ddba848bdb4ddeb960f5d19fe5020e9f1c1e668b1153975e38de02fc82e22a0f8820bf97e7b138e80020cb7efec5a64ef29a588e5bd0647e1c6f4ae32775824a4a599b63de7a1f1a3a044edf81be9d5fdc9470b5d9c497090ddb7a56315bb6f20c6d31393cd4e09301b2b9c90ba157b590eaa36ba82be43d439988d1335080da4ed0cdb044587d06d645690668a9120cdfde01584229a1d17b0060e5258d3897241a99c0d21ee59581559390d50e8897a7c7fa580dd921c28251172636c1f855f975c7493c213851d216b6cef911bf8c4bcceb86942ce713aa323a3ad08961dc3372ad661db2460a381e9aeb375551645602646a9754f3834ee729ab68a1383fe5726ed0b52bb731f07d42199f04f1e9d40689bbf23e2ff6b90c1ac8cbcca8b3e289c3b8fa179bfcda3ee4aeb2f6db22584095ec3fa66b7d0229abf410926c28f8d828168e9639768e1328fd4dd6a9b37cd66350211d01e71144558bdf45220da8681a0af01720c3096ad0bf058373c4480effd6ec6afb6df06c9fbe42fb3ac8b6549be60d1dbbb1769cf143c7beab13d66a18c5991cbae6cc82bf53db68f69529f467861f3821bcafaabb1784141ecadaca6c6d06aaab83547370b4b291440806ba7d0aeea2bba8d16d838c796bbfd9ab68a854bc9e94670ce0e0a7ba3b6aadaf4bb3366cd92f363d588f1b1e7fbc2bc64b64ef0733c47075a13303e975942e789e4acb5a9fbb0f66f7535bd8a97a68a63782cd5b081656404a2561402b35b294bd99ed4b23ba711551d64abc918a7bca484ee6c5f78eab9640a1a0a54cd4b40a09fb21abfc07554673c51a66bdf07c0c730bf442378c9be57ecd73b93add866e01613f9e00d661dde2e33b8deee43e2c0ef32b5e887558a20b6652a23092fbe408a5e6872553fc8ebbea9d83e84a2d630ee2f7b7729bd720c08018b84a09f66c71cdf63fb937f5ea1b62411178c8d3299aa9414bb6422e972a01ec733a062b380b03a842e63eac360e3d7b560946d5f2aa262536d3dffe425a3fb6dcf9450da97918edad3aa56bad76e64950cc484a8cb1a3f5600eabaa369d3db4a95717e0455f0c360eecc945c509320911720d3bf673f757a57b623e617e1e891dd1fe73dd6e80bfef9459e86df6181e7300b7817f80432e1a323765a34f8ca7d31e6dbeed77ae6b990b02c7ca302bd9f5f6b12bb76f7493769f7f563c701e2ebb9efcd5ee7b44c11ff9687d1827986d78ab23b28df7bc547dcdf6906ef8aaaf0736a1c7c7efc7ee43fa854f9786ba19497e53ea3c7af4e48df3a2552539b0fb30f01042058b25708df1e92aeb49becdef62fe86cdd0c2ef1441a1483940a741863485703c44a499586b7a4b9867ea066fe6ff4f3938e1f0133e532f19d5cc7f7790d2fd298e903442f184569b339d0775880c1b78c23fb209672172ee6cc9c1b24761713ef338c22e81ca5a54f1b4c2c9c822f1aab1cc12e1b9701eb835bde49a567a14f6737ee6f9602333ace40a97f4ddaaaadc86c33d5e83fb66c84e9ed25adead67cc32b6b008496875bd326baa268f4a340a5166b59e5d7c7769fe34154f89252ac9013bce3231afe64e8fcbf7d73607a30d70499fc93550a8c73e89d898ae5eb77027e50778383e0ce24442674091b16b0f15d68ce6d2a61b9038275f661d335ef4389ba0e19548e9c9eb5416b8206c1db6117f67a81a8ccea8b9bd7708cde96c872e0f60efeba27f2a1d7b35306b72b17f2f700322cdc41c57ffb98c3702e2e458df1f6916663ae1eb03735067c1be360c0b8548a6dec9a5171b4c56517e7e788d46b97f6b415d0b8d50aedb3a7a1b8b0be735837970b0628456de27fcd0f45bfcae5a0ef91f66a62cf5b013eee02b6dbe1c98b5b9d95f668eec9be7913aea5423f473717803efa9dcae97ef9ea2283a186f2717bfb3f39f13fae714023e708f93168874a268a241809b0745875cc51b9dc159e049957010656d19e9c8d6aae5128d303833221dbd9fdf5dfdd9502fdd37b455ff3ab09de25b6eeb1686ae509fe2be816f98e899704cbc121c561749eacd69cb124061ec8559e7190fb5b5f65a98fbd29e601197a5f6402635232b80776444838d2ee67b1077d5cc826bd1323aa1471eb3fda71d5ba31119030b8aed1e5e4cc3ac5cb9bc5f1b9bffa3407804c3c1317c12399009b5eed5e93bb94f054c494f35cdc00d89964c3592350fbfeb57cfb0818deff3bc49c96e5d4e0efc1f2d93de9f6d4c4d4e7f7bf97428a4c1de54fb4e50daa73e30fa992cf311709d56621762a67dd89976dd15a6704a370014662e503255998a0d4890c8bdb0dc252f1b416029692e12865a773e7fa19c0270bb8e1ca752416dc81cf56f040ec77380866bd6cb8ebb2f88e60b3eb2b7db87b7fc0fee655e48a2255a15c71912a6d0e35af1497420cc145f036e80d161a67b4112ec0838fe43ef473b1525dff146bc5903cbe19a9bd4b1ba5fe38019bfe381e2f09f494bfbc56df25e55b93d0d141d3d425078d30485a4c2ad94ca707f213ee8e256faeda541a5a2854b6fb2b7c4ac95bad54099242cc55fb16eab4df109a2bc8c7b58b025b9628cb3b3c76ac2a082716a873fb4a35ab410134983fb9450f0e0770db247b6d4872f3a83ee49dce962f7ea5f8096f7b971e34716e682458fef16e3a8d0e111be36a5032ec481aac5528b204e63d4acc64aec929e6ff0ba80d0802cca9b6f238894b8b25028526e82c76f2fd826d2612ca0d3570891579548b1c7a37ade474392abd86595a32d505a03c1d06c370624113c413955fcdc1c501660777079bd16886f56e09e76c659be6c96dfd445e88293b4ffaca82e0fa7c7f0a16b91fb1acebef26e593f407df20f135e19a4f44886ac624f4ecd40d0c3bc64bd2001d1e86cec1f140f6aa7e7c6976a29b64b220c2e062e2bfb6d647f676dba062eb5a7dff935c46b56f295e1701d891a20d1fee6de0b34730389804ad694d3bc12b2a5f3b24a7810b3246286061e3e0f3ec4d05ea46f90e74ad582928954ed26b81cdc93d087c226d21d00213c95953b5f33de9ea11f47ccf139c0f9916ab0a95bd1cff0c4a08293b500fbbdfeb6a0fe130b6909bc70d71334abc450f62f601c6a7d280179a05c9b6d83fca2c7339f14de06215b20dd0888ee0b05ed65516f6aef219e8c9fae1f85d20112adb8418031a2d79ae2eb290ecacd1e1e18625c2f2824fb7c982aef5cd1f51cac3dd61b47770c425c8ad5fe47d87998f1f85879c70f6d0809539128d2bd6515e65376949fbeae6975f1b5814b22838f3c098d42d87d16be8320501d4e6940214c56c624c6bed2105043b4abef234fd60c55c5f1ff79b9691dfaac4bfe93c8bdc68d5ef3d1160d8b86a979560d26a57d95e2a84507206638b275a04a111632ba87395636e9a8fbf9b500c096e774957e6af22bdf5121b6b8e3035704abfb80b9a3839a13db1b309b85734b78b095dc39fb900eef96180bc55320dd439f129622f5a03a59274b7beb1420baea84a4b253064232b64a82bdafe8331a56820cb6b38db0b3b7dc8fb852f64a53e99ab12341f1cc2d89c2adfb3d47bd6b7fe1c11af6708c9a2acb5e004bcddec5cac3b3da8674428588e2ebf2eb89a01c81d7ac6d1dc542525c3a987ca40e2e64ce6a0b1261f103a38cf4172f27268c7924d72cc1fa5695c7fad8b7515ca705b4041dfb116f30f41eb7c5324fce2a1f01a61949628f53ff65d84f191eaeb2a3a60f9b4c60088d8a4ac3b1f117de73f295986a1c904c645c79126ebd6b8845e07ccf750d84973aefa7113d185ea3d9af3584013d672a5fdb0fb4f971f3b49ec20f8c77ae85000479176ed0eeced58e37bec38964ba3ec002af4cffd5dddc24f78f6d2aeae718b47ef52880e068587fe5a87d1156c1b37542d7c7f1a9b69c4d8a526122744577ac1f1a646038618842baead57d50b11ffff082ce88d5b86546032d4393156cdf4667bcfb4636dc294d477e22663037d6283b76249cc1f21346a97d2509c6b8730a2b93c2c62ab91b31addd84533d0c240eaa4424be97eeca0912b588eea54adf12b8f1f722fdb3cdf4d1f510d51218beac060f662ed274ac58001e497f93e15388ac792ce8bd21280144cc78cc0062475b031eea825f5a8dd02874e1bbeeaccc55f29e528f857befa995feca38b52fd1ed01136dcf0f28afe68d5a25a85013738024cd0f2eb2db10af4b0e0d1f3f6b4b8e636de984dd79547f078eccea2ee14f216847b66d650e8f52c541a1845ca56f520bb5ded07cd91d583f7b8ff1a6d42ca5a02129e9a8629a9fa58efd5da32ee8fa4732f68091d3e7fb8d339b6b5989adb00ee019e6949b0c852346cd552938618080c0e347c221f149083202c619843d185af2c0a75a70da4660ff0031c0794523bee270527f7cb06584977735777efef13c3407d2bad5358775929649099bbb6bace3bd56224980acb99cb8c4af988c01328ef25120bdfd4c7581f6f5ecb0a795da09b4c565622f5766123684df62544aff901301b287811a4a4c4c0e7ce802621dec7709e1e123f55d9a1bc64a245fc60bb8d8a01fdd52cfe834746e0ae06773e5fd1c284d618db3565aa95a8048f8d6d8261edb9cbcec4715a0f9e87a7b46ac9a7ab674d9ee5370ce94b7af08f3e05ef91cf2f72f1fb2cd8ec37ccc58d13408b4551a9adc5d015cae3205abe2a4336211b503e44e67621fba51bcff259849af5f5bdfeec370bf03159170b83c42ece075a841c3af1aa1d6f185435988ccf97ff021e4695ef6be6498c22275773726643e2243a8b307be6a505a15c8e7967eef730bbcdc8a201c38b5b825acb6e8e22228a829f3324c96c82adc02e9fb86c0c777562bb3433304a7ca9a8abcae60bbd2299ccfde7f8093dd34ea6573900470ff8f244fabef7c9094cfd23bf2585bfabb54150f74bcaed6f4ea6d6f2ede09d166d572e6ab14cb3653ed31b3074f5e6814ec11e6da4a7562d17fcf27aabdc7a4fcf5c2a97e352a8c14bbf65be79547d1394aec093bf0c897e86e99cc6dded9e1e17267ec021fde064027b36bcde0cc5159d5c383cd75ec0c4c6abc5145172e3296cffb3ae15da2e769ad863bebe175bab2f716c845fc53c38545b615cd5eac94f8965479bd9dcd72e0518177ea2db5719aa1190a8ccbf89664f39520c6a45f316d9734a2d57c9a034c9eecc66e5294478ccf8df2507897a6407f830d4fe4186963e30cefeb1523959efa2da21c6e389f1bba37fe86241e7965a7cbcc4b36f48479b499ee4e5a2fe61875ac1fdcf28ff5ad3396f6098025030627661c448e14c7a79f116b32be3d5b8f90a3311fc66a0a03f4c8c306691218abd4e427a0b7f7f4"}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) fcntl$setflags(r4, 0x2, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x100) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000040)="82e50ab386bcfc7c6dc96e53ebce091bafffe9e3d7783e044cc543f03fc9e3dd1f5ff17c4e3d9a1ff22c345277409dc4ee5c0c5762bb571a7029232459ce35b0e9a216") 11:30:52 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:30:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) 11:31:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) syz_io_uring_setup(0xc26, &(0x7f0000000040)={0x0, 0xdac6, 0x2, 0x2, 0x1b7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x13, r1, 0x10000000) r4 = syz_io_uring_setup(0xfa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x0, {}, 0x0, 0x6e9b477a0212337a, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r7}}, 0xdd) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) 11:31:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:08 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:08 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) 11:31:08 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, 0x0) 11:31:08 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x0, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:08 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) setsockopt(r1, 0x1, 0x8, &(0x7f0000000040)="5694dd3f6ed09d91315da21ff002ffdc4199a4f05a6e46", 0x17) r2 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x3) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'veth1_to_team\x00', 0x1}) 11:31:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:08 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:08 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x0, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_auth_payload_to={{0xc7b, 0x2}}}, 0x6) r4 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r4, 0x0, 0xfffffffffffffff8, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000080)={'macvlan0\x00', 0x3ff}) 11:31:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:08 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:24 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_auth_payload_to={{0xc7b, 0x2}}}, 0x6) r4 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r4, 0x0, 0xfffffffffffffff8, 0x0) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000140)=""/117, &(0x7f0000000000)=0x75) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000080)={'macvlan0\x00', 0x3ff}) write$bt_hci(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="010a1405b7fe000000796ad9024072b6a8a395f76bfeed313890fb8362c5f9ba4e3d198860d52dc0a0614615d1b1f80041dc108d6498a845d8d56817d36446f9685739fec448c7c6c945bfe7566f6abbd4c06f448f637fdc7081274084b5145639ed"], 0x9) 11:31:24 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r5) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x1) fcntl$getflags(r6, 0xb) write$bt_hci(r5, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x0) 11:31:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) 11:31:24 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x0, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:24 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)={[{@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x33]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x6d, 0x6b]}}], [{@measure}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 11:31:41 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x0, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='loginuid\x00') r3 = accept4$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x0) r4 = getpid() pidfd_open(r4, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000000c0)={0x2, 0x1, 0x1ff, 0x8000, r4}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:31:41 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) 11:31:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200002}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000300000075000000050029000c0000000600ab00001000005e00be00bbf94729a4d95e1f32d1e898e82a7371f85b5d9c6a90159cb32149d0e6fa8633bbdcc1f98e1ecfc0b11209e2d8da9e2a6aef05e3dde8c90402da903629cb13ac174998958701b6ee14d4bf272307d33ae829f6e6e1f015cc4419ed3b"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x840) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) 11:31:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:41 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:31:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @remote}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000100)=0x10, 0x2) fstat(r0, &(0x7f0000000040)) 11:31:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:56 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:56 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:56 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x1, 0x2) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'wg0\x00', {0x2, 0x0, @private}}) 11:31:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r2, 0x0, 0xfffffffffffffff8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:31:56 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:56 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x0, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:56 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x0, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) close(r0) 11:31:57 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:31:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) 11:31:57 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:57 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x0, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:31:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:12 executing program 1: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:12 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:12 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x0, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) close(r0) 11:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x1, 0x2) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'wg0\x00', {0x2, 0x0, @private}}) 11:32:12 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:12 executing program 5: r0 = syz_usb_connect(0x4, 0x5f0, &(0x7f0000000000)={{0x12, 0x1, 0x10, 0x5d, 0x87, 0x9d, 0x20, 0x2001, 0x3c1d, 0xf8ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5de, 0x2, 0x4, 0x98, 0x20, 0xcd, [{{0x9, 0x4, 0x7c, 0x8, 0x4, 0x11, 0x5a, 0x2d, 0x20, [], [{{0x9, 0x5, 0x3, 0xc, 0x3ff, 0x0, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x9723}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x40, 0x5, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xc46}, @generic={0xeb, 0xa, "c1a8a6be4cb4e763420618c95f39764aef93132b4e2922cfb5f3197ce7ec84de65606ecd43a8e351a4a015c82ead802b2203a42b026c6738f41940f6b7b0a6bb8f8032999e87b99f8db2d1cbeb585b1813c7fd23ebd875be6319cd51518f3ecce571ad14efea8cad36231a737661c6d69b475139b3d0fe01ba04c8eec6e7f84ef6e8d8fc3e08db8d6b0e08f0b631e72e5d040a55291540f211b514470e35bc267464c5800fd28a772ab1a4a6caac234a9db453b3998d068d64d09b663ebdafd5f31cc835d4d69756527c566bc59cb623fd1ba99b505b7df3708aa371826ceb5adb39a73562268cf8f7"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x2, 0x40, 0x3, [@generic={0x9b, 0x6, "1ff2230fd3a9999609ef9a86ee9410eff7219e5fa0895d914d80a87ac80b6f4ba9b79aa9c15e036f978b14fe3a3f528892bba3dac82db75762f126958d4724e3a6df7852a630954eae94be9aba475587a8605d9fc759816b408ebee8f8a637ddb0470b804e33b0d1786b70447db5b552564e3cadd0b760e56abaadf720ff78f3ab930c72622ad543bf213504b443c553aa0f7c98187ad5f832"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x40, 0x3f, 0x3f}}]}}, {{0x9, 0x4, 0x5e, 0xbb, 0x10, 0xe8, 0xe6, 0x5, 0x81, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "92f0825f02"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xfffc, 0xec, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xa4, 0x9, 0x3f, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x81}, @dmm={0x7, 0x24, 0x14, 0x2000, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x9, 0xd4}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x80, 0x13, 0x3e, 0x4, 0x9}]}], [{{0x9, 0x5, 0xe, 0x4, 0x400, 0x5, 0x6, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x7fff}, @generic={0x4e, 0x6, "4f9bf395c374cb78c0c2b6850fb1ac0628905f169dc0d1a743b96b2dd50b9b7849afff731c4d9490e65fe584e044e907f259be9c170653672fb4360880654d33c49542e232acc648f8655a01"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x5, 0x5, 0x50, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x20}]}}, {{0x9, 0x5, 0x4, 0x5f13b2c849d34241, 0x20, 0x40, 0x80, 0x0, [@generic={0x7e, 0x8, "6fb3701228865a295fb23c52ef1db8ceccb422d329a23910d0443ee294e2f8d09d1ce695b0c208d65f7d4bd68f6cd2503edc267f4a5dccd563dfe7cfe52c977f8f5bf754371b109fa2b0428c69cc4554786780e935459c101ba4f5cb89e3710889127b0a0c0cb71209a5f0e9e182dd4e8f8f3b5fa20a8552a7f997e2"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x49, 0x80, 0x8}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x83, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xe7, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x81, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7ff}, @generic={0xb0, 0x8, "d17a549f42b96be607008bb34e1bc2cdd5bd55d7cb6eb1173fac036b4c82c1d3ba7818da53e2a2bff17619baf7937fd50d0c856637f382d454b3a46fb1a9df9e7d47f499bc838cf16a8ebe0431b9d100fbfb6ddfcc760885c8831481df6cd36ed2380cec110b580f786d1a695ca44ade783e2860e54cb79a42601ce51b2ce7b225c049b9afcea9240860a6b23b01a7ede2f6bafcff00cee45266dfa9e7fe802ba657348bfc3465a39960863cf502"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0xff, 0x5, 0x3}}, {{0x9, 0x5, 0xe, 0x8, 0x3ff, 0xfc, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x5, 0x0, 0x30, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x401}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x2, 0xf8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}]}}, {{0x9, 0x5, 0x8, 0x10, 0x10, 0x5, 0x1f, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x400}, @generic={0x9d, 0xf, "f2ed97cae1ce503c23c4e77a6bde4986d69d5d856bdfe7f31eeee4a4a63d9bac7e15c9584c0e9484fc466f84092c4bdd1823f48a2f5ba5e1e6bd29eeda512c7c4dfe717da185ed8d1a3fee421ef1d6c46d0f7a1dd40dec767bc70f3975e6eff79f677d35cd23a03ed60201847bf1802d7bbf9ad596dda47fa2cc35d7bc8a2ddf075a3a681cca2fd0e613be04a5d597258c75c4158745cb8ee6ff91"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x80, 0x1, 0x1, [@generic={0x1a, 0xe, "a723d23e1792882f08c9c38408e9ea8994382c023c222c3f"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x6, 0xfb, 0x3f}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xe0, 0x5, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0xc000}, @uac_iso={0x7, 0x25, 0x1, 0x310a47f037e8dfb4, 0x1, 0x2f}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xf0, 0x1, 0x26, [@generic={0xa3, 0x30, "09a1c3c4ae827bde5309f416044a723a8ff62ab2dca1b01698b70cec835827ceac64a93f693e98b94d254ab82e28d606e1a53a6dcf5daa2c2346f5a52cca0a207c279468086c389aa98bdfee0774bbb0d69c79b6467cf545ff1567a34c6066def69dfbdd66a281a73a9a653c65d988de60cdb559c06470f865c1884382f241a80ea76b7b7a879992619002c65ea34d4152c80de0d56a3df778841a5fce009ce12c"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x33, 0x9}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x0, 0x3, 0xfd, 0xff, 0xf2}, 0xf, &(0x7f0000000640)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0xff, 0x80d}]}, 0x1, [{0xb5, &(0x7f0000000680)=@string={0xb5, 0x3, "459f0876717086933afc501047cddbcd59f677fd7f455fef53204c1f188c2ece2d6396298a8d0946b4e8eb53ec5e5b145c265c9f688d3b154d82a9b473e3b64ca1cc8bc42a724f6a49f77f2819e4f9ec65156926b584e4183a52a3d15073d1aad54c5950cfbf168f37c50a5cff833c3aa733af5e7ac3aaa417c45f5fae41d7ce80bae53b17c97e8848d8668c3f87c028f90a1856742cf2a767045ebff39e81096b9e9c5659766088cbeaf56c10d0b35555aea8"}}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000780)=@conn_svc_rsp={0x0, 0x0, 0xa, "d641b929", {0x3, 0x101, 0x0, 0xb6, 0x3f, 0xf2, 0x1f}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x76c, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0x54, 0x1e, 0x88, 0x20, 0x2124, 0x513d, 0xf44e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75a, 0x2, 0x5, 0x2, 0xc0, 0x7, [{{0x9, 0x4, 0xd4, 0xfb, 0x9, 0x2, 0x2, 0x0, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xff01, 0x3f}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0x331, 0x7f, "af3d29284f"}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x80, "a7317d55aef2"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x200, 0x6, 0x2, 0xc000, 0x4, 0x2}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x8, 0x40, "a27e037d15"}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x3, 0x4, [0x5, 0x6, 0x9, 0xa], 0x5}]}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x2, 0x6, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2}, @generic={0xbb, 0x21, "1111d75107b10d048f665d188351e8eb298f4554db4c57b62a1687f2097e32612ebfd9efc097449f38f50f92d3c33d682c4316878bd27f15a526581781c3c7d5e542286002d73f62d7633c4b1e4f36db01c27648c65620c3bd634cc4fb0111b269b8ceb76c88c58aef4b3ff35095e1ddc0504bd8b6e3d4dd6f9bcd28ef5ba72152771ce56ce6f5c9b8e7322f7172b1e5598ed07c8bdafdb84b1d96849786b28e9825703cab9e8c420122f521d5ce88d719691463d0d500b949"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x40, 0x8, 0xdf}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0x0, 0x9, [@generic={0xf6, 0x1d6d8d35cc111174, "d4c31a0b22e2b0b2e4c2992483400643a52c1a6a5b24334cd4017b77d36686388be7ff9fc9c066c1bd9e4915b578f0fb060bc1ee45fa6bfb815abfaeaa4c403d6399f7c3525b124a21dc95d5d48920c9b250d32b9b7b2599387f418b9ddb74116ea54d051bd9416bb19367d5042fbfc4cc2c5afcf88e12b67ada87c435d4a50bbd3bff7c14680674e08172eed3907cbc42e6cc141f34783ff8d9fdfd12f4f6f1ab484b1a5f2dbd99deb62cc8032508c00751c76f221266d8937abbd69d8461a853727683c0abbf5cf76da9a4fee79e86af74d38b22710576c50ca8dc304394a8d9cc829d47c8564dc482afa1440ccbef1b46c371"}, @generic={0x77, 0x11, "8f33e80322e5015f6097ed63f1645f4bef333ef6e4b996edbf743d40a2f7a6d2a288495b5231c694f7d83c7249206f28d9376615891ced6143db2b43e8efbd9cf26cdc7e94046f653e4abaed4c5e3b5d9c5a370eeb5feb261daf912c0fa2e3aae7d7580b2af39ed886ac8dfcea40314e902d41d129"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x0, 0x2, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x5}, @generic={0x89, 0x24, "c08954840252d8228bca3590000381608ccfa09ca408586180fb0b34ad507e816d826caf9ecf7bad75e9225b31f29ea6e82ac7d74a3f3383a05626ca505cac598f2a6173b3cd76001472eedb3cfb891d9055de24f7b489367a0101c7c13a5f0539474380aa9eecfdad6dcc7ff2854fb6c4a41710c06ca3e653d60f968283a754c3e3400b66ed7a"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x20, 0x3f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x1f, 0x7, 0x1f, [@generic={0xca, 0xb, "4e94545198f68bcefa9141297b24426924a7ef440f0f9eb021e0864e17d4fbc7d88acfb35b37cca1c7497a117c4c855581dfff4b663442450f17c4395606988ddc9c201cc168f5dc8da79c230ffe2ac5527bb3efb026b4e1fb582f04929cdad61023659f61413934dcf7195fd1614f31b33b22f08866ec05699713990e7e39a9509b7b7435f6d7f86e71663846a3bff7b75436c05e032433d827cfb5934b6d7de4925eb46b3ca19a914524c7b41fb3fe87cfd869c702b077fd3640253cca7aad2a6c4b560a78fcab"}, @generic={0x83, 0x0, "09bac568f42a82470e046d957b69ee34486d2ffeda54d3392c43826e8f903c1b2cf0eaa58bd59b229aee15e2a6940313fbbe51c2de033a42b66e2d81c286754fb2978d39bb720129239a70dd3b2801d3306d5cc38075f19c0b88f1522f177b59a624b9cec0c0f8c3be8c2fa7070640c2933d2b2c6b5d71b41fe78181e328a720ba"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x7f, 0x0, 0x9, [@generic={0xba, 0x23, "a55b0051751bd9e944a6205bb6d4340614447c539b7d066d197326de1ed64e59f4dcf431010ba6beefe8a6c90f6e9587cfe43547267f65cbc5759dbd1245c823c6e155c2636cebedf17d57de8126b15545d87d39f18cb3f9c05db692a89fa4def582d10c79c36db8ca45bc0dde89646354f1d8f0138ef6f2e5312e924c592d9ca1c0a8a948c3c50616e354205c3756d71f0fe682c2d354abeb880b8e5865aa4635699cf55cc263c2141f984b5b839df847c440629f114337"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x60, 0x3f, 0x2}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x5, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0x90, 0x6, 0x4, 0x6, 0x16, 0xd9, 0x4, [@generic={0xb9, 0xc, "34517b79be99ab94cba66f7abe6bfb726e76b544ea0d8fb243e1fee6d18e62ea4876800aea2922d894d05812789422682dc227228ef73f63044dc3dfa7103462d445ce3f6a3f5a24c693cedcf03bf93a20522b78a805e734d4f110e97c0496dd9a24b3f5fc24ecb5c6a8787d9b1030eb8b510dfd4a44d909eacdca02081ee3062f40e71296fac00995d12753853b82d2f69c40e198a0da2da345dabaa20520eb9122ca0c4e670da7bfa0325c5f8a01668d0e90b65c2e81"}, @hid_hid={0x9, 0x21, 0x0, 0x7f, 0x1, {0x22, 0x131}}], [{{0x9, 0x5, 0x3, 0x10, 0x8, 0x4, 0xff, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x6, 0xc, 0x3ff, 0x7, 0x9c, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xbdf0}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x1, 0x67, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x4}]}}, {{0x9, 0x5, 0x80, 0x8, 0x40, 0x1, 0x5, 0x4, [@generic={0xca, 0x18, "c5a8b8b79d084eb73afe1ff4878d618eb45c9029e824e906ad9b8541aab2c472cfabe4d3a6dffe904c929e6574fb2d8a5da60388d38a4a25913b31c8e3a1e5c929ba5dfe4777a31d1dbac10a729448a8592c695db6051a4852ad35f0f422aadda5936c99cd8113b656b4fff285c973c0a1dd3dbefd04be70bd5f4b5de07c60a95cf5b0768f9f1891fc81bd736bca1989a9f68a32a6270e1b906cd40e2423689c14cfce2f798bf29280ba867c106eadb47917f63af8c9e542316a0966ef8722a368685bd4e3932d89"}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x250, 0x10, 0x7, 0x3f, 0x8, 0x2}, 0xf, &(0x7f0000000f80)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x80, 0x40, 0x3}]}, 0x6, [{0x8d, &(0x7f0000000fc0)=@string={0x8d, 0x3, "ee164b017fd829de54586496d33f9758290bfb9da75c8fd67bd917f80b2db6c9431fdf29ed6dcb09bad5e82c63c7ef1af6545673f849d88784d44128b4bbc38b55085a794b3b3889ab2947022b3e6d37d630f4fa3fadfc2c5a63fd5ccdf3162dc1d849925866e70076dbbe3f8cb88043e3335990420ba81c9389499ea7826a9d7dd1d448174af9d6e7411f"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x180a}}, {0x5f, &(0x7f00000010c0)=@string={0x5f, 0x3, "5eec22f7ac324f0a4e222b26d5b2f404bd3ce96da2cd866d9d080c0dc07ab2d305e75d387fb9cec9fdd65d822b0dc2434718304e007d578fda5228df97c9c2dd84ddde47fff207be403b220fa52685ae0744cb3f7f498ffdfc4f6cc9fe"}}, {0x2, &(0x7f0000001140)=@string={0x2}}, {0x4e, &(0x7f0000001180)=@string={0x4e, 0x3, "8302ee947469c40e5fee3afd4bae2c55b195e6abb8aea024467901e7c5a478e361e72cffc0551658ca0393131deb8f7e42b16c3b85fb00c3f2bcbd8158cd4b2f9df1107650564a64785399ea"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x42b}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5df8}}, './file0\x00'}) r5 = fcntl$getown(r4, 0x9) perf_event_open(&(0x7f00000015c0)={0x1, 0x80, 0x1, 0x1, 0x80, 0xfd, 0x0, 0xfffffffffffffff9, 0x10008, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000001580), 0x9}, 0xa0, 0xffff, 0x4e3a2a85, 0x7, 0x100000001, 0x2, 0xffff, 0x0, 0x800, 0x0, 0x10000}, r5, 0x2, r4, 0x1) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x2a4, &(0x7f00000012c0)={[{0xc2, 0x4e00, "c6ea3adea39254279120dcde90808058aef1cd32a840a09af52b5125db31bddae22e01396542158c0a8d08c495c10aee4a025db304fba5cae2419aee8e0921bd8e1f909b4cfd151807b020cd81a2db84da255d037f8f907ab462c1a4d62b185a7b67c45e1a272ba0d244dd5b67576ba1f6127c62dd0daf0f58e75afa571af596d7dbccf10ebb81a6a566aa6abffcedbced2b7a98adad77787dfa50c1f6a88bb6953363805cc1797812743f2eb9762fed71d743854a263d6ae0e50d4712d2c9874de2"}, {0xad, 0x4e00, "05b095b4432e41caad4bd2e2b6e28e45ba9f5649f7fda8108b5d08c963f09a7b88097dec437134c7bf7d16dd85cbc43baab061d2f42316e9ef82e27bf369e6be6fc384af48e2240ec231c21d171f4fd0b1e32aad509c1c7986ec0f57d48708c53dd6f76add150b7b1348fcc794b8162d9d2c312f825ee37cbdde9a92731e438567c0be301feb9b143aca42ab68b76692c68a6a4dee38a51a0c2e9e07df3d23b9d172a5be3b8dac54fc3d1219d1"}, {0x26, 0x4e00, "04ebd2a76e83059e6d9e73008735805c1b0960784d8c2abba311a214cc7e19fb60a970bd177e"}, {0x39, 0x4e00, "17554eb4683c4c179d8f5adfc783cb1c7ce8cb5a80ba526f4ceefe8fffe5b07c4c3b7af0e1c177bfa0becae00c33ddbb6bc93edf8bcb94fade"}, {0x5, 0x4e00, "2eed441d81"}, {0xa9, 0x4e00, "451595bf3ac06d8dba915e073839cb2031848e786b3565ba08530cea40c1a091bd67cb7da2ad8fa431fc1855f712ab5d5947f0dae2a4e40a1eefd961ddc8d0c670d1e66391203696565c0d0e38c81b3adb026821d71b1ce2296675ac8f8246000e49bfb9517698856a7861cd746f5acc1428fe0ac7b82e66d31a8b092c2ef4ad798c0996a3950a251bb1fc6dca16359b8d864cf8ac70cbfa710d9aea8db28885ba18f448d2908b4700"}]}) fcntl$setstatus(r2, 0x4, 0x8c00) [ 1094.027708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.032657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.543757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.547674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x1, 0x2) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000080)={'wg0\x00', {0x2, 0x0, @private}}) 11:32:28 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES64], 0x5) ioctl$sock_bt_hci(r1, 0x400448ce, &(0x7f0000000140)="431c91399ed35a142190ba919a51c9851092fa37f2aae390e9ea46c2617f74d8ca57b70000db7bfbdffec1405ed543fda6935641e357be8d39ffce51d75df084b1cb40486077d1b5ef95111e662ddb5744b60f9f1c52b4771e6a66ff398177a25eea55a0fea7ba97f72e430b054d3d703a911aea920c640f504f2eaf22c72b4814319b5c2ff7238a035d8dee46750423e489c0173ab00ccb434d7a3ef178f592903b2d8ff56714663b99b4c0179548e56a4aaad98c779d78e00b57b9ca171475dd0f7556c75b1e6348ad9cfb7421e0901e3636574ade8bc7") setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:32:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:28 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:28 executing program 2: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:28 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) close(r0) 11:32:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, 0x0, 0x0) close(r0) 11:32:28 executing program 4: syslog(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 11:32:28 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:28 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000011c0), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(r0, 0x0, r1) write(r1, &(0x7f0000000080)="01", 0x41030) close(r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25, 0x5}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000000040)=ANY=[]) creat(&(0x7f0000000100)='./file0/file0\x00', 0xa) 11:32:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, 0x0, 0x0) close(r0) 11:32:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, 0x0, 0x0) close(r0) 11:32:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = socket(0x5, 0x40804, 0x8) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:32:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 1) 11:32:29 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:29 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x0, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, 0x0, 0x0) close(r0) 11:32:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 1) [ 1110.097870] FAULT_INJECTION: forcing a failure. [ 1110.097870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.099503] CPU: 0 PID: 7050 Comm: syz-executor.1 Not tainted 6.0.0-next-20221011 #1 [ 1110.100544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.101614] Call Trace: [ 1110.101969] [ 1110.102296] dump_stack_lvl+0x8b/0xb3 [ 1110.102856] should_fail.cold+0x5/0xa [ 1110.103421] _copy_from_user+0x2a/0x170 [ 1110.103973] do_ip_getsockopt+0x41d/0x1d40 [ 1110.104589] ? ipv4_pktinfo_prepare+0x970/0x970 [ 1110.105251] ? __lock_acquire+0xbad/0x5e70 [ 1110.105847] ? _parse_integer+0x30/0x30 [ 1110.106422] ? __lock_acquire+0xbad/0x5e70 [ 1110.107057] ? lock_is_held_type+0xd7/0x130 [ 1110.107679] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1110.108444] ? __mutex_add_waiter+0x120/0x120 [ 1110.109087] ? lock_release+0x3b2/0x750 [ 1110.109663] ? get_pid_task+0xe8/0x210 [ 1110.110267] ip_getsockopt+0x9c/0x1e0 [ 1110.110841] ? find_held_lock+0x2c/0x110 [ 1110.111469] ? do_ip_getsockopt+0x1d40/0x1d40 [ 1110.112151] ? lock_release+0x3b2/0x750 [ 1110.112781] ? __fget_files+0x24e/0x450 [ 1110.113448] ? lock_downgrade+0x6d0/0x6d0 [ 1110.114098] udp_getsockopt+0x5d/0xa0 [ 1110.114668] ipv6_getsockopt+0x246/0x2b0 [ 1110.115292] ? do_ipv6_getsockopt+0x2c30/0x2c30 [ 1110.115975] tcp_getsockopt+0x9f/0x100 [ 1110.116617] ? sock_def_destruct+0x10/0x10 [ 1110.117279] __sys_getsockopt+0x14c/0x250 [ 1110.117908] ? __ia32_sys_setsockopt+0x150/0x150 [ 1110.118640] __x64_sys_getsockopt+0xba/0x160 [ 1110.119315] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.120116] do_syscall_64+0x3b/0x90 [ 1110.120685] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1110.121442] RIP: 0033:0x7fcb63275b19 [ 1110.121973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.124543] RSP: 002b:00007fcb607eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1110.125627] RAX: ffffffffffffffda RBX: 00007fcb63388f60 RCX: 00007fcb63275b19 [ 1110.126657] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1110.127692] RBP: 00007fcb607eb1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1110.128743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.129776] R13: 00007ffe967f555f R14: 00007fcb607eb300 R15: 0000000000022000 [ 1110.130861] 11:32:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 2) 11:32:44 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:32:44 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080), 0x0) close(r0) 11:32:44 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000800000000017269dbe", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000f5788af54e14de14593de3607a3af0fc33653b16f5d09b36349adaec89e00d1f4dcd8f82cb0b9452299d6dc2d624c8421b639641aff3db2f0baf3785aa7e1d763564b6dcbf342c11"]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x1) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffff, 0xffff, "3c67a5", 0x5, 0x20}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r3 = dup(r1) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 11:32:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 2) 11:32:44 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1125.756856] FAULT_INJECTION: forcing a failure. [ 1125.756856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.758034] CPU: 0 PID: 7068 Comm: syz-executor.1 Not tainted 6.0.0-next-20221011 #1 [ 1125.758758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.759409] Call Trace: [ 1125.759589] [ 1125.759750] dump_stack_lvl+0x8b/0xb3 [ 1125.760022] should_fail.cold+0x5/0xa [ 1125.760295] _copy_to_user+0x2a/0x140 [ 1125.760573] copy_to_sockptr_offset+0x169/0x1a0 [ 1125.760896] ? trace_rcu_dyntick+0x1a7/0x250 [ 1125.761204] ? set_mcast_msfilter+0x340/0x340 [ 1125.761515] ? __local_bh_enable_ip+0xa0/0x130 [ 1125.761842] do_ip_getsockopt+0x708/0x1d40 [ 1125.762133] ? ipv4_pktinfo_prepare+0x970/0x970 [ 1125.762464] ? _parse_integer+0x30/0x30 [ 1125.762756] ? __lock_acquire+0xbad/0x5e70 [ 1125.763066] ? lock_is_held_type+0xd7/0x130 [ 1125.763362] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1125.763723] ? __mutex_add_waiter+0x120/0x120 [ 1125.764036] ? lock_release+0x3b2/0x750 [ 1125.764314] ? get_pid_task+0xe8/0x210 [ 1125.764596] ip_getsockopt+0x9c/0x1e0 [ 1125.764865] ? find_held_lock+0x2c/0x110 [ 1125.765146] ? do_ip_getsockopt+0x1d40/0x1d40 [ 1125.765460] ? lock_release+0x3b2/0x750 [ 1125.765737] ? __fget_files+0x24e/0x450 [ 1125.766011] ? lock_downgrade+0x6d0/0x6d0 [ 1125.766305] udp_getsockopt+0x5d/0xa0 [ 1125.766579] ipv6_getsockopt+0x246/0x2b0 [ 1125.766882] ? do_ipv6_getsockopt+0x2c30/0x2c30 [ 1125.767227] tcp_getsockopt+0x9f/0x100 [ 1125.767531] ? sock_def_destruct+0x10/0x10 [ 1125.767837] __sys_getsockopt+0x14c/0x250 [ 1125.768144] ? __ia32_sys_setsockopt+0x150/0x150 [ 1125.768487] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1125.768851] ? trace_rcu_dyntick+0x1a7/0x250 [ 1125.769190] __x64_sys_getsockopt+0xba/0x160 [ 1125.769518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.769874] do_syscall_64+0x3b/0x90 [ 1125.770147] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1125.770520] RIP: 0033:0x7fcb63275b19 [ 1125.770783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.772066] RSP: 002b:00007fcb607eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1125.772618] RAX: ffffffffffffffda RBX: 00007fcb63388f60 RCX: 00007fcb63275b19 [ 1125.773124] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1125.773628] RBP: 00007fcb607eb1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1125.774145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.774651] R13: 00007ffe967f555f R14: 00007fcb607eb300 R15: 0000000000022000 [ 1125.775173] 11:32:44 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 3) 11:32:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 3) 11:32:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:32:59 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ftruncate(r1, 0x9) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000000)={0x3}) 11:32:59 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080), 0x0) close(r0) 11:32:59 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:32:59 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 4) 11:32:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080), 0x0) close(r0) [ 1140.554549] FAULT_INJECTION: forcing a failure. [ 1140.554549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.556055] CPU: 0 PID: 7105 Comm: syz-executor.1 Not tainted 6.0.0-next-20221011 #1 [ 1140.557014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.558012] Call Trace: [ 1140.558345] [ 1140.558641] dump_stack_lvl+0x8b/0xb3 [ 1140.559139] should_fail.cold+0x5/0xa [ 1140.559651] _copy_to_user+0x2a/0x140 [ 1140.560148] copy_to_sockptr_offset+0x169/0x1a0 [ 1140.560736] ? trace_rcu_dyntick+0x1a7/0x250 [ 1140.561311] ? set_mcast_msfilter+0x340/0x340 [ 1140.561879] ? __local_bh_enable_ip+0xa0/0x130 [ 1140.562490] do_ip_getsockopt+0x76a/0x1d40 [ 1140.563135] ? ipv4_pktinfo_prepare+0x970/0x970 [ 1140.563988] ? _parse_integer+0x30/0x30 [ 1140.564636] ? __lock_acquire+0xbad/0x5e70 [ 1140.565327] ? lock_is_held_type+0xd7/0x130 [ 1140.566008] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1140.566813] ? __mutex_add_waiter+0x120/0x120 [ 1140.567540] ? lock_release+0x3b2/0x750 [ 1140.568162] ? get_pid_task+0xe8/0x210 [ 1140.568768] ip_getsockopt+0x9c/0x1e0 [ 1140.569361] ? find_held_lock+0x2c/0x110 [ 1140.569989] ? do_ip_getsockopt+0x1d40/0x1d40 [ 1140.570676] ? lock_release+0x3b2/0x750 [ 1140.571302] ? __fget_files+0x24e/0x450 [ 1140.571923] ? lock_downgrade+0x6d0/0x6d0 [ 1140.572590] udp_getsockopt+0x5d/0xa0 [ 1140.573185] ipv6_getsockopt+0x246/0x2b0 [ 1140.573815] ? do_ipv6_getsockopt+0x2c30/0x2c30 [ 1140.574545] tcp_getsockopt+0x9f/0x100 [ 1140.575188] ? sock_def_destruct+0x10/0x10 [ 1140.575837] __sys_getsockopt+0x14c/0x250 [ 1140.576488] ? __ia32_sys_setsockopt+0x150/0x150 [ 1140.577213] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1140.577961] ? trace_rcu_dyntick+0x1a7/0x250 [ 1140.578669] __x64_sys_getsockopt+0xba/0x160 [ 1140.579373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.580124] do_syscall_64+0x3b/0x90 [ 1140.580600] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.581239] RIP: 0033:0x7fcb63275b19 [ 1140.581717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.583896] RSP: 002b:00007fcb607eb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1140.584808] RAX: ffffffffffffffda RBX: 00007fcb63388f60 RCX: 00007fcb63275b19 [ 1140.585675] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1140.586528] RBP: 00007fcb607eb1d0 R08: 0000000020000000 R09: 0000000000000000 [ 1140.587400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.588253] R13: 00007ffe967f555f R14: 00007fcb607eb300 R15: 0000000000022000 [ 1140.589155] 11:32:59 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 3) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:32:59 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="07c68146fd0000006e2f66696c653000c4ad294638268fdea7ae3e9834a4ff0b9a7282f066f61f1b202f1a714dead33bc135ff6135d9a37631eb00cdf0a3380f3f36cd8501e507198430e9178e9bd18943b09a344392d94e3261bae963b14a1f3d8fa3df313489f537f047275af111df1a60ebdbd6e9aa502d84c6f1a65ed6deb6f02c4fa220d138b42cf9239b0e65b0208e452a0e65de84bbb42ebab111e2f90731e448cb0e5c93e1cef4185edb47ae"]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f00000000c0), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f00000002c0)=0x6e) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x3f, 0x7, 0x101, 0x2, 0x0, 0x3]}, &(0x7f0000000080)=0x78) 11:32:59 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1140.709976] FAULT_INJECTION: forcing a failure. [ 1140.709976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.710847] CPU: 1 PID: 7114 Comm: syz-executor.2 Not tainted 6.0.0-next-20221011 #1 [ 1140.711435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.712005] Call Trace: [ 1140.712204] [ 1140.712384] dump_stack_lvl+0x8b/0xb3 [ 1140.712686] should_fail.cold+0x5/0xa [ 1140.713003] _copy_from_user+0x2a/0x170 [ 1140.713281] __do_sys_memfd_create+0x103/0x4e0 [ 1140.713595] do_syscall_64+0x3b/0x90 [ 1140.713852] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.714198] RIP: 0033:0x7f0754737b19 [ 1140.714457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.715647] RSP: 002b:00007f0751cacf48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1140.716159] RAX: ffffffffffffffda RBX: 0000000020000140 RCX: 00007f0754737b19 [ 1140.716626] RDX: 00007f0751cad000 RSI: 0000000000000000 RDI: 00007f07547910fb [ 1140.717094] RBP: 0000000000000000 R08: 00007f0751cacff8 R09: ffffffffffffffff [ 1140.717566] R10: 00007f0751cacffc R11: 0000000000000246 R12: 00000000200000c0 [ 1140.718033] R13: 0000000020000100 R14: 0000000000000000 R15: 0000000020000180 [ 1140.718523] 11:32:59 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(0xffffffffffffffff) 11:32:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 5) 11:32:59 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1, 0x4}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r5, 0x300}, 0x20}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, r7, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x100, 0x3e}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x212}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4c7}, @NL80211_ATTR_FRAME={0x110, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_a, @broadcast, @random="7292457cc8b7", {0xd, 0x9}}, 0x2, @default, 0x904, @void, @val={0x1, 0x7, [{0x5, 0x1}, {0x1, 0x1}, {0x18}, {0x4, 0x1}, {0x22}, {0x60}, {0x4}]}, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x7f, 0xad, 0x8, 0x7}}, @void, @val={0x5, 0x7f, {0x4, 0x59, 0x9f, "5b71d7ee06b8f5d4390d3397769ebf8dd594d32a97f6bd3616ed3e0ff23164a90c7b7b4f3e254aff3ae06b783ae300c700dc7254ea88443e61606d4035e0e4c642b6db0305937c9d4f9e1f57d1efbaa9fd5e5b94e6a828b78d034d91a22842805c66faf0e809e90a93bbc35f30d423002217d657252ea58acd3d0c03"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x95, 0x2}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6, 0x28}}, @void, [{0xdd, 0x37, "c3bb762aa4eacf587686eba8453a0172c614b2679c00041cefab49780f8171c90f9a43bde9013b2efe84cf449f4665c39de19c82731d19"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf78}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 11:32:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) (fail_nth: 4) 11:32:59 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:59 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:32:59 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 4) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:32:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) [ 1140.940669] FAULT_INJECTION: forcing a failure. [ 1140.940669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.942341] CPU: 0 PID: 7127 Comm: syz-executor.1 Not tainted 6.0.0-next-20221011 #1 [ 1140.943296] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.944281] Call Trace: [ 1140.944603] [ 1140.944893] dump_stack_lvl+0x8b/0xb3 [ 1140.945379] should_fail.cold+0x5/0xa [ 1140.945886] _copy_to_user+0x2a/0x140 [ 1140.946380] simple_read_from_buffer+0xcc/0x160 [ 1140.946981] proc_fail_nth_read+0x198/0x230 [ 1140.947543] ? proc_sessionid_read+0x230/0x230 [ 1140.948138] ? security_file_permission+0xb1/0xe0 [ 1140.948760] vfs_read+0x253/0x930 [ 1140.949217] ? proc_sessionid_read+0x230/0x230 [ 1140.949792] ? kernel_read+0x1c0/0x1c0 [ 1140.950310] ? __fget_files+0x270/0x450 [ 1140.950841] ksys_read+0x127/0x250 [ 1140.951331] ? __ia32_sys_pwrite64+0x220/0x220 [ 1140.951923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.952560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.953224] do_syscall_64+0x3b/0x90 [ 1140.953699] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1140.954353] RIP: 0033:0x7fcb6322869c [ 1140.954826] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1140.957011] RSP: 002b:00007fcb607eb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1140.957942] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb6322869c [ 1140.958805] RDX: 000000000000000f RSI: 00007fcb607eb1e0 RDI: 0000000000000004 [ 1140.959724] RBP: 00007fcb607eb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.960584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.961451] R13: 00007ffe967f555f R14: 00007fcb607eb300 R15: 0000000000022000 [ 1140.962350] 11:33:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:33:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(0xffffffffffffffff) 11:33:13 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:13 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:13 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 5) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"/264], 0x114}, 0x1, 0x0, 0x0, 0x881}, 0x5ddb1d8eb209221d) 11:33:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 6) 11:33:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:33:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:33:13 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/31, 0x1f}) move_pages(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup(r2) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 11:33:13 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 7) 11:33:13 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 8) 11:33:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)) 11:33:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 7) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:33:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) close(0xffffffffffffffff) 11:33:29 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:29 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = fsopen(&(0x7f0000000040)='udf\x00', 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) 11:33:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x11, 0x2, 0x0, &(0x7f0000000000)) 11:33:29 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:33:29 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 9) 11:33:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 9) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x88, 0x2, 0x0, &(0x7f0000000000)) 11:33:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 10) 11:33:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) r2 = dup(r0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) 11:33:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:33:45 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:45 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x600, 0x2, 0x0, &(0x7f0000000000)) 11:33:45 executing program 6: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="07c68146fd0000006e2f66696c653000c4ad294638268fdea7ae3e9834a4ff0b9a7282f066f61f1b202f1a714dead33bc135ff6135d9a37631eb00cdf0a3380f3f36cd8501e507198430e9178e9bd18943b09a344392d94e3261bae963b14a1f3d8fa3df313489f537f047275af111df1a60ebdbd6e9aa502d84c6f1a65ed6deb6f02c4fa220d138b42cf9239b0e65b0208e452a0e65de84bbb42ebab111e2f90731e448cb0e5c93e1cef4185edb47ae"]) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f00000000c0), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f00000002c0)=0x6e) r5 = dup(r4) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x3f, 0x7, 0x101, 0x2, 0x0, 0x3]}, &(0x7f0000000080)=0x78) 11:33:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x1100, 0x2, 0x0, &(0x7f0000000000)) 11:33:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4cc02, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) inotify_init() r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c202, 0x0) ioctl$CDROMEJECT_SW(r5, 0x530f, 0x1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1c87) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_reply={{0x430, 0x26}, {@any, "708756fa83f93308c5878399def8dc5a", "be7b04e8da97b0c597050c18354f9549"}}}, 0x2a) r6 = dup(r0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) 11:33:45 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:33:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 11) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000800000000017269dbe", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000f5788af54e14de14593de3607a3af0fc33653b16f5d09b36349adaec89e00d1f4dcd8f82cb0b9452299d6dc2d624c8421b639641aff3db2f0baf3785aa7e1d763564b6dcbf342c11"]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x1) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffff, 0xffff, "3c67a5", 0x5, 0x20}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r3 = dup(r1) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 11:33:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x8800, 0x2, 0x0, &(0x7f0000000000)) 11:33:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:33:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 11) 11:33:46 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1187.216267] FAULT_INJECTION: forcing a failure. [ 1187.216267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.218061] CPU: 0 PID: 7267 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1187.219026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.220061] Call Trace: [ 1187.220389] [ 1187.220684] dump_stack_lvl+0x8b/0xb3 [ 1187.221185] should_fail.cold+0x5/0xa [ 1187.221696] copyin+0x19/0x120 [ 1187.222131] copy_page_from_iter_atomic+0x249/0x1290 [ 1187.222788] ? ext4_da_write_begin+0x63a/0x9a0 [ 1187.223393] ? hash_and_copy_to_iter+0x210/0x210 [ 1187.224020] ? ext4_write_begin+0x14d0/0x14d0 [ 1187.224631] generic_perform_write+0x2cb/0x580 [ 1187.225243] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1187.225913] ? discard_new_inode+0x190/0x190 [ 1187.226483] ? down_write_killable_nested+0x260/0x260 [ 1187.227196] ext4_buffered_write_iter+0x164/0x460 [ 1187.227870] ext4_file_write_iter+0x3fb/0x1900 [ 1187.228502] ? lock_release+0x750/0x750 [ 1187.229051] ? ext4_file_mmap+0x250/0x250 [ 1187.229616] ? lock_is_held_type+0xd7/0x130 [ 1187.230203] vfs_write+0x9c3/0xd90 [ 1187.230704] ? kernel_write+0x630/0x630 [ 1187.231257] ? __fget_files+0x270/0x450 [ 1187.231833] ksys_write+0x127/0x250 [ 1187.232333] ? __ia32_sys_read+0xb0/0xb0 [ 1187.232876] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1187.233560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1187.234250] do_syscall_64+0x3b/0x90 [ 1187.234749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1187.235424] RIP: 0033:0x7f15cfaa8b19 [ 1187.235936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.238231] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1187.239193] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1187.240117] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1187.241037] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.241950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1187.242846] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1187.243782] 11:33:46 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 12) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:33:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fddbdf25770000000c009900f9ffffff0f0000000500ee00010000000500ee007f00000005f42e94917121d9252613c300ee001f000000e9c86d18fefabb5a7b1452b672a0da6a5aa4133c7392e3db49f678ae13f116329a1d55c0676a6c0cdf8870ef726727f9cc2a14647fbfea6a1def68e7"], 0x38}}, 0x4004000) 11:33:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x1000000, 0x2, 0x0, &(0x7f0000000000)) 11:34:00 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 13) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x6000000, 0x2, 0x0, &(0x7f0000000000)) 11:34:00 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x5) syz_open_dev$vcsa(&(0x7f0000000040), 0x1000, 0x200) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x6, 0x82000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, 0x47) 11:34:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="010000800000000017269dbe", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000f5788af54e14de14593de3607a3af0fc33653b16f5d09b36349adaec89e00d1f4dcd8f82cb0b9452299d6dc2d624c8421b639641aff3db2f0baf3785aa7e1d763564b6dcbf342c11"]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) fsetxattr$security_selinux(r2, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x1) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffff, 0xffff, "3c67a5", 0x5, 0x20}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r3 = dup(r1) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0) 11:34:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:34:00 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 12) 11:34:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x11000000, 0x2, 0x0, &(0x7f0000000000)) 11:34:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 13) 11:34:00 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:00 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 14) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:00 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = memfd_secret(0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) setuid(r4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000940)={'trans=unix,', {[{@cache_fscache}, {@access_client}, {@access_any}, {@access_uid={'access', 0x3d, 0xee01}}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r5}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'environ\x00'}}, {@subj_role={'subj_role', 0x3d, 'environ\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}}) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0xa8420, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733d756e69782c63476368653d667363616368652c6163636573733d636c69656e742c6161636573733d616e792c6163636573733d900b927685688e534d07d8004afd90e17a617c576259f58251013479860a924ddc61e47a000000209eba75e8f0255827dc9b154cdb890d8f45dc895d43949e386e40574d91f3cfb92b6fbe71446f2c52d4f9bf88e74f1c40af81d0734b91cd2319036f", @ANYRESDEC=0xee01, @ANYBLOB=',privport,dfltgid=', @ANYRESHEX=r9, @ANYBLOB=',fscontext=system_u,obj_user=environ\x00,subj_role=environ\x00,euid=', @ANYRESDEC=r10, @ANYBLOB=',measure,\x00']) r11 = getpid() pidfd_open(r11, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x2, r8, 0x0, r3, r9, 0x59, 0x2fb9}, 0x6b, 0x5, 0x0, 0x1, r11, 0x0, 0x9}) setuid(r7) write$P9_RSTATu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="57000200000000000000000a00f10000002002000000030000000000000000000042ff03000001000000060000000000000003002a242d000006007b3a3a5c272e02002d5e04002f2f8423", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7], 0x57) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000000)={0x6, 0x0, 0x0, 'queue1\x00', 0x10000}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) 11:34:00 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 14) 11:34:00 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 11:34:00 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x88000000, 0x2, 0x0, &(0x7f0000000000)) 11:34:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 11:34:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 15) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) 11:34:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 15) 11:34:15 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) 11:34:15 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 1) close(r0) 11:34:15 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 11:34:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 16) 11:34:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 16) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0xa4ffffff, 0x2, 0x0, &(0x7f0000000000)) 11:34:15 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1216.586386] FAULT_INJECTION: forcing a failure. [ 1216.586386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.588031] CPU: 1 PID: 7353 Comm: syz-executor.2 Not tainted 6.0.0-next-20221011 #1 [ 1216.589085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1216.590182] Call Trace: [ 1216.590527] [ 1216.590854] dump_stack_lvl+0x8b/0xb3 [ 1216.591396] should_fail.cold+0x5/0xa [ 1216.591951] strncpy_from_user+0x34/0x3e0 [ 1216.592590] getname_flags.part.0+0x95/0x4f0 [ 1216.593239] getname+0x8e/0xd0 [ 1216.593717] do_sys_openat2+0xf9/0x4c0 [ 1216.594296] ? build_open_flags+0x6f0/0x6f0 [ 1216.594919] ? find_held_lock+0x2c/0x110 [ 1216.595520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1216.596302] __x64_sys_openat+0x13f/0x1f0 [ 1216.596914] ? __ia32_compat_sys_open+0x1c0/0x1c0 [ 1216.597607] ? trace_rcu_dyntick+0x1a7/0x250 [ 1216.598267] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1216.599011] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1216.599762] do_syscall_64+0x3b/0x90 [ 1216.600323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1216.601066] RIP: 0033:0x7f07546eaa04 [ 1216.601602] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 1216.604025] RSP: 002b:00007f0751caced0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1216.605089] RAX: ffffffffffffffda RBX: 00007f0754781970 RCX: 00007f07546eaa04 [ 1216.606044] RDX: 0000000000000002 RSI: 00007f0751cad000 RDI: 00000000ffffff9c [ 1216.607010] RBP: 00007f0751cad000 R08: 0000000000000000 R09: ffffffffffffffff [ 1216.607986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1216.608941] R13: 0000000000000004 R14: 0000000020000140 R15: 0000000000000000 [ 1216.609936] 11:34:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 2) close(r0) 11:34:28 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 17) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) (fail_nth: 1) 11:34:28 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 17) 11:34:28 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:28 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:34:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0xffffff7f, 0x2, 0x0, &(0x7f0000000000)) [ 1229.796345] FAULT_INJECTION: forcing a failure. [ 1229.796345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.797176] CPU: 0 PID: 7366 Comm: syz-executor.6 Not tainted 6.0.0-next-20221011 #1 [ 1229.797686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.798217] Call Trace: [ 1229.798409] [ 1229.798570] dump_stack_lvl+0x8b/0xb3 [ 1229.798845] should_fail.cold+0x5/0xa [ 1229.799120] _copy_to_user+0x2a/0x140 [ 1229.799389] simple_read_from_buffer+0xcc/0x160 [ 1229.799712] proc_fail_nth_read+0x198/0x230 [ 1229.800012] ? proc_sessionid_read+0x230/0x230 [ 1229.800341] ? security_file_permission+0xb1/0xe0 [ 1229.800686] vfs_read+0x253/0x930 [ 1229.800936] ? proc_sessionid_read+0x230/0x230 [ 1229.801249] ? kernel_read+0x1c0/0x1c0 [ 1229.801529] ? __fget_files+0x270/0x450 [ 1229.801821] ksys_read+0x127/0x250 [ 1229.802072] ? __ia32_sys_pwrite64+0x220/0x220 [ 1229.802391] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.802744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1229.803101] do_syscall_64+0x3b/0x90 [ 1229.803367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1229.803721] RIP: 0033:0x7f060e4f069c [ 1229.803976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1229.805149] RSP: 002b:00007f060bab3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1229.805647] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f060e4f069c [ 1229.806117] RDX: 000000000000000f RSI: 00007f060bab31e0 RDI: 0000000000000003 [ 1229.806609] RBP: 00007f060bab31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.807102] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1229.807609] R13: 00007fff8b48c5cf R14: 00007f060bab3300 R15: 0000000000022000 [ 1229.808148] 11:34:28 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 18) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:34:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:34:28 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 19) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:42 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 20) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0xffffffa4, 0x2, 0x0, &(0x7f0000000000)) 11:34:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:34:42 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:34:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 3) close(r0) 11:34:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 18) 11:34:42 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000000)) 11:34:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) dup(r1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r2, 0x0, 0xfffffffffffffff8, 0x0) listen(r2, 0x5) 11:34:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 4) close(r0) 11:34:43 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 21) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 11:34:43 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 19) 11:34:43 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:43 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1f, 0x0) 11:34:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 20) 11:34:59 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:59 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 22) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:59 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 11:34:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 5) close(r0) 11:34:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x6, 0x0, &(0x7f0000000000)) 11:34:59 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:59 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) write$bt_hci(r2, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc8, 0x2, 0x40}}}, 0xa) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x2, 0x0) 11:34:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x7, 0x0, &(0x7f0000000000)) 11:34:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 6) close(r0) 11:34:59 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 11:34:59 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) (fail_nth: 23) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:34:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x8, 0x0, &(0x7f0000000000)) 11:34:59 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="018c0c0100"], 0x5) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x6, 0x0) 11:34:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 7) close(r0) [ 1260.669866] FAULT_INJECTION: forcing a failure. [ 1260.669866] name fail_usercopy, interval 1, probability 0, space 0, times 0 11:34:59 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:34:59 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 21) [ 1260.671647] CPU: 1 PID: 7464 Comm: syz-executor.2 Not tainted 6.0.0-next-20221011 #1 [ 1260.672870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.673908] Call Trace: [ 1260.674252] [ 1260.674560] dump_stack_lvl+0x8b/0xb3 [ 1260.675071] should_fail.cold+0x5/0xa [ 1260.675594] _copy_to_user+0x2a/0x140 [ 1260.676118] simple_read_from_buffer+0xcc/0x160 [ 1260.676890] proc_fail_nth_read+0x198/0x230 [ 1260.676930] ? proc_sessionid_read+0x230/0x230 [ 1260.676963] ? security_file_permission+0xb1/0xe0 [ 1260.677010] vfs_read+0x253/0x930 [ 1260.677046] ? proc_sessionid_read+0x230/0x230 [ 1260.677079] ? kernel_read+0x1c0/0x1c0 [ 1260.677125] ? __fget_files+0x270/0x450 [ 1260.677184] ksys_read+0x127/0x250 [ 1260.677221] ? __ia32_sys_pwrite64+0x220/0x220 [ 1260.677259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.677293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.677337] do_syscall_64+0x3b/0x90 [ 1260.677363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1260.677394] RIP: 0033:0x7f07546ea69c [ 1260.677413] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1260.677437] RSP: 002b:00007f0751cad170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1260.677462] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f07546ea69c [ 1260.677480] RDX: 000000000000000f RSI: 00007f0751cad1e0 RDI: 0000000000000003 [ 1260.677495] RBP: 00007f0751cad1d0 R08: 0000000000000000 R09: ffffffffffffffff [ 1260.677512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.677527] R13: 00007ffdbf9a127f R14: 00007f0751cad300 R15: 0000000000022000 [ 1260.677574] 11:35:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 8) close(r0) 11:35:12 executing program 7: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:12 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 22) 11:35:12 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:12 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x7, 0x8}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e20, 0x7, @mcast1, 0x3f}, {0xa, 0x4e21, 0xffff7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x4, [0x20, 0x8, 0x4, 0x80000000, 0x7fff, 0x5, 0xef96, 0x80000001]}, 0x5c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100), 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r2, 0x0, 0xfffffffffffffff8, 0x0) bind(r2, &(0x7f0000000140)=@hci={0x1f, 0x3}, 0x80) 11:35:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x2, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 23) 11:35:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0xa, 0x0, &(0x7f0000000000)) 11:35:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x3, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1273.982321] FAULT_INJECTION: forcing a failure. [ 1273.982321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.983344] CPU: 0 PID: 7505 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1273.983874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1273.984433] Call Trace: [ 1273.984618] [ 1273.984791] dump_stack_lvl+0x8b/0xb3 [ 1273.985065] should_fail.cold+0x5/0xa [ 1273.985343] copyin+0x19/0x120 [ 1273.985582] copy_page_from_iter_atomic+0x249/0x1290 [ 1273.985938] ? ext4_da_write_begin+0x63a/0x9a0 [ 1273.986265] ? hash_and_copy_to_iter+0x210/0x210 [ 1273.986605] ? ext4_write_begin+0x14d0/0x14d0 [ 1273.986938] generic_perform_write+0x2cb/0x580 [ 1273.987278] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1273.987639] ? discard_new_inode+0x190/0x190 [ 1273.987948] ? down_write_killable_nested+0x260/0x260 [ 1273.988321] ext4_buffered_write_iter+0x164/0x460 [ 1273.988660] ext4_file_write_iter+0x3fb/0x1900 [ 1273.989008] ? lock_release+0x750/0x750 [ 1273.989297] ? ext4_file_mmap+0x250/0x250 [ 1273.989593] ? lock_is_held_type+0xd7/0x130 [ 1273.989898] vfs_write+0x9c3/0xd90 [ 1273.990163] ? kernel_write+0x630/0x630 [ 1273.990459] ? __fget_files+0x270/0x450 [ 1273.990775] ksys_write+0x127/0x250 [ 1273.991035] ? __ia32_sys_read+0xb0/0xb0 [ 1273.991338] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.991693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1273.992077] do_syscall_64+0x3b/0x90 [ 1273.992335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1273.992722] RIP: 0033:0x7f15cfaa8b19 [ 1273.992993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1273.994292] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1273.994833] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1273.995338] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1273.995843] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1273.996353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1273.996881] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1273.997405] 11:35:12 executing program 6: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) ioctl$CDROM_GET_CAPABILITY(r0, 0x5331) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="060043199a88c75741557a1f0f3567ca366cbe69b1140533c4504a81f49c1179b84bddd0290598fe535053f988d5b83ea2c54dca96ea161a00240d02b2b170375d026083b7cb26db000075a2057aea1b1a5639c2a015e2"]) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100), 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000e00)='system.posix_acl_access\x00', &(0x7f0000000f80)=ANY=[@ANYBLOB="02000000010007000000000002000600", @ANYRES32, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="0200f276", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02020100", @ANYRES32, @ANYBLOB="02000300", @ANYRES32=0xee00, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="040002000000000008000000", @ANYRES32, @ANYBLOB="10000400000000002000000000000000"], 0x74, 0x2) r3 = dup(r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$CDROMREADMODE2(r4, 0x530c, &(0x7f0000000200)={0x8, 0x22, 0x1, 0x52, 0x0, 0xa8}) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x300000d, 0x50, r3, 0x8000000) syz_io_uring_setup(0x190b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000d80)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x40, 0x3, &(0x7f0000000c80)="087ad56f024311adfa96faed6d26f9953b9909ead5a93b9073a644cbce0a831396fb421360e0ec04397a82a3319e92030f79eddb5cbba700802f8a21510f6634eadc957a90c8edfbaa8d992414a56e6a36c7e4321fd4f7774f68dd8d2a2b2ba150cbe836676da3a9d17dec1481ce4a4e99742d5cb669aab191aebe4f2c5e71736e5143c8680914b6bf269e2ebc3d744c4f973ab1f18dbbfabf8154bb3a0086e38fec0760709e5be35d6de1da880a4ad51d6d016ea30a89464db7810f24d99a684bf011d41c72e220b62a6eed46c626100cdeca30bf241253adad223d22ab780c9a19272ff7", 0x6}, 0x400) pipe2(&(0x7f0000000140), 0x80000) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000080)='/dev/cdrom\x00', 0x0, r8) 11:35:13 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 9) close(r0) 11:35:13 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x4, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:13 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 24) 11:35:27 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 10) close(r0) 11:35:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0xb, 0x0, &(0x7f0000000000)) 11:35:27 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:27 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x5, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:27 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x8, "c561e3", 0x0, 0xfd}) 11:35:27 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0xc, 0x0, &(0x7f0000000000)) 11:35:27 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 25) 11:35:27 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:27 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000000)="d757f19c2ae4aee308d9096f291be9f06b075a97bdf1230d050333525cc266367cfaaa76ffde27f0dc5aa411fbd68a760ac4bf4622d2cefe507e9bcca669c9738eba80b4366afec9bd16ea197b258c21664f58a291c89afc76aa719cfe44f724c82f5bd836fbf7d9b069d9a32550ac36d8589895c36c7e819bf79420cf10149afdbecfdecbeb186ac9") getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) 11:35:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 11) close(r0) 11:35:27 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1288.452773] FAULT_INJECTION: forcing a failure. [ 1288.452773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.453620] CPU: 1 PID: 7553 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1288.454141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.454682] Call Trace: [ 1288.454870] [ 1288.455037] dump_stack_lvl+0x8b/0xb3 [ 1288.455308] should_fail.cold+0x5/0xa [ 1288.455587] copyin+0x19/0x120 [ 1288.455825] copy_page_from_iter_atomic+0x249/0x1290 [ 1288.456184] ? ext4_da_write_begin+0x63a/0x9a0 [ 1288.456512] ? hash_and_copy_to_iter+0x210/0x210 [ 1288.456843] ? ext4_write_begin+0x14d0/0x14d0 [ 1288.457181] generic_perform_write+0x2cb/0x580 [ 1288.457516] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1288.457888] ? discard_new_inode+0x190/0x190 [ 1288.458193] ? down_write_killable_nested+0x260/0x260 [ 1288.458569] ext4_buffered_write_iter+0x164/0x460 [ 1288.458906] ext4_file_write_iter+0x3fb/0x1900 [ 1288.459231] ? lock_release+0x750/0x750 [ 1288.459521] ? ext4_file_mmap+0x250/0x250 [ 1288.459816] ? lock_is_held_type+0xd7/0x130 [ 1288.460122] vfs_write+0x9c3/0xd90 [ 1288.460383] ? kernel_write+0x630/0x630 [ 1288.460671] ? __fget_files+0x270/0x450 [ 1288.460987] ksys_write+0x127/0x250 [ 1288.461247] ? __ia32_sys_read+0xb0/0xb0 [ 1288.461534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.461895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.462263] do_syscall_64+0x3b/0x90 [ 1288.462523] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1288.462890] RIP: 0033:0x7f15cfaa8b19 [ 1288.463163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.464445] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.464991] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1288.465500] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1288.466007] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.466508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.467010] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1288.467535] [ 1288.491920] FAULT_INJECTION: forcing a failure. [ 1288.491920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.492848] CPU: 1 PID: 7555 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1288.493381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1288.493929] Call Trace: [ 1288.494110] [ 1288.494268] dump_stack_lvl+0x8b/0xb3 [ 1288.494542] should_fail.cold+0x5/0xa [ 1288.494819] copyin+0x19/0x120 [ 1288.495048] copy_page_from_iter_atomic+0x249/0x1290 [ 1288.495404] ? ext4_da_write_begin+0x63a/0x9a0 [ 1288.495729] ? hash_and_copy_to_iter+0x210/0x210 [ 1288.496069] ? ext4_write_begin+0x14d0/0x14d0 [ 1288.496392] generic_perform_write+0x2cb/0x580 [ 1288.496722] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1288.497092] ? discard_new_inode+0x190/0x190 [ 1288.497395] ? down_write_killable_nested+0x260/0x260 [ 1288.497764] ext4_buffered_write_iter+0x164/0x460 [ 1288.498106] ext4_file_write_iter+0x3fb/0x1900 [ 1288.498429] ? lock_release+0x750/0x750 [ 1288.498715] ? ext4_file_mmap+0x250/0x250 [ 1288.499007] ? lock_is_held_type+0xd7/0x130 [ 1288.499314] vfs_write+0x9c3/0xd90 [ 1288.499571] ? kernel_write+0x630/0x630 [ 1288.499864] ? __fget_files+0x270/0x450 [ 1288.500158] ksys_write+0x127/0x250 [ 1288.500420] ? __ia32_sys_read+0xb0/0xb0 [ 1288.500706] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.501071] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1288.501423] do_syscall_64+0x3b/0x90 [ 1288.501685] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1288.502044] RIP: 0033:0x7fb922919b19 [ 1288.502299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1288.503494] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.504039] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1288.504543] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1288.505062] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1288.505563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.506069] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1288.506588] 11:35:42 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 26) 11:35:42 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x7, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:42 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:42 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0xd, 0x0, &(0x7f0000000000)) 11:35:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 12) close(r0) 11:35:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setuid(r3) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x2) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0xffffffffffffffff, r3, 0xee01}, 0xc) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$CDROMEJECT_SW(r4, 0x530f, 0x1) ioctl$CDROMRESET(r4, 0x5312) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0xae, 0x2, &(0x7f0000001240)=[{&(0x7f0000000200)="0edba3a6abe89bf3d963cc7d94ba6faaeede1eeaf6d7af0d012d1b9e6afebdd38d2085b971df49a09a4e7def55ba39397af552ad7c6e992827d8", 0x3a, 0x4}, {&(0x7f0000000240)="cbdfe565509842308f4c71e06645132eba157202cb8bc66e7d1dff9cc3830b5bd2254f1fc6d6a6b579bab298942f8a4c4ce6f0805d114bd34c71d6524526ec3dab8d2186b8e7c5983a92d12d47fceb23001a9b2b980cbd3d8d623b5323d754f4aa2fdfe62afadf5e4912e13fc5a15b63c99b20f4067b1903a815b66722e3bd5ed346e1f7ff0ea0238f95e8cd7915e443e8627f8740a1beb83792fac51ad829d1d08813e5a89d253aec15ac605d1c845fb911b04c150dbbface66b481a0b6acaaa18e810f98b9bbb333f6eede0da1e3bab4b0a97c723b7f0f959c63f7cb58da93745743b5a391179688fbaf4220de6094649afd4f31e9257301b0ea2f9b0554aea4c56d8fb38d22b407671f46a1d381778ad1580e917a0772c9189c0b294fbdd7f0441b9485363a54fa09fb423f17b225320e9d233b01dc4b42e7137e4c5a36f0d934761553c054df5ecd9de175c5ed8250bc16c8fc8485b38ffb45e6da4b5eeb495f5a1971e7826da2e1da4d38d6d48a79e5583723a1f9e11715e75f058d34bd06cb2293841c0dc88d700fa6bccf7c91e6cf45220dea9effa715ea0d73a28fa950a66aa40ac67d9621c4e8ba25be6fbb50549c0f04d6689e9a4cfb71445aa2ceaf279748c2e637f7560c2ed0a17bb434aa3f83e7607daffcdb2d5e2efb40419b16cf9ce683725b5f7ffcaaf054bb05b4fd73929fa9bd77851ddbcae082577c9d69c9dd17f7d2c4ea8b1ec7777b388677200b569923f5e9e83b5822691edce25c1b317d40aa85536a3e46ad567ad43e9bf5da3bf3449237676f9874f90013a4d2abeb7f7c6ddb9b2ac9313dceb785d42b4386b1e4ae7be72db1631cf6612ca0b962352166603eb515ff00dbab2bed791800bb6125a43855ff8ba17e9ed04431a7b0c9041f0ec956729bc9ad7c8e8fd981a4f64b7fa4d0ef593a64c255cca90d271f0756fd0ad382d9927943320a5fc68fc4ecd203b0c7040bf95c170c917ab319eb2f3ac609e334b2b17b8cc112a0bd6b69d01c9dc3dbeae00c0c7351b45eda887b8c3783f500a13f91c3fad844e08429fe9556dc88412b92f279c2c5c87d8cd53d10593a3ccff7649aca3c27fc07b735ae1a15f324b3cd9351409f672d27e22806a21aee52dfa81cde2a36300a0296960cc4adf07b2994e806a23e78af5468b2f33990df855b29c0631edb94d761a7086ca83bb165924f9ddbb360d8d30b3478f0b0166472d130ef94d0a9becae3a42a8bba44b3e067b07e2d9b0b05fbe8c5695d1c50e75cdf8c4f0987e4bdb5826963b54eec4020ea15985aae47f9d6c480b2b61a0b9e40f9af4d26d745371aba2b5de435cf52828f8612d4d75f1d7d684a0fee1e0544ea3235a6edd4aa50e266052dff44665e6703c54cc799db914e475dc3368b63a0bad0a478501cb3302030f0c157c0ae456d940048547cd16e7ad38ad5d0683961a206d84c57db33e7843839dc2ad91f5d11a56e92b0963b80829fd5675d4662d8d95cab239f7f1041e3e25c8c678a897b6c02db844a3d5932714c9dac66a9ab3163d78914e5b1929233b409652685d8399cfce1479c2dfe5eec54fe11d24abf32832a7cdbbba22adc105a835584464a3a5a5bb96b48b739c89aac3fbf5c09fbef3834d1efc5daf286d93984bb44991094799346fbe87d80e4d15955144f34ca591bbb14deca987cff7fabf0c43967ffba19282760b143cea764bb738d93059c309037a48512b0828a0bf7814bcb5044aa7c3f32c0476c727b94130db5f604637427be76601574156a2127c802b9820b0870aa2adedc13717fd92e580fc8adbeb918f06d92c197aedbcd41634ec1a36cea28a611d1a96ee7c5623751250c649f294145571f0d3d574e203f0b3e3779e426b3c43cb73013d0c4a0bd6bd7189e0d7f7b0d416d4844159d12f5769b42bc8633738e6a7c8ea7765b10c08a46757fc0150994607b11d855fb65a489ac2be83de4e650bdcd1b5b095804f28289f79f359d19027898967ee844cb31434c8409f97719cc1cd8910353a1db41ec78f4d57996f0a354aa1ac31258457962c2bd8ae530eb6b59ef922a70500bb324e0754fcc718c4917bc315b01988a08e6ff47d8b97d9741b6d2211eb67e73d160df681b37a089088f3c482c2a28fdfe77c303e244835e3d57d00f5d6eec2fa2d97e1cc5214b011ff851b6214b8c39048b3c45980040489e02426a20b52c441851516cc6e7561d5d4cffa553bec92c6764506972c2072c06911fb8e9cfa5967e0341ca9a199ef6583c8dd4e343f1f5917ec397c7e37b137c5596e91ab290709cca46047c1d28394bdbc157c28ffa944a9db41f95dcd1bb772711124d58d79a3b0be7f38dc0174191745d4d2c9cec3b607fea14801aa1a0f487c2d6efb1599069dea9f62f3b5d4ea3e1028924968656e5a712fdcd0f1592d1eaf0d71921fead438a350c7dbd695b68461492bc0681ab8e08a827bf8926cc46b55f736a239b45cac8420843c7f1b169317bac13a490b7f88ca57878afb134d00477bac810fb825313c6f7ce3c603f731c21688c5ded971f6712e61c803a732880a99484c8af48ad921f42e1c99177ed2414f3edabc123c5631ca2b1706496501e946b18ce52dd391d5a55cde7eac5a267a793ce53f0cd5f80bdc4d5a28a48203618a045631d1f4ea147715581fb6b810f172d98f680d2d3ea8bea706646cf4b1d842f3f87f132e570a919bfbf1d171396344f699c7917a5794360d7b474dc7e49a5711ef03daaa637988821ff96aee161cf06eb8dc34e060520667c63aeebb91f6fa90080a647e12c1d91bee318aaf34dfcc92d1487a236f0b61d4a61a3ba1935616f9b150a732d18ff485c5da32945de4bde5bafeecd89174c4c02bae1bece41c27effb57fd1a370817af10e9f55887a1f3bcc215574e515d051ddff27cb9863ae4cd9dd68a1bb00dd62b28d0c848be5b104951d53b82eaddaf7fc5e61d22ebf4532a96b1f9284a4cc37da51fa6d258c66c09640cc5154fc213d995046271d73760501ba8393a6de9d82e521a4a94172ec3aebd29d22ab8be6e07195c99a6dc37938e3c43a9823255752d1c783a41c4ac3d8ee08b3589636d91cdcc6eb24a9324f1e1e0f32f71ae743dd7a75abcc180b1d88b510e6ce286acf606c9c131304784ae9b97cfe60194d099d84a59cf9c77a773139fb14f1e4964cb26e8f9e8fd1055f492104afc2ae1ee344de62a3342e76828d0c88516bf3182c8062fdfd97b107b53b8fb43f57ab320d7c875f09849fd0cbe614860b6579b66e4f8a07a1713f7952385ccbce99ff1a224d0f465a9011adf56b525a88f6aa64279cecd95a533aeb581b2831621d8071b51dbfed10ca03a96c59d73922181e291d44e78c86ca719c472fd191c320641bf4ef7af990b9433edc0362ef52a3fab9c4b9032094cd2aea0671039a1b4ab4cbcec8a9020db7be82b666e3a4e7fffc3fc809c3365dd4c3b1b6dba741e5ed76f18ba603c68b8e8b50c51d720edc9178d7ab198004becc0331ab63ecd22f346f70db25e1680894221ba6e3e0394ed24ba5377a03ca74e7164caab6b82a2df9618eb00b728ca6b1260654c8e59b1b553cf17fbbf8523e217dd4e8a07e4932f8a38ca14e7ff9acdff9800ea0c85303465dcc9989df354bc2a30e7acb66bbcded9196472c32a2b295be3b427f4de46e058ab5386cafb20074c5721d91805dceb60faaac84fa8f03a03285cab4cb17feec35cdbdb7d7a0acdf0cc6286b0e570bc689a0a40e5387e10f4491d813512705a835346cd1efa2c4291df28ab5e0ca910ea3d71b774710a420b2dbef9b8e565249f78ec2ca270ad53c7604b560d103366ba4c876a25bbda3836129724c1c749239ea972f24f749eea8020255c7d8f5a2836f155a913a25aeff3ef06b963589f4dbbf55504cbbab0275579b5389a71ad171f7a3f70942876e9132da2598be6c83c4303baa8cd15eb04fe3752572d81892363d80cff931a31e562c9b5d9db065175b6272ec0deb920cb057446ac71dc6b41c9366691d2e7c2f123d1a3fb3c67bacb284dd49b6bcd031839b1e856484fca61c236ef916cf52e72feb48002919d2c9c2ce3c2a0f81f727b4a7e7c15a690a6faa1e424a4417e1244bafd7ad3df21abc857cf7f02e16f5f8208897c934df20c005c358827b184a32d5d6135ddd1069c13b73cb740751a263df0c0bf718ccf174d3baadac82b737d5d9e6e25d8c9af41b5595c10c5d2ee1871520a85943dedf94f754de87a91e880332e7de05b8b72a989c3c34ce5db1cff2d8ea44616f3151d4a9a78d1efa4ec962c1f80e02372d8e1aceb1bfacbb3fa05b3142e9b5cddaa45af9b6bbe1ad525dec3ba0a9939781b4a90b0de89950feef6f2288d8fe496fe09987cb3d97ce76f3262ecbfd274a016c98ffc1cae16de7a364465fe7d1f8ddf4740d4034e8bb426282578aefe66bffa052e20ea329f1680d736503d3e97f724bca6c4e6f8aaa092dd62035b6888aae6c50cc76b7cc2a7a62a3c85a29a314f9bf084d1bc42422d0c88ab75ccb1616194d254abafbc5312e18bef748f3a4de3bde1fd0e51f4f6e9654429565d6bfc22fcbdda9a1786583236416e19f0e4e6ce4a5bba4f63ad060e40ff1cca6f8bbab6ae488ca2bc1b0764be2b121247194e68248393c7457ac166e56f0a5b3dadff0c6849acc38695845052305d9c6ad6ed33b63fabf9628620778e323bc5bb436d2416cde4491e5e0d9f74105ef3ef6716b8c23371920687ad475adefad12f46e33d264bc59dd1c89527979697eca1f86ce65d3de90a3b9d424f45634962084808f6561b8a548eac0b919f3b266cdaf62bf8392d68f62dd9c5a958764a00061709ae48aa72cdf3b7d753d15de2e649f7da5506289e433e0d4fba6aa75e1e399dc698fa6728c2b657ae0f3024c25d5e22f9b13bf6a49b9b31194841648a93f491dbdb004a0ed0c0f2fd166bd08ea7c263029cc9f75fcecebbd7c6548afc6b94c4c4086a02a379ce668e655dd307a636f2d9bcb2be94b22ae3dc8c07db88834814fa54f4384ac07e95efdb8d135fcb0aaf2ace13a585579e4ec107ddafcebbb233a08c856b99080a38690e900f84364b5f814b1d6633323188fff61fb73edce43ae299625c0744eefc62ba36885daf17463a084a70e63e7fb17d71bdc3a618ccc57b45d7fa18f504f7413c450887780d6515a34bf5a6e612a981316062f530f6047e3742c9de478fc2d9b4a04a9ec78feaae07a7e1273697609f3686444aa2b8bea7f12e9624bae154dbc9e0af0d4c8b492ba5d04b4b2c01321bd43755ad715bc4d2f3b65a279ece2a57aa1f87b4c7c28c890097a71ef5d96ba38fe3dde3ea005b0de961d6becb4b81537df081009ef5c6146008eee46fcc00839afe0948d457a8646e9f176a346e8e06be17e75017cd85f8a846f1369cc5658f551fb669ad2706d2278bfe4f9cddf680f7493bc9cfa0a901eae83fbafca51036ba0dacc9f3b206062f839a18ff5d48edbe1131c975f632a3171d06135cbfa053482940d39b5d1642a251f7346cd3f401cfb21b5000ffba09218573e37b8b257edf6e70ce42cb6a893c71304eb54410490541cf66d4a81cbd407ab46be4cf2d0a3483ab1bce1e7327d4437d7ef8ff2c9836cd1e20fc9b25a5052f07a050582394213d3a111584944f71b16a9fc9d81cd3bb0f5db2786777bd0c212f40557893c3a0206987cadecc3ac1ab1a6502ada0cf74edc6b42de1daa014120019fcc89b3bce254e9f4a3ccc5f0ec721a19ac77a1fb3cfb05696f75169906543b2f57587c", 0x1000, 0x3}], 0x0, &(0x7f0000001280)={[{'/dev/vcsu#\x00'}, {'/dev/vcsu#\x00'}, {'/dev/vcsu#\x00'}, {'/dev/vcsu#\x00'}, {}, {}, {')\\*@-^'}, {'-)+'}], [{@uid_lt={'uid<', r3}}]}) r5 = syz_open_dev$vcsu(&(0x7f0000001300), 0xffffffffffffffd8, 0x208400) write$bt_hci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="01280411c8000d0f00000100000000000700030500"], 0x15) 11:35:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 27) 11:35:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0xe, 0x0, &(0x7f0000000000)) 11:35:42 executing program 7: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:42 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x8, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1303.423474] loop6: detected capacity change from 0 to 8 [ 1303.424803] nfs: Unknown parameter '/dev/vcsu#' 11:35:42 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:42 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 13) close(r0) 11:35:42 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1303.502268] loop6: detected capacity change from 0 to 8 [ 1303.503520] nfs: Unknown parameter '/dev/vcsu#' 11:35:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 14) close(r0) 11:35:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0xf, 0x0, &(0x7f0000000000)) 11:35:55 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xd0, 0x7, 0x9, 0x7, 0x0, 0x20, 0x80004, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0xffffffff, 0x7fffffff, 0x1, 0x3f, 0x5, 0x7f, 0x0, 0x4f, 0x0, 0x9}, r2, 0x8, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)=0x7ff) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x7}, 0x6) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup(r3) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat(r5, &(0x7f0000000200)='./file0\x00', 0x2, 0x2) r6 = openat$incfs(r4, &(0x7f0000000300)='.pending_reads\x00', 0x3a000, 0x84) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x8, 0x80, 0x5, 0x5, 0x0, 0x1, 0x8028, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000240)}, 0x88c, 0x5, 0x3, 0x5, 0x8, 0x6, 0x4000, 0x0, 0x908d, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0x8) 11:35:55 executing program 7: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:55 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x18, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 28) 11:35:55 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:55 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1316.887193] FAULT_INJECTION: forcing a failure. [ 1316.887193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.888112] CPU: 0 PID: 7619 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1316.888784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1316.889518] Call Trace: [ 1316.889752] [ 1316.889960] dump_stack_lvl+0x8b/0xb3 [ 1316.890322] should_fail.cold+0x5/0xa [ 1316.890685] copyin+0x19/0x120 [ 1316.890990] copy_page_from_iter_atomic+0x249/0x1290 [ 1316.891456] ? ext4_da_write_begin+0x63a/0x9a0 [ 1316.891857] ? hash_and_copy_to_iter+0x210/0x210 [ 1316.892288] ? ext4_write_begin+0x14d0/0x14d0 [ 1316.892705] generic_perform_write+0x2cb/0x580 [ 1316.893124] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1316.893600] ? discard_new_inode+0x190/0x190 [ 1316.893991] ? down_write_killable_nested+0x260/0x260 [ 1316.894470] ext4_buffered_write_iter+0x164/0x460 [ 1316.894903] ext4_file_write_iter+0x3fb/0x1900 [ 1316.895320] ? lock_release+0x750/0x750 [ 1316.895682] ? ext4_file_mmap+0x250/0x250 [ 1316.896053] ? lock_is_held_type+0xd7/0x130 [ 1316.896443] vfs_write+0x9c3/0xd90 [ 1316.896776] ? kernel_write+0x630/0x630 [ 1316.897142] ? __fget_files+0x270/0x450 [ 1316.897537] ksys_write+0x127/0x250 [ 1316.897868] ? __ia32_sys_read+0xb0/0xb0 [ 1316.898227] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1316.898678] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1316.899148] do_syscall_64+0x3b/0x90 [ 1316.899485] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1316.899944] RIP: 0033:0x7f15cfaa8b19 [ 1316.900272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.901484] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1316.902107] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1316.902718] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1316.903322] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.903933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.904541] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1316.905197] 11:35:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 15) close(r0) 11:35:55 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:56 executing program 6: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100), 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0xfffffc01, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'bond0\x00', {0x2, 0x0, @multicast2}}) 11:35:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 29) 11:35:56 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x66, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:56 executing program 7: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x12, 0x0, &(0x7f0000000000)) 11:35:56 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:35:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 16) close(r0) 11:35:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="30b1564c5d0cb87e3605f0d425a08ff4291f51ecaedab2d96856b22bf03354ef7f007e31d08f135058f1fcbcbe14bfa782f06af9dadc2cfa6afd31a258f23d0c964f4e45fc614b6547f775f31abe0216824d7df6cc62262860ef43525bf561b16d3a521e1eda31d6b544e9bdb6fc3433a0348ba0be7f693755a3d49de0a0c16a30d0f1d957b144450b03e7ab6d1e31a941b98d7365a2aa524f822d21ce893d9c306b2d50d2fc394bac3b54b34d2f6beaa289fca28aad8900868456f32e6dc90203336836c24838ddfc75be7d5db7628b7925aafb26b170dd8ce13c1d1c8b97af1485605e4da8595e865d", 0xea, 0x269d946d}, {&(0x7f0000000080)="78fe54f59854151b3c3e99c3f1b1b61bf31f40e1baa6e578b7ee53541b019abc2dad6536761472d05bfa4860fd460c919168ead7b31c7ccad94116b2", 0x3c, 0x401}, {&(0x7f0000000240)="bdbab01eaa21a8d11551f62820ed8266e6886fee0e8c28fbe162194b3f38ffc4e94da09dfe06b2bfe6802194a286f6bdc7847045710aeb47db864d697a361813907706bc662957805270fdbdd18be15e9ae5060034dbec68ebc25b4dfc4ac64b3447930e936c", 0x66}, {&(0x7f00000002c0)="bae36beca2e73efb403dc00c2e11ba546ea658322fbe2c6d7c9e2769b776a5d99dc0bc45a6424975358852937b8b85e26771d15ea38dd647b32ee0274508d7ad2768bc03113272ef07fa7325725a8bd26a8cfc4b3fddae46ac314a7691fcf6a920fac5f57571e16392c467820b27d18c5615c130441dabd935bee3ef1382c5a5e9aad2a7ef51261aa6ce96c767c3112f0773ade482aefb1abb58b0f5262273bc957b15f4b453ac545bf776229d8fa1ba50c662749bdefad83e3e7e483f6ed2ca753def990fee2f91272604ab945bd36e0a", 0xd1, 0x103}, {&(0x7f00000003c0)="79ac1561bad22715cf4e8cc663e819c2792c4c29b83c881201f2d8440dca2b3baee823a7b243423c3f4e06962516b90b50a0280a5e31a927be489749f0687b90df2a0842910ab38f16e82bf25f0eb029c82837dfdd2f41955a264603b4a5057a2bea2cd0caee6a597ccc", 0x6a, 0x3000000000000000}], 0x290042, &(0x7f00000004c0)=ANY=[@ANYBLOB='dmask=00000000000000000000010,check=normal,nfs=nostale_ro,dots,dots,nodots,nodots,gid=', @ANYRESHEX, @ANYBLOB="2c6e6f652c001d70b5643418969a7c"]) fcntl$dupfd(r1, 0x406, r2) 11:35:56 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:35:56 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xf0, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:35:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x13, 0x0, &(0x7f0000000000)) 11:35:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 30) [ 1317.488533] loop6: detected capacity change from 0 to 264192 [ 1317.535382] loop6: detected capacity change from 0 to 264192 11:36:11 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:36:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 31) 11:36:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x14, 0x0, &(0x7f0000000000)) 11:36:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 17) close(r0) 11:36:11 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:11 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11:36:11 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfe, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:11 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:11 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 32) 11:36:11 executing program 6: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x3, 0xffffffff, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_cig_params={{0x2062, 0x4e}, {0x2, "90d1a4", "fef949", 0x0, 0x0, 0x2, 0x5, 0x5, 0x7, [{0x2, 0x5, 0x8, 0x81, 0x4, 0x5, 0x8}, {0x4, 0x6, 0xff, 0xf3, 0xff, 0x6, 0x1f}, {0x81, 0x9, 0x3, 0x3, 0x7, 0x2, 0x81}, {0xff, 0x8f8, 0x4, 0x9, 0x7, 0x6, 0x4}, {0x2, 0x9, 0xffff, 0x95, 0x9, 0x3f, 0x3}, {0x20, 0x1, 0x9, 0x40, 0x7, 0x3, 0x1}, {0x3, 0x9, 0xfe01, 0x7, 0xa9, 0x0, 0x1}]}}}, 0x52) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:36:11 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x15, 0x0, &(0x7f0000000000)) 11:36:11 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:11 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x16c, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) fcntl$dupfd(r2, 0x0, r3) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) clone3(&(0x7f00000002c0)={0x88000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xa}, &(0x7f00000000c0)=""/32, 0x20, &(0x7f0000000140)=""/250, &(0x7f0000000240)=[0xffffffffffffffff, r1], 0x2, {r4}}, 0x58) 11:36:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 18) close(r0) 11:36:25 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x1b6, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:25 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) fcntl$dupfd(r1, 0x406, r0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x1) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000080)=0x5) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYRES64=r4, @ANYRES32=r1, @ANYBLOB="9ab58cabed1bb1a06f57daf6eba5a54d66b07d8fb679f160bf571e523b77f1c9dbdc6660928870ca60fa1e91ff09300d2a79045f9ee8120788c48ddbc7ebe5f5dfa29497082081f46c4a5a86ead204aeb5fae5b1f83bab8da1cbce654e7c91b1282282835926812264038312b13a5f2c08fe0217023541474d0383cb2715d2b603cf8ad34045a56528fb48f46841ef019930db36d0fbb8962d37ae069a3d9363877ba0ace607769afb1e421b7d4d0159629ccb19f04331cdb926"]) fcntl$dupfd(r1, 0x0, r5) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000000)="4cd1b77eb73b3b") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x1, "272fe5", 0x4d, 0x3f}) 11:36:25 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:36:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x16, 0x0, &(0x7f0000000000)) 11:36:25 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:25 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 33) 11:36:25 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x300, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1346.176455] FAULT_INJECTION: forcing a failure. [ 1346.176455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.177327] CPU: 1 PID: 7735 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1346.177890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.178452] Call Trace: [ 1346.178642] [ 1346.178816] dump_stack_lvl+0x8b/0xb3 [ 1346.179096] should_fail.cold+0x5/0xa [ 1346.179381] copyin+0x19/0x120 [ 1346.179626] copy_page_from_iter_atomic+0x249/0x1290 [ 1346.180007] ? ext4_da_write_begin+0x63a/0x9a0 [ 1346.180349] ? hash_and_copy_to_iter+0x210/0x210 [ 1346.180689] ? ext4_write_begin+0x14d0/0x14d0 [ 1346.181031] generic_perform_write+0x2cb/0x580 [ 1346.181378] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1346.181755] ? discard_new_inode+0x190/0x190 [ 1346.182073] ? down_write_killable_nested+0x260/0x260 [ 1346.182440] ext4_buffered_write_iter+0x164/0x460 [ 1346.182789] ext4_file_write_iter+0x3fb/0x1900 [ 1346.183114] ? lock_release+0x750/0x750 [ 1346.183405] ? ext4_file_mmap+0x250/0x250 [ 1346.183703] ? lock_is_held_type+0xd7/0x130 [ 1346.184020] vfs_write+0x9c3/0xd90 [ 1346.184285] ? kernel_write+0x630/0x630 [ 1346.184582] ? __fget_files+0x270/0x450 [ 1346.184870] ksys_write+0x127/0x250 [ 1346.185144] ? __ia32_sys_read+0xb0/0xb0 [ 1346.185429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.185810] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.186189] do_syscall_64+0x3b/0x90 [ 1346.186465] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1346.186832] RIP: 0033:0x7f15cfaa8b19 [ 1346.187095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.188342] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1346.188865] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1346.189361] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1346.189867] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.190361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.190855] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1346.191368] [ 1346.199185] FAULT_INJECTION: forcing a failure. [ 1346.199185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.200062] CPU: 1 PID: 7738 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1346.200603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1346.201172] Call Trace: [ 1346.201359] [ 1346.201524] dump_stack_lvl+0x8b/0xb3 [ 1346.201813] should_fail.cold+0x5/0xa [ 1346.202096] copyin+0x19/0x120 [ 1346.202333] copy_page_from_iter_atomic+0x249/0x1290 [ 1346.202705] ? ext4_da_write_begin+0x63a/0x9a0 [ 1346.203043] ? hash_and_copy_to_iter+0x210/0x210 [ 1346.203396] ? ext4_write_begin+0x14d0/0x14d0 [ 1346.203737] generic_perform_write+0x2cb/0x580 [ 1346.204080] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1346.204464] ? discard_new_inode+0x190/0x190 [ 1346.204765] ? down_write_killable_nested+0x260/0x260 [ 1346.205150] ext4_buffered_write_iter+0x164/0x460 [ 1346.205493] ext4_file_write_iter+0x3fb/0x1900 [ 1346.205841] ? lock_release+0x750/0x750 [ 1346.206133] ? ext4_file_mmap+0x250/0x250 [ 1346.206442] ? lock_is_held_type+0xd7/0x130 [ 1346.206739] vfs_write+0x9c3/0xd90 [ 1346.207004] ? kernel_write+0x630/0x630 [ 1346.207289] ? __fget_files+0x270/0x450 [ 1346.207597] ksys_write+0x127/0x250 [ 1346.207857] ? __ia32_sys_read+0xb0/0xb0 [ 1346.208155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.208510] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1346.208881] do_syscall_64+0x3b/0x90 [ 1346.209137] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1346.209507] RIP: 0033:0x7fb922919b19 [ 1346.209764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1346.210998] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1346.211523] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1346.212018] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1346.212519] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.213024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1346.213518] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1346.214049] 11:36:40 executing program 7: socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:36:40 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x480, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x17, 0x0, &(0x7f0000000000)) 11:36:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/eeepc_laptop', 0x82, 0x48) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x4, 0x1}, 0x6) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:36:40 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 34) 11:36:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 19) close(r0) 11:36:41 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x500, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:41 executing program 7: socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:36:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x18, 0x0, &(0x7f0000000000)) 11:36:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 35) 11:36:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100c1, 0xe4) 11:36:41 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x600, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:41 executing program 7: socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000000000)) 11:36:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 20) close(r0) 11:36:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x19, 0x0, &(0x7f0000000000)) 11:36:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x800, @remote, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="03fce13977c6109af6b5a3fe4055cbd3afb2d8e086ab90eb489229bd43356b2e2bf397e04d6c5b12979e6055de095b24ed7853d15794cfd570a08fd06799be2e3bf1d486dd0b1984f1994022c838dde0e2eb2a3041ac718b42d155c95d9a189d0993de6be6", 0x65}], 0x1, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hopopts={{0x50, 0x29, 0x36, {0x32, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo, @calipso={0x7, 0x10, {0x1, 0x2, 0x35, 0x1f, [0x6]}}, @ra={0x5, 0x2, 0x8001}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x7ff, [0x7]}}]}}}, @hoplimit={{0x14}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x1, 0xff, 0x0, [@private0, @mcast2]}}}], 0xc8}}, {{&(0x7f0000000240)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="f1026abcc0", 0x5}, {&(0x7f00000002c0)="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", 0xfe}], 0x2, &(0x7f0000000400)=[@dstopts={{0xc0, 0x29, 0x37, {0x3c, 0x14, '\x00', [@generic={0x7, 0x95, "dc8283f1425bfcb6a122c06d753ad42557ab928c3de2fb9585d81cddfd1daa9efb708bf838d1667b82abcbc14d1c25a1596f1d14c2c5f22661be671b3704e65682a2e174c8db29008dd67aa86ff0823069b03b1ab11559ec1710ce88c99b3c86d5a28e2030eef74771b5b3cc281ab7e9dc88c600d3423008818d1f6ed1b6fad82b2fc4bc0731718fd1bba5fc0c36d1183d14bffa51"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x6}, @jumbo]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x1, 0x9, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xa1}, @ra={0x5, 0x2, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x170}}, {{&(0x7f0000000580)={0xa, 0x4e21, 0x8, @private0, 0xeb2}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000005c0)="9298b2c74eef9b155a58fabddb19c7a1c118ace3205ba312ac4e2251b0f40df8d0319b6afd82f3287133150836dadfff999893daa9d195536748659126464e68f717632824dc8653e5f93cbfb6023bc3c7d9fee6b881d0df1b2dffe7693bc916a0327f260ce4d7dcb24ffd3cba171b3a3b2009b07752b8ff0d1f41b454376228", 0x80}, {&(0x7f0000000640)="258b506a307721bd125812fdb48748337ad008c38fa44db9d037117c4deec49ddf04b241c513d3e376dda1bcd61ac2521e8216b56082f4cf4eaecba2a01ced7f44e313450d968cd5f7c3ca58b9dd54825d69bf660a70b23c26a25242be203ce969690b953e9b4753105107289f58b173f3a88be643d1e1651f8170bc47622cf30a85980519e5a6bea5ad648c27bcf2a11eb5c5daa18b6bc92831eea60a01440028ba3a05d6d8e3e57b30d8264ebc51f0095508d3f351c8963b5164121b4129ac6790090e795976363275337d7398e8e589055a911b30677d2d0211fff164ea9a6c", 0xe1}, {&(0x7f0000000740)="f537c6bf8b244c365e9c784e5c242a8e75d823daf5758b7e96bce7ebcafe94775a587d3d5576192a89892eeefc5c9037c0b2190232db333cfe415ec2dbe9c08bf4f95589d4824c6b6864fe9226a9a0efc89bb56204a7", 0x56}], 0x3}}, {{&(0x7f0000000800)={0xa, 0x4e22, 0x1ff, @private0}, 0x1c, &(0x7f0000001d80)=[{&(0x7f0000000840)="e78b98fa7e6aa0917e48847136772e953cd018dfd7eb6a17d2b684343edb8140e7d927fa586bbc705da5760a44ef0b2eb54b6b3a5ae4c21365d1368d", 0x3c}, {&(0x7f0000000880)="aa282660f7e60151f73e84ef52400a9b467bf8bd33de8d9b7151d75f267d1e744371c76216d825a8c0cf4bf489a699ad5a3a3b51dcb0e37c872d85db40896fbeb3100b4baf3478a06feb742a255846cab3c00a11cdbac7ff050244591770803144078f37e34bdf185200a9ee2b11cf548b182f4fc1949c93e7dea2be0e639cc58222a0ed5712d9e3e31cbaeed9b83516f603d840457b5dbaa0a621f83cf30f4b630b9be4259f0a807ca21798f21c1bc205d4235181ed71ff9cdbbe7ebf0f07831a6b3103cf973d80ca853ff6d8a9a4fca9c330be13ca872e2f36cc0154a948f47c84006ef8e4892d302ba699fa11e097", 0xf0}, {&(0x7f0000000980)="2c457d6f201cf35274c4b90f92ac4aa2cbb01e6d29cfa9f2a62d51bfcfaa887ca9be61a6685c67f1c016f5934d5966b7e2269ce923da0d992b6f778447149c223a55be640ceb92b1b0140a1755f5bc672e5c6149e8956dd44380ededfce57003ad6965f95342fb563d535647edd5b4040b3a88f5ccd6dee629d44849a78001597f413853b30ba3c93f2a7c76e270cc41dbb7529eaa0c4055d9f084971a391b0a85765c6c6bff1484371b", 0xaa}, {&(0x7f0000000a40)="075bed72aca16fb3b0d76de184613f45a9ff84e9414ac999f654c5f28e68a89a59c1bb0f1c7f81e95af559fbd43629320ca4991f", 0x34}, {&(0x7f0000000a80)="75417c9f4228b3dce0faeb21f39afc8b1322298c56d5d7f6b35ce1829394a28479f6cbe1089da1dd", 0x28}, {&(0x7f0000000ac0)="2b204b8d1a3dc059fe0d44e5ab0b3dcef4aeb8c7b87c47086f43382b47fbb735207727280238e7a4eb63f78e23298a297f97b9120701f59091cd694bf9c52eedc31d93c17ad46a9008bbf40316450a4128a28840235c4d67a36238f8dd98250cd0fb946bb7f091c6eaa97e5ef18d68cd7138e9c823671dae3d0ca6f3bd8c1847646f5867e11482569852e6c32ad11cab1e1d8c9ace25d8921c956360424b2b44", 0xa0}, {&(0x7f0000000b80)="eefddc57733ea99062a67df4116dbb2d73a075b6f43085520492844c3937673521621c9aa042f1045ebd33b288117da4b81269c7fdb3675f71fcab54ad91f032d90f0b91fb6b78fa5dcad3e4d22b666ff8b72bb94421c949e42259bef8c5a8329f23011c0d64d324b964e34ebff2ad0dbd8cb7197ed8be1c4b69c5766fd1c346f547830186fe48eddd27f0bee8f43441af57326fb4a6400c3f82a0ad8a98787b4340372c9c298cdf49e35120d919099a02e196c8bc05cd7503", 0xb9}, {&(0x7f0000000c40)="ad0cd9c1f66af306400dd0b3f8c88720a1b58e5c3bd413578387019e11ab4af420af98d5d3ebfe74b6d9ad842b3ad1283b82ba2dbc73cca63306ac5dfe191f8d84da7b7ed5826492acd59c83505d28bb2ef2d01fb34240d7adb192ffd8507b31f91ca743223f77539c1e05cd9bac1385a5b878a089d46dbf63df6d6e7a402d00f364c9cf42621faa1dd6a4ecf68b35c7", 0x90}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="24ed01a274f0980eb3692f89d1af4a802367be4e6b5346c7fde19e6ba8504daa6fb6f337984a14484ae932f5134473c1af86b26cc2269d31c9daa829f2c7c5fdbbd59591b790ad9a6e68966c82a36f01cbb4720c92b5c64b8a837477949a2ae22ad9a44b7687c3abac50782febcd", 0x6e}], 0xa, &(0x7f0000001e40)=[@dstopts_2292={{0xa0, 0x29, 0x4, {0x62, 0x11, '\x00', [@hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x9, [0xfffffffe00000000, 0x87fd, 0x7f, 0x1, 0x9, 0xdd, 0xef]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @ra={0x5, 0x2, 0x7f}]}}}, @dstopts={{0x38, 0x29, 0x37, {0x16, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @pad1, @jumbo={0xc2, 0x4, 0x6}, @pad1, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @dstopts_2292={{0xc8, 0x29, 0x4, {0x0, 0x16, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x20}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @generic={0x1, 0x94, "937b1c22b30791f0bb86073c9a649ce2dec12663c34fad0fa46ebebfa7b4535778b4d8d450643dcac51313cdbee4d4db978d23a2a3b8bd9c42192dc1261f0de9122a7864a0d7aa0477a1726c61b77bc19a1b1e9c7f7d50d26bba5ae25466854c3e86bd262292107903a0cb38a8a18e0438c081e1d18e58f22a0dfa7940d5b6773ca535c7b9ef87283a104fc74053229e3edb5ef3"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @flowinfo={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x2c, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x4000000}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x28, {0x2, 0x8, 0x8c, 0x1, [0xd6, 0x68, 0x8, 0x200]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0x800}}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private1}, @jumbo={0xc2, 0x4, 0x400}, @pad1]}}}], 0x288}}, {{&(0x7f0000002100)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f0000004540)=[{&(0x7f0000002140)="02461cbc9969a95cd723491f8bbea1164b6c08a2973094bc07cc2509426a4a8b68853b9a1d9443fbeab49f68fcaf8b1333017321b7e1dae380e88772e2477a3170d763aa2fffd53c40751e073a6bdcf9acf8b30fac6a5015b7a582a87e0358329a5300c23e3e908b0ccd5dc575535df0bfa692f236421fd7104a6d13bafea10b853bf886d1e6d671f499c2b2e3278915dd6e376e54eba60a3373d96486d8b7891d4faf1e8dcdee87dcc707", 0xab}, {&(0x7f0000002200)="e78f141077b6c9a2f536070888d14af53922b189404d3daf6df3eb01eed949e70c18daaf521e8263aa1a70063e5a376da58da6c99427cc0056f2d0845d149a7d8d5aad5c1edd5e6c1f4c66730f38070cac1f7965d0699061e432c5f07ee7d8e1a390d9784b132ec79a986dc187e8ff5e0635c80fd8f77d772f3b76457079d814c0b44b714be3c60d29d77607d652708e9f46993a3d0d8653c4b9a4a64b4ac190", 0xa0}, {&(0x7f00000022c0)="2f970b5f83564ef0184a6f6b7835a20dbfc672f38046e8a2db4725613c9f9a4cc81527e14c27a3b68532fe9c1f57d5923113f4a9b204b9f32fe6ed910ad00dc6e01e4cec573214f7b1bfe445f4a18db5a8a7e00fe2f0dfcab555aaf3decae19618c8eff344452a2d118ec18b52c921a063d7b80aec40341165fc3ae8d206fd859d3144f9d5ffbb3e152169b60e4b4c657b2e24af121da2d32d20613a2b9a4dc1de1400ee56cd85c1c9c269b468c66123245d21a46878baa52a9ca98b529de67e2fa5493fa6d90e486eb77e511041b82fa179854a33a7bcc54baf8bd38df4deaa272ef1a0688b51871e9ae7c1caeb01e2e5fab258039b58637efc01de0be998fd7b88fd4b791d4057c61bf932463b5965bbec307408df2e713a38d52e0d8e800e15625ea3883d4db4c8e58a90acc70820886232bb2447125755ee2fad27328bd60553cbd6849584a27aa1c9350b3c41e52a8b4d4cc293738a16b9f94f21ee4e8669b7534a60f8a7854c5dd4ad4b11653597da072d84cf52f88ad70414e94389c832560efb29c3507f7f79b7388ade8c387d24022ad046f35400c80591402329ba9cea8210561d5016ad91a63af1b4b89c70fca1cedcdea94dc9658c0a9bf7da719bdb27c39a9e7fc32dfce79fc4754f70bf7ce3f8ad9ac40f364700665e291c6781bffbe8f54d18c303a5e7f8781b9ba83f4efbf2f65b5bd6e53335654f24995e01c2581f775001cc73b7040d8b2a63fecde4185e30ace330d6aef4dbd6d715d2b1cf1af80fa14df0f923373334425790e60de0d5d3c3b3932541bd9f516013796b6b293fe5fbbd192ea85ebd4d6eccc61413da1f9a3e3a2beec463598d2bdc717c35ead1a210848bd485257185c4fb0e4ddcabd490489b83cc72bf104de65e2d4abebc54552786d72b8874236cbed5bbdc2700c1ffe2b67f656d0ac10997a56c56ca105a5de53ea513e50df932ced9d1627dfa650035e7056b58848505d34bd06560efe513070bbbdc8af0dfd3bc983e4853e51303ceb0e5bf68e5b9a6c1faeda10376b9f768d8da31a0fe0eb2aa8e9895a66e0e06982146e465e01293c5dd79bc403c51bf7c1c25984ee79e2bb047bdbc2267c09732f62c681c4257ab71a992a41624bf383ef451e85400051d8f07b64b37194da0cc66999f84f6c52813ed7ebed8ae4961244bd22d0d03878b5343f9741ec32cdb3d5f3c162f866aa7e66c484f125e533cda960047e7f7aa95e691985dadaaf3b1d181bfc4aab4320005d21170ab7f3311defd636857036bd85606e68f7d7ae09b687fdcc65a369c56f895db0fa7fd8557848531212fa216fe4a7dcff7a416d3eed06f545e0d352fe781554389b5c85a5da8ba34633f06d0976a08e2ab6d8e74b565ff9692e09fda225d85cb94574e0ed7544d2f5f76a06f9833fa7812a42d4600eabdd9a336313f32db652b8318b6c52b57afced78a9fd2c64b624e755d0e193069cae58b255882960621e399e3e5015f17f523294fbc06ccfbe1690e880fd159fd4d2a99e8ba5f2e39f68976461f0f9bb98f6a3f867c6ee1c3bb2ccdb9caa4a4bdfa3005637253ab24b244bbcc3d3b7ddd0ad2f31b3d11950ae43a2d68718e001f0b6cae3bc3cd81aab9426777a5b994ffc17be2fbdde8755796b91e518052f7c47123a525f754cbebd07251b9bc5fdc5981ae842418840a23beaaeee9c697c391af73f584882f41dabbf905e276b9e3725b43d9847fbaf3e38fa21f358a58a2f82b87a7235054b6f59852a067c1e39c3c3d2b1f07040c98f81961f294184ef18ed4b39c6938aa073d9f514222fe8a2b3e8fd1bfb130640e0cadc7a87d7db7fa135d1a265c10a5a5111bc8ae654321203b24a6707c042c3f2e446a367ef7e9d00ffcb58b0e0963c8c7e9836c8541063a32d87eca98f76d09bdd28c2fe55525a8bcff73d01f981034be3d776c0a0b8a21c1e2937fed019d03f3e26e67228dd56d730a73ef3673e9833f9c89515127aacdf471f3c1af41e05d8861047a80c54686fb986100d9c106fc62d55592cc9ae17743979f30a9ad82a80fe4449115e5989d3b9698de0b8fbf6a766b0dbc4d3d02725992f65aed2e1d16d27219a6b0d5278a653220ed8eb67fc0c6f4004d9f699c37a05c93dfaa8e28aabddc28cf1a475d4c1b18038555a35a042ed32808ef196fd376bff5e23f7f37f5840d97f659f5ec5a9b92eedef4e118e5634f367d70d7da5fb547c15a2c2ca70fadf4c7353cdaf88720d2b7860f562789c4f9d8c2858cce3d1d3f5c2b2c7da196c23ffb279acb42f1f70c7cb5fcd829486fe855a4e6aa807d578ad7fe70f25f5b970cb2d57b233bf3eca76db8d77097a425d67b524d24ecec639733c3ac3d3fe465a8ab11602381a71a1f0bdc7c0e701a5311d84b999060ff1565d7e77c48a2cab88ea30e5d713f9e72749c03a2fc58a75a53a011cf516375a70e8ab41b1d24c94fb098752ddc3d227dc641321ebbafc8cf15da914c6a69264ce0141bcb772bd756801251cef16161a8c302b9d6ff5a147b2f2de18c7a24b6cec99d289dd9ae7ec2d8c211cf87dd0082e9b5796b6fc112b17e12796c12d95fb6de6c735eaed5fb74056f6c08c97ad38b3deee4aa81e29da800952ef7207635c44bf1be8b1bee1fa225eb6ddad37e5c11d1dbc564d685df3614821e2625f78081c9cb2de660e635f53791d2219da593da71b1330e159771775fbb18189d4377189217e9bd04afc6e8900dfa4936f4fce9182341cc0f0507cee8143053665db48099e9a4d3e9182dece041bda0bf381cff8936f7808c7d60072ffbad1ae793018105f38a0440004c8ac9bbc39ea4bfd67f1afdc02704a16365d802ea9dd8a931947187f074fe183829d48f5b5693f065bfade0eeddd2738eacab12dfebb069a4f848f3ab6659a769f9bfc143c72417604d66a7a8b75c4425e9d094104ed2f937937944a2a889869485ca25c34f949d3e91d6ccfb29de6f9bf074530ed5a4011a301e1d9972d32b9f79d0cfaf76546c924dc8d14762e6201cf3cb2edb8649a6f41b07b31b459ccb0aecce0adb14128092136fa8c00eff4549852cb502aafcfc5bdb9bccde5fb62545653e95f8f211246449cf192740e58e74bfc05292861774113b45444fbf6ea5c847c910affc955755c0fc4fe57cfc31871642852767203c8fa7d688a6e9dfe8146dba0576d156db7fa8efbecafa9ce42622061b08e78b91226eb2dda9fd67e9060c10ea620d1f80c451a04d03fee4186b49021f29ebb79306cb97955d367f9c2b1d50ba6f512b4fdb18954b96a8bf0101bd99d190942a9abe6ed71ac3c6dc2593d68146c2ed8cf477fdd4ac625d585155aa5f5b722db9bbe91fa6f2987255b5c51b03c621003605a9de32d8f498cde7a7cfa7b15c2a9a0b3a5ceaf06e201064e3f4b6dcfd62644a29ded0811f8a07ae7d88fe4877eeed72367180e3066fe3fbba4ff498bdcc24d08799ca80775f4153cd45fa6c8c186846e9af3b8ea4432e05319aab2e2c66057486e3170ba926444ddcdcc9e736d4f416d81e8c2a3646633226bfa814a7c40db41601590996bb81515f7428d21e1414cef312c0d97ccfa963ccb62f00643fdb887b3a91f4aab9036eb7ef20413dc86bd3005e3a4420ec1612054c8bbfbfe824d49290018e16eab4e0a35b19fdd557e42cd1e00b1f4fd6a80b8bcb795c6f3553011ad96c9742c867408b6cd86ce49a96bd89e884c5206175907b2a3abab2051d1e7b97ff95cf6ae5e462712ee2b2d26adafdf1d1de3f4d3f37e16690ea798141fa58a10493a8cb65354db389c62bd05b9bdda3237229a8109b3347adc1970b8b2c040d3e7b0de5de7feb2ea2036e61cd3f00a6b663f34a8be0cd9d15aae3e085fb94b18082f08b634bf8fcc886b5760dfa8f8d97325045f24e39aae7a5fc4955862a48c64c38358badb75374aabea3c16890b2ce37684de0c6b69e0920c530387918c22ce819615d1e228d09c2877cb3edc4c07fe0b3185fcbb68100d03dd320c194fdad20c11d1e9e2847d1b227e025b37b6918a778f6d3c84d5d608fcf2b3264d5c09ed619ecbbcf2e91e68144fbc7756fccb71695a9b16e4c9c563a79031a5b0f293688c30479e1da7d4963a56a9924e9122d5dcc4f061101b22b9d34dd2245f3923c6787fe4f41f47a37217fa31b00682fbcc75985f1f80bcffa4cb3b7c4d298b24f86d081f9664692a320ef50c7754baa00d7ed629aa49aeef5c404a466771d337faafbc03232b0744f71d57debc0577ea2efa301ef4640aed9c6e919c036d9600eb6bd57f36fd738f25e93e9bc8cf8aa2ccdbb1c3145fcaceb3177e37449015b324597aaa0ad0bb10a95392e7722285351d12b48668eb8cebb36288cf039d0dbcb2806f7663ba8806837a531e9f9e02027e467244f455dd05c797634953cb5d572af62fa47323c75307fa3e4fa257795991ba5c34f87865e914ac11f8442b000c061cf9817695e6ddd9403e5d71bb9496d5675da167e2d653d094cc93e2bb4eaa14348802faa6c1ab000f41909f325ffb28c3e3009da0c6dd7a757d3a535dad5c7fe8fc0c57d65e43bdee74a754ebb1d776fe745127590804c56260d6f420d4b40d041d347fd15c9d1a7976e7f6369ee12bef83bf71399415fc8f2167843625b114abb08363dfaca75049744b49ed9fcd3375ecdf326b685fa896a1f15c099372639b29a9b1c749fb05992442274f0b8be2590238b6d4b205ced76be290bd3a9d5415c8e945f8a815570ac368680c7670e1c6df846a0e58f256580fab81342a66c6019f2d10698d17b1b1d389d26ef830ddbfc43c0fdd04696f5afdc5d12e8a37eb37c02e272158f2018c7750c480230e1747a2e63ceea5e3d1b6724a66b18676a2f7493783fc6ff1764e9727dba94cc9219391b487d07cdaa7f2c277ddfb3c4d5cc79f9ff386cf2ef1ca31e49140291eb5ca7412f1219bb1eb5e201a58477f1a63b736126ecf2dae4f2c0bf3158543aa80c2048e448b041660584b9b373f6a65699bc477dec8ed163df6c0e17e0731e226bcfac01420cf41628bc5b174d512983a3b9583439b85aa5e9d93195616b9a0e149c4d3e360b6963b4fef9bc3fa86f63bae6c3553be29a92316b627f808a759878424bd5d40e63483e896d6c5fe1d61dcb7461671ed8d7edb94e3d86b0be6e74287c4a38ceb38402f2fe91819f8121c9a4859df0ccafdbdbcf2426fe85653974a9fbe3919a41d1c649a5b7aedd23ce59e86ce0690c4e5395e34c511d868b404bd253c3d9d50f22798e997fae338f077cf414804e85f2384c4e63264cf4744ddf7b90c9818596fd3db03b2760f915c3f3baf4bfaa8d80f74f219bb91d5fcee5481b158adf54522fe331bbffeae543f57ef18c4ff2506260425b1e8eacd972a83395c9c6228a596679bab21143f1b63a1cb22c952a662648d2fd7332a9d26ac9986be9cbcdc5b905b0cbf64873a2acab6a50e8e34b53ffdc10fa237e5d252eba2d5bf6ddd6ef7c42638548e3a6e1db9bc053817988cf9f8368df823e0c465cb40e7b9967871ea3d36058d964fd20e8e5a727c21867ac6d63de9537200671573f4759c7100b3ced0cc9528e4d31d22e3b7bd03890431c1b9642737f2c38764432ebc7e1b2814e9b73b816dd0564602df8a065c425ca71a68b3d96c636a59eb69ce27838d47e1fcb882dfb2ac0383598f3015c7e723c9715b7160425486f632af7376de9588d95ecbe12b745412436c63914bcaf8ec9a6546994cda339b97fb2d50fb70cd5ccfa1d0de06e829c6d609e4774ac8fc9fe8e7d49821c", 0x1000}, {&(0x7f00000032c0)="4582a196c4f45ba7432245feb4ff19b621c410040ccc10b8c09f9ef7718b28a1c8dc55b88a99", 0x26}, {&(0x7f0000003300)="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", 0xfb}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="b229e20abdaf69fcd009e7a176d0c078563bb4c6d27bc6320447d47e072b323600df7824c36ca29aaabdf4f90c3c3db1dbde8b1e65bcb89c72a8cd371e11db18798a130734a53062891c7b891aa8041bd2324fbc3a1ff0e0d497ce5b4feba72d76055c633132", 0x66}, {&(0x7f0000004480)="3e61352bab79c0b4e4f6b35afa4548f57215d2a9b448a3343b58f70a9896d40e35d39669bf7dd7555a0491ecfebfcda02a0370ec03d261837b444c47dee452d9ffcb8032cd26c05e1954689f2166ae29c7355abe6c142077104876329258547dc7b2a8cd5853f76bb95ed1f6837e60d04f1465f31093b857880ad3ee8fe4972f8a86b837ba44ea0e1a00712306097ab8d48a6a6ca634cfdced6702db458c569a73b370954f73e7936c33b56583893c7daa698a9000fd071d2f032077ab4f", 0xbe}], 0x8}}], 0x5, 0x20001804) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:36:56 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 21) close(r0) 11:36:56 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:56 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:36:56 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 11:36:56 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 36) 11:36:56 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x700, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:36:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1a, 0x0, &(0x7f0000000000)) 11:36:56 executing program 6: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000140)={0x0, "4dd1bc23b6d4aa5ab6a2bdf4c3e42e7c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xb91, 0x4) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:37:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x21, 0x0, &(0x7f0000000000)) 11:37:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 37) 11:37:15 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 11:37:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 22) close(r0) 11:37:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 11:37:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x1800, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:37:15 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:15 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x22, 0x0, &(0x7f0000000000)) 11:37:15 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 11:37:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 38) 11:37:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6600, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:37:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 23) close(r0) 11:37:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x5, 0x440100) fcntl$dupfd(r3, 0x406, r1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 11:37:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x29, 0x0, &(0x7f0000000000)) 11:37:15 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1397.008897] FAULT_INJECTION: forcing a failure. [ 1397.008897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.009807] CPU: 1 PID: 7857 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1397.010334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.010877] Call Trace: [ 1397.011053] [ 1397.011216] dump_stack_lvl+0x8b/0xb3 [ 1397.011487] should_fail.cold+0x5/0xa [ 1397.011763] copyin+0x19/0x120 [ 1397.011994] copy_page_from_iter_atomic+0x249/0x1290 [ 1397.012349] ? ext4_da_write_begin+0x63a/0x9a0 [ 1397.012676] ? hash_and_copy_to_iter+0x210/0x210 [ 1397.013014] ? ext4_write_begin+0x14d0/0x14d0 [ 1397.013342] generic_perform_write+0x2cb/0x580 [ 1397.013678] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1397.014038] ? discard_new_inode+0x190/0x190 [ 1397.014363] ? down_write_killable_nested+0x260/0x260 [ 1397.014724] ext4_buffered_write_iter+0x164/0x460 [ 1397.015055] ext4_file_write_iter+0x3fb/0x1900 [ 1397.015375] ? lock_release+0x750/0x750 [ 1397.015673] ? ext4_file_mmap+0x250/0x250 [ 1397.015981] ? lock_is_held_type+0xd7/0x130 [ 1397.016302] vfs_write+0x9c3/0xd90 [ 1397.016572] ? kernel_write+0x630/0x630 [ 1397.016867] ? __fget_files+0x270/0x450 [ 1397.017174] ksys_write+0x127/0x250 [ 1397.017445] ? __ia32_sys_read+0xb0/0xb0 [ 1397.017745] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.018118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.018502] do_syscall_64+0x3b/0x90 [ 1397.018777] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1397.019143] RIP: 0033:0x7fb922919b19 [ 1397.019414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.020675] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1397.021212] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1397.021715] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1397.022235] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.022743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.023247] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1397.023766] 11:37:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 39) 11:37:16 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:16 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, 0x0) [ 1397.193280] FAULT_INJECTION: forcing a failure. [ 1397.193280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1397.194177] CPU: 1 PID: 7875 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1397.194701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.195248] Call Trace: [ 1397.195427] [ 1397.195636] dump_stack_lvl+0x8b/0xb3 [ 1397.195934] should_fail.cold+0x5/0xa [ 1397.196265] copyin+0x19/0x120 [ 1397.196552] copy_page_from_iter_atomic+0x249/0x1290 [ 1397.196913] ? ext4_da_write_begin+0x63a/0x9a0 [ 1397.197237] ? hash_and_copy_to_iter+0x210/0x210 [ 1397.197569] ? ext4_write_begin+0x14d0/0x14d0 [ 1397.197906] generic_perform_write+0x2cb/0x580 [ 1397.198250] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1397.198618] ? discard_new_inode+0x190/0x190 [ 1397.198936] ? down_write_killable_nested+0x260/0x260 [ 1397.199314] ext4_buffered_write_iter+0x164/0x460 [ 1397.199659] ext4_file_write_iter+0x3fb/0x1900 [ 1397.199988] ? lock_release+0x750/0x750 [ 1397.200278] ? ext4_file_mmap+0x250/0x250 [ 1397.200578] ? lock_is_held_type+0xd7/0x130 [ 1397.200887] vfs_write+0x9c3/0xd90 [ 1397.201174] ? kernel_write+0x630/0x630 [ 1397.201543] ? __fget_files+0x270/0x450 [ 1397.201854] ksys_write+0x127/0x250 [ 1397.202128] ? __ia32_sys_read+0xb0/0xb0 [ 1397.202443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.202825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.203230] do_syscall_64+0x3b/0x90 [ 1397.203566] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1397.203941] RIP: 0033:0x7f15cfaa8b19 [ 1397.204234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.205616] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1397.206155] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1397.206659] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1397.207158] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.207662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1397.208166] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1397.208695] 11:37:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 40) 11:37:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:37:32 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:32 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6c01, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:37:32 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, 0x0) 11:37:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f0000000000)) 11:37:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 24) close(r0) 11:37:32 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:32 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200880, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, &(0x7f0000000040)={r3, r0, 0x2}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:37:32 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x9, 0x0, 0x0) 11:37:32 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x31, 0x0, &(0x7f0000000000)) 11:37:32 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="e71204347d4a57712082611cea9a7e917ac997ae2ce9b66c40df85bb8a2425ec3b3ce703882f8c20a280d9cd6f63c800000000b4ef454adfafd8e60b44178030a99740b2a980a1a08eff5daf966e09008000b1f0c62edcae4a9009000000e8e8224b9c8798f240c8ceafd93611cca2f75f88ad8b1680157a5db7315af46af4236a1a6f7b60d880b1b585416c8daa3d8a0c3a6ac10c908d302d9de7df615181fe630a6c688ec7f25d0666"], 0x7) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:37:32 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x8004, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:37:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 41) 11:37:32 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) r2 = dup3(0xffffffffffffffff, r1, 0x0) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040), 0x0) 11:37:46 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) listen(r1, 0x1) 11:37:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x32, 0x0, &(0x7f0000000000)) 11:37:46 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xb601, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:37:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 25) close(r0) 11:37:46 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:46 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 42) 11:37:46 executing program 7: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:46 executing program 6: mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='bdev\x00', 0x90a018, &(0x7f0000000080)='!\".)/\x00\x00\x00\x00\x00\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 11:37:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:37:46 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xf000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:37:47 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:47 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:37:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 43) [ 1428.283836] FAULT_INJECTION: forcing a failure. [ 1428.283836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.285364] CPU: 0 PID: 7966 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1428.286312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.287321] Call Trace: [ 1428.287649] [ 1428.287944] dump_stack_lvl+0x8b/0xb3 [ 1428.288427] should_fail.cold+0x5/0xa [ 1428.288922] copyin+0x19/0x120 [ 1428.289345] copy_page_from_iter_atomic+0x249/0x1290 [ 1428.289985] ? ext4_da_write_begin+0x63a/0x9a0 [ 1428.290579] ? hash_and_copy_to_iter+0x210/0x210 [ 1428.291204] ? ext4_write_begin+0x14d0/0x14d0 [ 1428.291805] generic_perform_write+0x2cb/0x580 [ 1428.292410] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1428.293063] ? discard_new_inode+0x190/0x190 [ 1428.293624] ? down_write_killable_nested+0x260/0x260 [ 1428.294316] ext4_buffered_write_iter+0x164/0x460 [ 1428.294937] ext4_file_write_iter+0x3fb/0x1900 [ 1428.295559] ? lock_release+0x750/0x750 [ 1428.296084] ? ext4_file_mmap+0x250/0x250 [ 1428.296634] ? lock_is_held_type+0xd7/0x130 [ 1428.297206] vfs_write+0x9c3/0xd90 [ 1428.297701] ? kernel_write+0x630/0x630 [ 1428.298238] ? __fget_files+0x270/0x450 [ 1428.298801] ksys_write+0x127/0x250 [ 1428.299295] ? __ia32_sys_read+0xb0/0xb0 [ 1428.299837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.300488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.301169] do_syscall_64+0x3b/0x90 [ 1428.301659] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1428.302326] RIP: 0033:0x7f15cfaa8b19 [ 1428.302827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.305066] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1428.306017] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1428.306912] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1428.307814] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.308706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.309608] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1428.310533] 11:38:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 44) 11:38:02 executing program 7: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000140)={0x0, "4dd1bc23b6d4aa5ab6a2bdf4c3e42e7c"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0xb91, 0x4) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:38:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:02 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfeff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 26) close(r0) 11:38:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x6) 11:38:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x111a01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x89008, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, ']('}}], [{@pcr={'pcr', 0x3d, 0x16}}, {@smackfsfloor}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}}) 11:38:02 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x19, 0x0, &(0x7f0000000000)) 11:38:02 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffe, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) 11:38:02 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x11) 11:38:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 27) close(r0) 11:38:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) fstat(r0, &(0x7f0000000580)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_mount_image$ext4(&(0x7f0000000540)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3, &(0x7f0000000400)=[{&(0x7f0000000140)="770b4dd0650b384c74baa99d3734fa199c0e9ac24fdfc06bd072cf04c2c726d43e665080c6d0c095a3fd1b322fa380b9c085bf9d621944c49c3457aaf7bb1d05ee2b0600f1cb84322b11b95eab2a6180cdf1173b1639ef41ddc81e38251d3b7b33598cce72215eaa56b3cb9814eceec2489aef51079145857b11446fd8566b1aaa40d84261972575eb29ab31e74bac29cb8666c4a8cd25e438379b00d56d515c25aabd263ce195195590fb9bc9154a50b7304ab010beaaa0d94b6fb44d604c21d1d0429770", 0xc5, 0x401}, {&(0x7f0000000240)="9a13bd1f6e24865379b3b784748a3d9fbdf32b4ba784c6b24937aa06733d1913472981a28b90d4974702284749fab0e8c4b109647d4f70651e3ec74e5b278be59ad4781df75220462e7e80568b239c7f3482d22b41d10946c83ae43acf1951d014291578afeba560a843b42d6a8d41150e7b1da1928a82d2b7e76864f1203b232b3cdd6414c8d30b832f5c9c678bccda1cf3efdd4287262b81a0976ea8", 0x9d, 0x5}, {&(0x7f0000000300)="cd24d57ad5ac3317c977d8023eefb80d10f42ed3ea13fb88e0a2d719042ec6eeb17e268ae14662eb3242d838e6f42afe9ea4bd67909e68ddcd1256934a5549e3811244efc59920d2919994cdf530b4136e239f9351b8738b51a8c609f0dc9c46d3eb9d16936ac49c367dc52472bba32da7543665925cd64eab3dc7269404efbf8456b2c58f215351f05c00f67d7702b93a5f38e50c6ee84b9a4641c307ac2ca07a3efb65d31805d1029838c77b0316c354e800a6065b80d868c9ab27f192fe215ae6fce6fadef1d296a793a90a46c7ef3b0a6823132a5f5139b30e2007ba90e3d9bb64", 0xe3, 0x47827f92}], 0x80800, &(0x7f0000000780)=ANY=[@ANYBLOB='euid>', @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB="2c736d61636b66736861743d2f4d3e4109f250225c4ab6e455325e233a2c00"]) lseek(r0, 0x250e, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 11:38:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x19, 0x0, &(0x7f0000000000)) 11:38:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 45) [ 1443.916824] loop6: detected capacity change from 0 to 264192 [ 1443.966426] loop6: detected capacity change from 0 to 264192 11:38:16 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x111a01, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x89008, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, ']('}}], [{@pcr={'pcr', 0x3d, 0x16}}, {@smackfsfloor}, {@appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r4}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}]}}) 11:38:16 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 46) 11:38:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) setsockopt(r0, 0x10001, 0x5, &(0x7f0000000000)="75f137fae79315297dfbc75e0bb0b73fd4fe0f8748e73f2a5890d20f124e2289146c4541eac2d3fcb52d08c73916dfc7ebab16e465bd79c2674387ec6bbc8554c1dde42c79268ce914ed06c6c41ee45d68ddab44303231b9324677b160a94e798de19930b182c611ee1e7e82fa1c7d0f7e9d66c3e6c0f64fa507e02541678781b7c662f6ba6396723d5b7c70610ab4a420e110634bbb77948c5c6121613bbf54b43723741ea25023f4cd4a192fec23ea6e0416a5469fae8d25eef73b65b16c35fff9163186f7a8", 0xc7) 11:38:16 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x80000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:16 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x88) 11:38:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 28) close(r0) [ 1457.290578] Bluetooth: hci1: HCI_REQ-0x0401 11:38:16 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xf0ffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:16 executing program 7: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 47) 11:38:16 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:16 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x600) [ 1458.159721] Bluetooth: hci1: HCI_REQ-0x0401 [ 1459.304176] Bluetooth: hci1: command 0x0401 tx timeout [ 1461.352183] Bluetooth: hci1: command 0x0401 tx timeout 11:38:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x91ecfaea99483c09, &(0x7f0000000000)="b381529b38626604082919b20d9930aa8863caa011c51b36e10d783528cd9981f27aad8c5729dd5dc2dab55b354239998f39e480a243b92c37be08") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x9398, 0x0) 11:38:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 29) close(r0) 11:38:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 48) 11:38:33 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:33 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:33 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x1000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x1100) 11:38:33 executing program 7: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfe, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:33 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) setsockopt(r0, 0x10001, 0x5, &(0x7f0000000000)="75f137fae79315297dfbc75e0bb0b73fd4fe0f8748e73f2a5890d20f124e2289146c4541eac2d3fcb52d08c73916dfc7ebab16e465bd79c2674387ec6bbc8554c1dde42c79268ce914ed06c6c41ee45d68ddab44303231b9324677b160a94e798de19930b182c611ee1e7e82fa1c7d0f7e9d66c3e6c0f64fa507e02541678781b7c662f6ba6396723d5b7c70610ab4a420e110634bbb77948c5c6121613bbf54b43723741ea25023f4cd4a192fec23ea6e0416a5469fae8d25eef73b65b16c35fff9163186f7a8", 0xc7) 11:38:33 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1474.772924] Bluetooth: hci1: HCI_REQ-0x0401 11:38:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x8800) 11:38:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) dup(r0) 11:38:33 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:33 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x2000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:33 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac01a600", @ANYRES16=r5, @ANYBLOB="000127bd7000fddbdf2567000000080001004b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000080ff077b0000000800c400af0e0000a700c50003dc0a436db0f14dff541254a5c7a8a36ca6e54217e5b188e8f587352b4e31d5171de8d58c29daa17f049bef24cada7561a93b50e41632ba0337667166cf570ebf9d834472a2a3e14cff15ae67cc7333c0da6398f57eedcb0385030c558216241269b6e71bc1650009df822327e3bf271cdfa64f468ef29406a96a83d9ac4424852e0f0ca58457ce98392cbafa2bcdf898e1450025ea46d5d2cbcf7d1aa9ee1361f7d500ca00c500f0d4f357ea9145e8e7d6288760cd26b538493223883aa29ffabe4b5ade917a1db45c346d372f5113af6e392d2b74237ab03e8f72ccf7f97709d7931d6989026f3e29097e51e7775b3ff6f77e71a3f40cdc46981ae40c2a89dc4e6493ce4b22a034b36b818842878f48092f5e11bb0c86555335b5da77f89c4e11ff9fe59b5a691603d78ffe1dc2699fd1bbf87a168532add94315b2e6e288d64707f175193a1fdbeff9df88c87c3198eb35f6900ca121e7d6cfc5cb23c9755d3c8df2c92d8af0645f715642340000"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc4, r5, 0x800, 0x70bd27, 0xc892, {{}, {@val={0x8, 0x1, 0x7c}, @void, @val={0xc, 0x99, {0x9, 0x24}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x89ce}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1ff}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0x83, 0xc5, "1a0b6b59f22e8b0347d167f2a48e6991db48eb5819e7e5b064a519eaffa8c1aee81c7521a9f33d30589625700422eeecf43e2d5048ebdb8fe2a536951374e38ac5403e01c94e930ad98fb9056e48cc30268083ffad51e3378c02a5513bb895f01feeed079a341c1f42fdfc8c53599f7d6b8492d8757b1ffc4ab1af6bdca216"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:38:33 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 49) 11:38:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 30) close(r0) 11:38:33 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1475.005674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 11:38:33 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x3000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1475.027217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1476.776152] Bluetooth: hci1: command 0x0401 tx timeout 11:38:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x0) shutdown(r1, 0x1) 11:38:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x1000000) 11:38:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) setsockopt(r0, 0x10001, 0x5, &(0x7f0000000000)="75f137fae79315297dfbc75e0bb0b73fd4fe0f8748e73f2a5890d20f124e2289146c4541eac2d3fcb52d08c73916dfc7ebab16e465bd79c2674387ec6bbc8554c1dde42c79268ce914ed06c6c41ee45d68ddab44303231b9324677b160a94e798de19930b182c611ee1e7e82fa1c7d0f7e9d66c3e6c0f64fa507e02541678781b7c662f6ba6396723d5b7c70610ab4a420e110634bbb77948c5c6121613bbf54b43723741ea25023f4cd4a192fec23ea6e0416a5469fae8d25eef73b65b16c35fff9163186f7a8", 0xc7) 11:38:47 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 50) 11:38:47 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x4000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:38:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 31) close(r0) 11:38:47 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:47 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:38:47 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x5000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1488.901564] Bluetooth: hci1: HCI_REQ-0x0401 11:38:47 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1490.920260] Bluetooth: hci1: command 0x0401 tx timeout 11:39:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) setsockopt(r0, 0x10001, 0x5, &(0x7f0000000000)="75f137fae79315297dfbc75e0bb0b73fd4fe0f8748e73f2a5890d20f124e2289146c4541eac2d3fcb52d08c73916dfc7ebab16e465bd79c2674387ec6bbc8554c1dde42c79268ce914ed06c6c41ee45d68ddab44303231b9324677b160a94e798de19930b182c611ee1e7e82fa1c7d0f7e9d66c3e6c0f64fa507e02541678781b7c662f6ba6396723d5b7c70610ab4a420e110634bbb77948c5c6121613bbf54b43723741ea25023f4cd4a192fec23ea6e0416a5469fae8d25eef73b65b16c35fff9163186f7a8", 0xc7) 11:39:03 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 32) close(r0) 11:39:03 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x6000000) 11:39:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:39:03 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 51) 11:39:03 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x7000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x11000000) [ 1504.451876] Bluetooth: hci1: HCI_REQ-0x0401 11:39:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) openat(r1, &(0x7f0000000000)='./file0\x00', 0x109080, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:39:03 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 52) 11:39:03 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x18000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:03 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 33) close(r0) [ 1504.692785] FAULT_INJECTION: forcing a failure. [ 1504.692785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1504.694616] CPU: 0 PID: 8172 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1504.695632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.696680] Call Trace: [ 1504.697028] [ 1504.697343] dump_stack_lvl+0x8b/0xb3 [ 1504.697871] should_fail.cold+0x5/0xa [ 1504.698411] copyin+0x19/0x120 [ 1504.698865] copy_page_from_iter_atomic+0x249/0x1290 [ 1504.699557] ? ext4_da_write_begin+0x63a/0x9a0 [ 1504.700213] ? hash_and_copy_to_iter+0x210/0x210 [ 1504.700860] ? ext4_write_begin+0x14d0/0x14d0 [ 1504.701493] generic_perform_write+0x2cb/0x580 [ 1504.702143] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1504.702861] ? discard_new_inode+0x190/0x190 [ 1504.703473] ? down_write_killable_nested+0x260/0x260 [ 1504.704223] ext4_buffered_write_iter+0x164/0x460 [ 1504.704898] ext4_file_write_iter+0x3fb/0x1900 [ 1504.705549] ? lock_release+0x750/0x750 [ 1504.706098] ? ext4_file_mmap+0x250/0x250 [ 1504.706691] ? lock_is_held_type+0xd7/0x130 [ 1504.707304] vfs_write+0x9c3/0xd90 [ 1504.707834] ? kernel_write+0x630/0x630 [ 1504.708414] ? __fget_files+0x270/0x450 [ 1504.709001] ksys_write+0x127/0x250 [ 1504.709523] ? __ia32_sys_read+0xb0/0xb0 [ 1504.710098] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.710807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.711530] do_syscall_64+0x3b/0x90 [ 1504.712057] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1504.712762] RIP: 0033:0x7fb922919b19 [ 1504.713276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.715667] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1504.716681] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1504.717637] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1504.718589] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.719552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.720714] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1504.721709] [ 1506.472237] Bluetooth: hci1: command 0x0401 tx timeout 11:39:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 34) close(r0) 11:39:21 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x66000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:39:21 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) 11:39:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0x88000000) 11:39:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 53) 11:39:21 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1522.532301] Bluetooth: hci1: HCI_REQ-0x0401 [ 1522.536344] FAULT_INJECTION: forcing a failure. [ 1522.536344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1522.538206] CPU: 1 PID: 8191 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1522.539225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1522.540312] Call Trace: [ 1522.540652] [ 1522.540956] dump_stack_lvl+0x8b/0xb3 [ 1522.541470] should_fail.cold+0x5/0xa [ 1522.541996] copyin+0x19/0x120 [ 1522.542437] copy_page_from_iter_atomic+0x249/0x1290 [ 1522.543122] ? ext4_da_write_begin+0x63a/0x9a0 [ 1522.543747] ? hash_and_copy_to_iter+0x210/0x210 [ 1522.544392] ? ext4_write_begin+0x14d0/0x14d0 [ 1522.545012] generic_perform_write+0x2cb/0x580 [ 1522.545640] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1522.546322] ? discard_new_inode+0x190/0x190 [ 1522.546895] ? down_write_killable_nested+0x260/0x260 [ 1522.547593] ext4_buffered_write_iter+0x164/0x460 [ 1522.548249] ext4_file_write_iter+0x3fb/0x1900 [ 1522.548854] ? lock_release+0x750/0x750 [ 1522.549400] ? ext4_file_mmap+0x250/0x250 [ 1522.549955] ? lock_is_held_type+0xd7/0x130 [ 1522.550527] vfs_write+0x9c3/0xd90 [ 1522.551020] ? kernel_write+0x630/0x630 [ 1522.551558] ? __fget_files+0x270/0x450 [ 1522.552131] ksys_write+0x127/0x250 [ 1522.552623] ? __ia32_sys_read+0xb0/0xb0 [ 1522.553164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1522.553833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1522.554513] do_syscall_64+0x3b/0x90 [ 1522.555003] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1522.555670] RIP: 0033:0x7f15cfaa8b19 [ 1522.556178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1522.558400] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1522.559351] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1522.560446] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1522.561331] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1522.562214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1522.563102] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1522.564013] 11:39:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0xa4ffffff) 11:39:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 11:39:21 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6c010000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:21 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:21 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:21 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 35) close(r0) 11:39:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0xffffff7f) 11:39:21 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 54) 11:39:21 executing program 6: times(&(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x105000, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x3bda, 0x0) [ 1523.002966] FAULT_INJECTION: forcing a failure. [ 1523.002966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.004618] CPU: 1 PID: 8217 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1523.005609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1523.006636] Call Trace: [ 1523.006976] [ 1523.007278] dump_stack_lvl+0x8b/0xb3 [ 1523.007784] should_fail.cold+0x5/0xa [ 1523.008327] copyin+0x19/0x120 [ 1523.008764] copy_page_from_iter_atomic+0x249/0x1290 [ 1523.009433] ? ext4_da_write_begin+0x63a/0x9a0 [ 1523.010046] ? hash_and_copy_to_iter+0x210/0x210 [ 1523.010666] ? ext4_write_begin+0x14d0/0x14d0 [ 1523.011286] generic_perform_write+0x2cb/0x580 [ 1523.011966] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1523.012654] ? discard_new_inode+0x190/0x190 [ 1523.013220] ? down_write_killable_nested+0x260/0x260 [ 1523.013917] ext4_buffered_write_iter+0x164/0x460 [ 1523.014573] ext4_file_write_iter+0x3fb/0x1900 [ 1523.015202] ? lock_release+0x750/0x750 [ 1523.015759] ? ext4_file_mmap+0x250/0x250 [ 1523.016492] ? lock_is_held_type+0xd7/0x130 [ 1523.017081] vfs_write+0x9c3/0xd90 [ 1523.017584] ? kernel_write+0x630/0x630 [ 1523.018150] ? __fget_files+0x270/0x450 [ 1523.018709] ksys_write+0x127/0x250 [ 1523.019203] ? __ia32_sys_read+0xb0/0xb0 [ 1523.019747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1523.020451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1523.021231] do_syscall_64+0x3b/0x90 [ 1523.021865] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1523.022724] RIP: 0033:0x7f15cfaa8b19 [ 1523.023401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1523.026344] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1523.027607] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1523.028814] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1523.029706] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1523.030585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1523.031459] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1523.032397] 11:39:22 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x80040000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1524.584105] Bluetooth: hci1: command 0x0401 tx timeout 11:39:37 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 36) close(r0) 11:39:37 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:39:37 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x8cffffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:37 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)=0xffffffa4) 11:39:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 55) 11:39:37 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1c00000000000, 0x400) r1 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_vlan\x00', 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100), 0x0) [ 1538.972231] Bluetooth: hci1: HCI_REQ-0x0401 11:39:38 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xb6010000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 37) close(r0) 11:39:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x7) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:39:38 executing program 6: getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100), 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) fcntl$dupfd(r1, 0x406, r0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000140)={0x10000, {{0x2, 0x4e22, @private=0xa010101}}, {{0x2, 0x4e23, @empty}}}, 0x108) 11:39:38 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:38 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 56) 11:39:38 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1541.032192] Bluetooth: hci1: command 0x0401 tx timeout 11:39:54 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xf6ffffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:54 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") r3 = dup(r1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:39:54 executing program 1: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='\x00') r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)=0xe) r1 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg2\x00'}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) 11:39:54 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:54 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:54 executing program 6: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x12d000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xe3b8, 0x40000, 0x29, 0x40, 0x5}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100), 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x4, "d836e0", 0x20, 0x7f}) 11:39:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 57) 11:39:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 38) close(r0) [ 1555.598323] Bluetooth: hci1: HCI_REQ-0x0401 [ 1555.620608] FAULT_INJECTION: forcing a failure. [ 1555.620608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.621513] CPU: 0 PID: 8291 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1555.622040] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.622597] Call Trace: [ 1555.622778] [ 1555.622940] dump_stack_lvl+0x8b/0xb3 [ 1555.623208] should_fail.cold+0x5/0xa [ 1555.623484] copyin+0x19/0x120 [ 1555.623714] copy_page_from_iter_atomic+0x249/0x1290 [ 1555.624075] ? ext4_da_write_begin+0x63a/0x9a0 [ 1555.624408] ? hash_and_copy_to_iter+0x210/0x210 [ 1555.624740] ? ext4_write_begin+0x14d0/0x14d0 [ 1555.625062] generic_perform_write+0x2cb/0x580 [ 1555.625405] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1555.625766] ? discard_new_inode+0x190/0x190 [ 1555.626066] ? down_write_killable_nested+0x260/0x260 [ 1555.626449] ext4_buffered_write_iter+0x164/0x460 [ 1555.626780] ext4_file_write_iter+0x3fb/0x1900 [ 1555.627100] ? lock_release+0x750/0x750 [ 1555.627381] ? ext4_file_mmap+0x250/0x250 [ 1555.627674] ? lock_is_held_type+0xd7/0x130 [ 1555.627980] vfs_write+0x9c3/0xd90 [ 1555.628246] ? kernel_write+0x630/0x630 [ 1555.628538] ? __fget_files+0x270/0x450 [ 1555.628832] ksys_write+0x127/0x250 [ 1555.629097] ? __ia32_sys_read+0xb0/0xb0 [ 1555.629389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.629742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.630100] do_syscall_64+0x3b/0x90 [ 1555.630363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1555.630735] RIP: 0033:0x7fb922919b19 [ 1555.631004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.632284] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1555.632821] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1555.633318] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1555.633815] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.634322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.634819] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1555.635337] 11:39:54 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfcfdffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:54 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0xfffe, 0x0) 11:39:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 58) 11:39:54 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:54 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfeffffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:39:54 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 39) close(r0) [ 1555.848657] FAULT_INJECTION: forcing a failure. [ 1555.848657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1555.850180] CPU: 1 PID: 8306 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1555.851131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1555.852133] Call Trace: [ 1555.852465] [ 1555.852757] dump_stack_lvl+0x8b/0xb3 [ 1555.853252] should_fail.cold+0x5/0xa [ 1555.853754] copyin+0x19/0x120 [ 1555.854180] copy_page_from_iter_atomic+0x249/0x1290 [ 1555.854828] ? ext4_da_write_begin+0x63a/0x9a0 [ 1555.855415] ? hash_and_copy_to_iter+0x210/0x210 [ 1555.856018] ? ext4_write_begin+0x14d0/0x14d0 [ 1555.856616] generic_perform_write+0x2cb/0x580 [ 1555.857244] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1555.857923] ? discard_new_inode+0x190/0x190 [ 1555.858495] ? down_write_killable_nested+0x260/0x260 [ 1555.859189] ext4_buffered_write_iter+0x164/0x460 [ 1555.859822] ext4_file_write_iter+0x3fb/0x1900 [ 1555.860450] ? lock_release+0x750/0x750 [ 1555.860983] ? ext4_file_mmap+0x250/0x250 [ 1555.861530] ? lock_is_held_type+0xd7/0x130 [ 1555.862097] vfs_write+0x9c3/0xd90 [ 1555.862583] ? kernel_write+0x630/0x630 [ 1555.863125] ? __fget_files+0x270/0x450 [ 1555.863674] ksys_write+0x127/0x250 [ 1555.864164] ? __ia32_sys_read+0xb0/0xb0 [ 1555.864709] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.865381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1555.866059] do_syscall_64+0x3b/0x90 [ 1555.866544] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1555.867202] RIP: 0033:0x7f15cfaa8b19 [ 1555.867679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1555.869945] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1555.870893] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1555.871778] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1555.872684] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1555.873580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.874468] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1555.875389] 11:39:54 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:39:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0xa78a, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x1, 0x2) [ 1557.608143] Bluetooth: hci1: command 0x0401 tx timeout 11:40:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 59) 11:40:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:40:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:40:09 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffff000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:09 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x0, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 40) close(r0) 11:40:09 executing program 6: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x5c, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x20}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x8000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000100), 0x0) connect(r5, &(0x7f0000000180)=@llc={0x1a, 0x1, 0xff, 0x3, 0x47, 0x6}, 0x80) 11:40:09 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x21561b33) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:40:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 60) 11:40:09 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2c4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0xf}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}}, 0x8000) r2 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0xfff) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1b8) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:40:09 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:40:09 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffffdfc, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:09 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 61) 11:40:09 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x0, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 41) close(r0) 11:40:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000280040001760c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2, 0x401}}, './file0\x00'}) accept4$inet6(r10, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c, 0x800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, r5, 0x604, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) recvfrom(r0, &(0x7f0000000040)=""/51, 0x33, 0x101, &(0x7f0000000080)=@isdn={0x22, 0x1, 0x8, 0x0, 0x80}, 0x80) 11:40:10 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 42) close(r0) 11:40:24 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f00000001c0)="b17d4cf8fc3591503baf5c907b2fd5d38b3a8098c2b3043119794ab783705e504f21ce4fb1244d3a323148bb85d10c85db164abd91722a40922a4fe3771251418896cd8c75e37377cdcae3887266019243fd4d81660421b83d6d23f7d84b443c26f130ff94ba7fe8ea65e498") ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:40:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) fallocate(r1, 0x2, 0x9, 0xfffffffffffffffd) 11:40:24 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xffffff8c, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 62) 11:40:24 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x0, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setuid(r4) sendmsg$nl_xfrm(r2, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f0000000080)=@expire={0x1248, 0x18, 0x200, 0x70bd26, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in=@private=0xa010102, 0x4e24, 0x0, 0x4e21, 0x3, 0xa, 0x80, 0xb0, 0x29, 0x0, r4}, {@in6=@mcast1, 0x4d3, 0xff}, @in6=@remote, {0x3, 0xb3a, 0x4, 0x1, 0x80, 0x5, 0x7, 0x80000000}, {0x1f3b, 0x3, 0x4a, 0x6}, {0x10000, 0x8, 0x4}, 0x70bd26, 0x3501, 0xa, 0x3, 0xaf, 0x1b}, 0xf1}, [@tmpl={0x104, 0x5, [{{@in6=@empty, 0x4d2, 0x33}, 0x2, @in6=@local, 0x34ff, 0x4, 0x1, 0xff, 0xffffffb7, 0x9, 0x9}, {{@in6=@local, 0x4d3, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x1, 0x3, 0x0, 0x5, 0x4, 0x6}, {{@in6=@empty, 0x4d4, 0x2b}, 0x2, @in=@broadcast, 0x3500, 0x1, 0x0, 0x1, 0x9, 0x9, 0x184ddd36}, {{@in=@multicast2, 0x4d5, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3501, 0x2, 0x2, 0x8, 0x3ff, 0x1f, 0x401}]}, @algo_aead={0x104c, 0x12, {{'gcm(xeta)\x00'}, 0x8000, 0x100, "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"}}]}, 0x1248}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 11:40:24 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffffff6, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:24 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r2 = dup(r1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:40:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 43) close(r0) 11:40:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) fcntl$dupfd(r0, 0x0, r0) [ 1585.512148] Bluetooth: hci1: HCI_REQ-0x0401 11:40:24 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x0, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 63) 11:40:24 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x1, @remote, 0x9}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x84, 0x4, 0x3, 0x1f, 0x0, 0x81, 0x28040, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1d0f, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0xa0, 0x5, 0x1, 0xe, 0x7, 0x0, 0xbdcc, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x6, r3, 0x1) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup(r5) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) clone3(&(0x7f00000004c0)={0x118400, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x34}, &(0x7f00000002c0)=""/163, 0xa3, &(0x7f0000000380)=""/219, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r6}}, 0x58) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000540)=r8) ioctl$CDROMEJECT_SW(r7, 0x530f, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x7, 0x3, 0x4, 0x6, 0x0, 0x0, 0x7060a, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_bp={&(0x7f0000000580), 0x2}, 0x8000, 0x3, 0xf380, 0x5, 0x1000, 0x6, 0xfffc, 0x0, 0xfffffff8, 0x0, 0xffff}, 0xffffffffffffffff, 0x10, r4, 0x8) [ 1585.615105] FAULT_INJECTION: forcing a failure. [ 1585.615105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.616832] CPU: 1 PID: 8437 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1585.617932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.619041] Call Trace: [ 1585.619405] [ 1585.619730] dump_stack_lvl+0x8b/0xb3 [ 1585.620276] should_fail.cold+0x5/0xa [ 1585.620841] copyin+0x19/0x120 [ 1585.621306] copy_page_from_iter_atomic+0x249/0x1290 [ 1585.622027] ? ext4_da_write_begin+0x63a/0x9a0 [ 1585.622674] ? hash_and_copy_to_iter+0x210/0x210 [ 1585.623346] ? ext4_write_begin+0x14d0/0x14d0 [ 1585.624005] generic_perform_write+0x2cb/0x580 [ 1585.624680] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1585.625417] ? discard_new_inode+0x190/0x190 [ 1585.625982] ? down_write_killable_nested+0x260/0x260 [ 1585.626729] ext4_buffered_write_iter+0x164/0x460 [ 1585.627402] ext4_file_write_iter+0x3fb/0x1900 [ 1585.628056] ? lock_release+0x750/0x750 [ 1585.628649] ? ext4_file_mmap+0x250/0x250 [ 1585.629237] ? lock_is_held_type+0xd7/0x130 [ 1585.629855] vfs_write+0x9c3/0xd90 [ 1585.630381] ? kernel_write+0x630/0x630 [ 1585.630961] ? __fget_files+0x270/0x450 [ 1585.631554] ksys_write+0x127/0x250 [ 1585.632044] ? __ia32_sys_read+0xb0/0xb0 [ 1585.632630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.633344] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.633711] FAULT_INJECTION: forcing a failure. [ 1585.633711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1585.634059] do_syscall_64+0x3b/0x90 [ 1585.635549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1585.636268] RIP: 0033:0x7fb922919b19 [ 1585.636793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.639217] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.640251] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1585.641236] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1585.642208] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.643171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.644133] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1585.645148] [ 1585.645485] CPU: 0 PID: 8443 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1585.646172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1585.646883] Call Trace: [ 1585.647108] [ 1585.647311] dump_stack_lvl+0x8b/0xb3 [ 1585.647658] should_fail.cold+0x5/0xa [ 1585.648011] copyin+0x19/0x120 [ 1585.648302] copy_page_from_iter_atomic+0x249/0x1290 [ 1585.648765] ? ext4_da_write_begin+0x63a/0x9a0 [ 1585.649164] ? hash_and_copy_to_iter+0x210/0x210 [ 1585.649585] ? ext4_write_begin+0x14d0/0x14d0 [ 1585.650003] generic_perform_write+0x2cb/0x580 [ 1585.650428] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1585.650879] ? discard_new_inode+0x190/0x190 [ 1585.651265] ? down_write_killable_nested+0x260/0x260 [ 1585.651736] ext4_buffered_write_iter+0x164/0x460 [ 1585.652163] ext4_file_write_iter+0x3fb/0x1900 [ 1585.652576] ? lock_release+0x750/0x750 [ 1585.652933] ? ext4_file_mmap+0x250/0x250 [ 1585.653309] ? lock_is_held_type+0xd7/0x130 [ 1585.653697] vfs_write+0x9c3/0xd90 [ 1585.654014] ? kernel_write+0x630/0x630 [ 1585.654359] ? __fget_files+0x270/0x450 [ 1585.654732] ksys_write+0x127/0x250 [ 1585.655064] ? __ia32_sys_read+0xb0/0xb0 [ 1585.655417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.655859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1585.656203] do_syscall_64+0x3b/0x90 [ 1585.656516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1585.656849] RIP: 0033:0x7f15cfaa8b19 [ 1585.657157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1585.658659] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1585.659300] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1585.659906] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1585.660517] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1585.661137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1585.661741] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1585.662364] 11:40:24 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffffffe, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:24 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x0, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r2) write$bt_hci(r2, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000), 0x0) 11:40:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) r1 = dup(r0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)) 11:40:24 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x1000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 44) close(r0) 11:40:24 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 64) 11:40:24 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x0, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1586.005859] FAULT_INJECTION: forcing a failure. [ 1586.005859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.007207] CPU: 0 PID: 8475 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1586.007850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1586.008634] Call Trace: [ 1586.008867] [ 1586.009077] dump_stack_lvl+0x8b/0xb3 [ 1586.009425] should_fail.cold+0x5/0xa [ 1586.009764] copyin+0x19/0x120 [ 1586.010058] copy_page_from_iter_atomic+0x249/0x1290 [ 1586.010502] ? ext4_da_write_begin+0x63a/0x9a0 [ 1586.010914] ? hash_and_copy_to_iter+0x210/0x210 [ 1586.011339] ? ext4_write_begin+0x14d0/0x14d0 [ 1586.011753] generic_perform_write+0x2cb/0x580 [ 1586.012171] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1586.012626] ? discard_new_inode+0x190/0x190 [ 1586.013018] ? down_write_killable_nested+0x260/0x260 [ 1586.013379] ext4_buffered_write_iter+0x164/0x460 [ 1586.013793] ext4_file_write_iter+0x3fb/0x1900 [ 1586.014201] ? lock_release+0x750/0x750 [ 1586.014556] ? ext4_file_mmap+0x250/0x250 [ 1586.014925] ? lock_is_held_type+0xd7/0x130 [ 1586.015300] vfs_write+0x9c3/0xd90 [ 1586.015627] ? kernel_write+0x630/0x630 [ 1586.015978] ? __fget_files+0x270/0x450 [ 1586.016352] ksys_write+0x127/0x250 [ 1586.016692] ? __ia32_sys_read+0xb0/0xb0 [ 1586.017041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1586.017494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1586.017956] do_syscall_64+0x3b/0x90 [ 1586.018277] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1586.018720] RIP: 0033:0x7fb922919b19 [ 1586.019047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1586.020571] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1586.021222] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1586.021833] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1586.022435] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1586.023050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1586.023660] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1586.024293] [ 1587.560184] Bluetooth: hci1: command 0x0401 tx timeout 11:40:40 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 65) 11:40:40 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r2 = dup(r1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:40:40 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x0, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:40 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:40 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x101000}, 0x18) r1 = syz_mount_image$tmpfs(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x2c, 0x36, 0x2d, 0x35]}}}}]}) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000000)) r4 = mq_open(&(0x7f0000000000)='@%', 0xc1, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000500)={{}, r5, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) write$P9_RREADLINK(r2, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000140)=r5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001500)=ANY=[@ANYBLOB="0100e9ff000000000600000070ab26d2572b2eb0532ed98c4e22d1f0578679ff7ec78205b3cbdc03166292e8ab40f4b4188ed29799837546c66443834787aaf5f7c1d24f203ee56f93116738a228c69d104ee22cd1ad825563627bfe735d53d2727abdefe38e10bb8828e3b134b06b7e00cfbd4b2729b2e4a46aa234ad117abf40551ba9e3cef43ca6fd6e76305cb74fe45e165f58ef0f06041aebb7b41a1b566aefda4e3bfd7051272b14bf6c159a2ae7fa9b320b4af7153bab211b90b788f5a548b1e8beefde3e5566d24d9fe531d5fe98336de2958d901de6b19ea2d25d48672d841cb964c8d2606af3123eea66e3285712456c2faf3abb398eb9f57fb782198479af0a4c55baed650847f77567c182164349712f8082d57bfff17bccbc6937f35f6b6e2a938393fa445dd6ced5fea55da7c3d460996a2dbade4fbb3a3d6c3bb6846dab9b9fac9d083816a84aaf2fb78e16877cc5e245b084c346d0f423dc8380f65f53835f297c39", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653000"]) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000200)={0xc, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'wlc\x00', 0x1c, 0x5, 0x13}, 0x2c) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) 11:40:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 45) close(r0) 11:40:40 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x8000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:40 executing program 6: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x3ff, 0x0) [ 1601.444414] Bluetooth: hci1: HCI_REQ-0x0401 [ 1601.479995] tmpfs: Bad value for 'mpol' [ 1601.498243] tmpfs: Bad value for 'mpol' 11:40:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) ioctl$DVD_AUTH(0xffffffffffffffff, 0x5390, &(0x7f0000000040)=@hsc={0x1, 0x1, "159511f5bbfc2d87e269"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:40:40 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xf0ffffffffffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1603.496096] Bluetooth: hci1: command 0x0401 tx timeout 11:40:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 66) 11:40:55 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:40:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:40:55 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x9c97, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x22) sendfile(r1, r2, &(0x7f0000000080)=0x6, 0x1400000000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r1, 0x6d4, 0x0, 0x1f}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 11:40:55 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x0, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 46) close(r0) 11:40:55 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x100000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1616.877424] Bluetooth: hci1: HCI_REQ-0x0401 11:40:55 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x200000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:40:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 67) 11:40:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/4096, &(0x7f0000000000)=0x1000) 11:40:56 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x0, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:40:56 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1618.920174] Bluetooth: hci1: command 0x0401 tx timeout 11:41:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000040)=""/179, 0xb3}, {&(0x7f0000000140)=""/80, 0x50}], 0x3, &(0x7f0000000200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}], 0x1, 0x62, &(0x7f00000003c0)={r1, r2+60000000}) shutdown(r3, 0x0) 11:41:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 47) close(r0) 11:41:12 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:41:12 executing program 1: socket$inet6(0xa, 0x1, 0x0) 11:41:12 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 68) 11:41:12 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x0, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:12 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x300000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:41:12 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) [ 1633.208586] FAULT_INJECTION: forcing a failure. [ 1633.208586] name fail_usercopy, interval 1, probability 0, space 0, times 0 11:41:12 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x0, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1633.210242] CPU: 0 PID: 8564 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1633.211393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1633.212446] Call Trace: [ 1633.212795] [ 1633.213103] dump_stack_lvl+0x8b/0xb3 [ 1633.213643] should_fail.cold+0x5/0xa [ 1633.214178] copyin+0x19/0x120 [ 1633.214628] copy_page_from_iter_atomic+0x249/0x1290 [ 1633.215320] ? ext4_da_write_begin+0x63a/0x9a0 [ 1633.215953] ? hash_and_copy_to_iter+0x210/0x210 [ 1633.216600] ? ext4_write_begin+0x14d0/0x14d0 [ 1633.217254] generic_perform_write+0x2cb/0x580 [ 1633.217904] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1633.218607] ? discard_new_inode+0x190/0x190 [ 1633.219197] ? down_write_killable_nested+0x260/0x260 [ 1633.219919] ext4_buffered_write_iter+0x164/0x460 [ 1633.220580] ext4_file_write_iter+0x3fb/0x1900 [ 1633.221217] ? lock_release+0x750/0x750 [ 1633.221775] ? ext4_file_mmap+0x250/0x250 [ 1633.222361] ? lock_is_held_type+0xd7/0x130 [ 1633.222971] vfs_write+0x9c3/0xd90 [ 1633.223488] ? kernel_write+0x630/0x630 [ 1633.224060] ? __fget_files+0x270/0x450 [ 1633.224652] ksys_write+0x127/0x250 [ 1633.225170] ? __ia32_sys_read+0xb0/0xb0 [ 1633.225767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1633.226479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1633.227200] do_syscall_64+0x3b/0x90 [ 1633.227721] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1633.228429] RIP: 0033:0x7f15cfaa8b19 [ 1633.228940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.231328] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1633.232335] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1633.233286] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1633.234237] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.235184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1633.236124] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1633.237107] 11:41:12 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:41:12 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:41:12 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x25c982, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x4c, &(0x7f0000000040)="51cf6ad2bf2769c550934b115ce324aa67b6235bb19b56b5c2d1d690e09e173d40617b9c1cb4242d304f016102f7bfd245f9887ff0d33d61577cc406d35a8373b7ad7c65fefded624e331a1b", 0x15d, 0x0, &(0x7f00000003c0)="5820fc8219e69e93d8d7cef511cf8894124438369b4d422cb85582c2531b94c0f65f417143c5ca539eec967f041d747df27b9a2760b60d24260d1503000000000000362990a7c977d9bd45d7982f03401079eef0dca1e9a536130e319e3c7b54962c9f0007852ed62df1583e9be584a356c9c75f046ebb96b94d607b30862957b8c9e86a349f056500600978e914af8c7dc0b86c9b24d98ee81a372996be1a33abcb66c25900000000040072f583037c5372486ee57aeada39864c36ce168c276d5816284a4d39be98f1a154a3d714ceb4868e067f52f2cd6a1961d1477a885d9039bfa5a3ce1ae3f14dc803ae90e91fb60e5247ded3a4033d660bfaec8389b641559f671b2c8808f5a1e5affa3edce44b150a569dc23c589737a50d0295e8bd8599e373a2198eb87c9b1229025e6b6a3e09d6c2119fc8e146b417889874db4936e78ad1659c8a956c84f7874968cbfadfccdac41cad555b9d0ae062e4"}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x4, 0x19, 0x2, 0x27, "d13eb21b8b3103fece46e107ca2bfdad7716c703aec0603b9af9773ea2e1eed5"}) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:41:12 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x400000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1633.417291] Bluetooth: hci1: HCI_REQ-0x0401 [ 1635.432217] Bluetooth: hci1: command 0x0401 tx timeout 11:41:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 69) 11:41:29 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x0, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:29 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:41:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x500000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:41:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x8840) r4 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r6, 0x530f, 0x1) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r7, 0x530f, 0x1) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000640)={{r7}, "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"}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r8 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r8, 0x0, 0x2, 0x0, &(0x7f0000000000)) r9 = syz_open_dev$vcsn(&(0x7f0000000280), 0x3, 0x10100) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x4e20, 0x800, @private0, 0x800}}, {{0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}}, 0x108) 11:41:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 48) close(r0) 11:41:29 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x0, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x81df, 0x2, 0x3, 0x0, 0x78, 0x9}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1abfdece) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100), 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) shutdown(r1, 0x1) [ 1650.409712] Bluetooth: hci1: HCI_REQ-0x0401 [ 1650.434215] FAULT_INJECTION: forcing a failure. [ 1650.434215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.435155] CPU: 1 PID: 8604 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1650.435667] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.436201] Call Trace: [ 1650.436377] [ 1650.436536] dump_stack_lvl+0x8b/0xb3 [ 1650.436803] should_fail.cold+0x5/0xa [ 1650.437082] copyin+0x19/0x120 [ 1650.437317] copy_page_from_iter_atomic+0x249/0x1290 [ 1650.437681] ? ext4_da_write_begin+0x63a/0x9a0 [ 1650.437999] ? hash_and_copy_to_iter+0x210/0x210 [ 1650.438322] ? ext4_write_begin+0x14d0/0x14d0 [ 1650.438644] generic_perform_write+0x2cb/0x580 [ 1650.438969] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1650.439324] ? discard_new_inode+0x190/0x190 [ 1650.439659] ? down_write_killable_nested+0x260/0x260 [ 1650.440128] ext4_buffered_write_iter+0x164/0x460 [ 1650.440456] ext4_file_write_iter+0x3fb/0x1900 [ 1650.440781] ? lock_release+0x750/0x750 [ 1650.441059] ? ext4_file_mmap+0x250/0x250 [ 1650.441346] ? lock_is_held_type+0xd7/0x130 [ 1650.441653] vfs_write+0x9c3/0xd90 [ 1650.441913] ? kernel_write+0x630/0x630 [ 1650.442201] ? __fget_files+0x270/0x450 [ 1650.442493] ksys_write+0x127/0x250 [ 1650.442756] ? __ia32_sys_read+0xb0/0xb0 [ 1650.443038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.443387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.443737] do_syscall_64+0x3b/0x90 [ 1650.443994] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1650.444365] RIP: 0033:0x7fb922919b19 [ 1650.444622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.445862] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1650.446400] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1650.446886] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1650.447378] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.447864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.448354] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1650.448859] 11:41:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) write$binfmt_aout(r1, &(0x7f0000000140)={{0x107, 0x4, 0x0, 0x158, 0x19f, 0x7, 0x3c59, 0x5}, "edeef8f8335e1e312a085b7808e7b1d8a9d6c45b5357762e4a5d2b740abc1e0b9209aed6459b96fac9d26b48caa882fe680c3f83a93eb7b09c05002c715b6946e050e88d8f1ad8", ['\x00', '\x00']}, 0xffffffffffffffdd) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001400)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT=r1]) ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000080)={0x7, 0x97, 0x1, 0x13, 0xff, 0x8}) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x100000000, 0x400000) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000003c0)={{r1}, "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"}) 11:41:29 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5, 0x6}}, './file0\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000000c0)={0x4e4, {{0xa, 0x4e24, 0x7ff, @private1, 0x7}}, {{0xa, 0x4e21, 0x5, @remote, 0xffffffe1}}}, 0x108) 11:41:29 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x600000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:41:29 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = fork() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x1258, 0x31, 0x300, 0x70bd2b, 0x25dfdbfd, {0x11}, [@nested={0x30, 0x91, 0x0, 0x1, [@typed={0x1b, 0x44, 0x0, 0x0, @binary="343038ca611c9c60ccd64fa08bf005af835c2ada9517b5"}, @typed={0x8, 0x73, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x100}]}, @generic="1a6f7402a4efc310bdecd931bf4ddd66e5e40834b3c5ac3cbedba106c0f356fa319169b5492587a9c7345763b1fddb5940351eca631dacc8f57dca91826dd294c23ed198d19fc731a8a3c0e8aa86e2fbd2332fa5fc3101de80483919ded9a202855eeceb85c02872d51840f3e428fa2037a8944f609a9322f0186bae6d50ceaf077a502408397363c921cb274bf5b4a0a1545e25f7a5147377ef92f7e593c70401be83061e487dc5b55da025ecbf2b5fc0cf8d4dea96119f2237213145abb6527f5da8e84168a5debe8e5613e861274eb971c80e1b170415cb13c798", @generic="b2db3fb6ef4b5e37ea94ef4c76", @typed={0x8, 0x2, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0x7}, @nested={0x1114, 0x2f, 0x0, 0x1, [@typed={0xf7, 0x2c, 0x0, 0x0, @binary="47bcd55d5784a3bed386db726566ffc145767b605635327ba3e959d56bea5d739799c00b7db9773b91a2912929175b77691893b995009096318e205b985b41cd8cd14f7d8b08f727dae7551593d86e0834b20f16ca100e9088870a0e8db0b59b8dd8a0669c05a30bd8595e80379bc84525c4976a5fd6953666b5894f5cded1e4f097da1cab3f56aca61491dbe661aa7ad95e4c58543837ea931f790bcc530541890110e6cbeb55fe511ea6f938e4d29914fba2e616e2c0d73eb3897d93c8747c79af0397dfc3b7cc1498f9cb52ee8fc45127776d2cf3e04589cdf54171b8d9a09a9599520a008520baef360b6cea44fa68c7e3"}, @typed={0xc, 0x8f, 0x0, 0x0, @u64=0x6}, @generic="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", @typed={0xc, 0x56, 0x0, 0x0, @u64=0x1}]}]}, 0x1258}}, 0x8000084) 11:41:29 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 70) 11:41:29 executing program 1: ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000040)={{}, "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"}) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001100)={{r0}, "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"}) fadvise64(r1, 0x0, 0xfffffffffffffff8, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000001040)={'raw\x00', 0x0, [0x6, 0x98be, 0x0, 0x3, 0x9]}, &(0x7f00000010c0)=0x54) 11:41:29 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0x0, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 49) close(r0) 11:41:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x401, 0x40400) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={r2, r3, 0x8}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r5, 0x87d27e71721737b5, 0x0, 0x0, {{0x2}, {@void, @val={0x8}, @val={0xc, 0x135}}}}, 0x28}}, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) [ 1650.939781] FAULT_INJECTION: forcing a failure. [ 1650.939781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1650.941445] CPU: 0 PID: 8644 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1650.942434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1650.943494] Call Trace: [ 1650.943846] [ 1650.944146] dump_stack_lvl+0x8b/0xb3 [ 1650.944649] should_fail.cold+0x5/0xa [ 1650.945175] copyin+0x19/0x120 [ 1650.945616] copy_page_from_iter_atomic+0x249/0x1290 [ 1650.946276] ? ext4_da_write_begin+0x63a/0x9a0 [ 1650.946879] ? hash_and_copy_to_iter+0x210/0x210 [ 1650.947494] ? ext4_write_begin+0x14d0/0x14d0 [ 1650.948102] generic_perform_write+0x2cb/0x580 [ 1650.948720] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1650.949391] ? discard_new_inode+0x190/0x190 [ 1650.949960] ? down_write_killable_nested+0x260/0x260 [ 1650.950652] ext4_buffered_write_iter+0x164/0x460 [ 1650.951284] ext4_file_write_iter+0x3fb/0x1900 [ 1650.951888] ? lock_release+0x750/0x750 [ 1650.952415] ? ext4_file_mmap+0x250/0x250 [ 1650.952969] ? lock_is_held_type+0xd7/0x130 [ 1650.953579] vfs_write+0x9c3/0xd90 [ 1650.954066] ? kernel_write+0x630/0x630 [ 1650.954600] ? __fget_files+0x270/0x450 [ 1650.955169] ksys_write+0x127/0x250 [ 1650.955658] ? __ia32_sys_read+0xb0/0xb0 [ 1650.956197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.956853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1650.957524] do_syscall_64+0x3b/0x90 [ 1650.958014] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1650.958673] RIP: 0033:0x7fb922919b19 [ 1650.959153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1650.961384] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1650.962360] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1650.963248] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1650.964132] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1650.965017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1650.965964] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1650.966937] [ 1652.456151] Bluetooth: hci1: command 0x0401 tx timeout 11:41:45 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:41:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 50) close(r0) 11:41:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x700000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:41:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 71) 11:41:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x7f) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:41:45 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:45 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="017a0c01380cd1684f7f00"], 0x5) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0xfde, 0x0) 11:41:45 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0x0, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1666.660804] Bluetooth: hci1: HCI_REQ-0x0401 11:41:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400880, 0x120) close_range(r0, r0, 0x2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 11:41:45 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0x0, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:45 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x1800000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:41:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 72) 11:41:45 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:41:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 51) close(r0) 11:41:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 73) [ 1666.989927] FAULT_INJECTION: forcing a failure. [ 1666.989927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.990835] CPU: 1 PID: 8695 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1666.991357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1666.991899] Call Trace: [ 1666.992079] [ 1666.992247] dump_stack_lvl+0x8b/0xb3 [ 1666.992519] should_fail.cold+0x5/0xa [ 1666.992797] copyin+0x19/0x120 [ 1666.993027] copy_page_from_iter_atomic+0x249/0x1290 [ 1666.993384] ? ext4_da_write_begin+0x63a/0x9a0 [ 1666.993719] ? hash_and_copy_to_iter+0x210/0x210 [ 1666.994054] ? ext4_write_begin+0x14d0/0x14d0 [ 1666.994392] generic_perform_write+0x2cb/0x580 [ 1666.994729] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1666.995091] ? discard_new_inode+0x190/0x190 [ 1666.995403] ? down_write_killable_nested+0x260/0x260 [ 1666.995781] ext4_buffered_write_iter+0x164/0x460 [ 1666.996194] ext4_file_write_iter+0x3fb/0x1900 [ 1666.996667] ? lock_release+0x750/0x750 [ 1666.996951] ? ext4_file_mmap+0x250/0x250 [ 1666.997241] ? lock_is_held_type+0xd7/0x130 [ 1666.997578] vfs_write+0x9c3/0xd90 [ 1666.997910] ? kernel_write+0x630/0x630 [ 1666.998338] ? __fget_files+0x270/0x450 [ 1666.998688] ksys_write+0x127/0x250 [ 1666.999018] ? __ia32_sys_read+0xb0/0xb0 [ 1666.999305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1666.999674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1667.000032] do_syscall_64+0x3b/0x90 [ 1667.000307] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1667.000692] RIP: 0033:0x7f15cfaa8b19 [ 1667.000966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.002253] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1667.002799] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1667.003307] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1667.003813] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.004328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1667.004832] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1667.005365] [ 1668.712153] Bluetooth: hci1: command 0x0401 tx timeout 11:42:02 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:42:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x2, 0x3e) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0xfffc, 0x0) 11:42:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 74) 11:42:02 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x0, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:02 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6600000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 52) close(r0) 11:42:02 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:02 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r2, 0x200, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r1) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x10100, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="3f9c3f08dc854e65365371b6b88893e2b5451507692c64bccfb08d4fce1e44b33dbefa42cc8ee464071aba92d9ee83852454c7b7a638ce2f0863e46b6367a66622ce03ca5b691d50363cd46520311c86aa97b6043dc0a86308cfaa98dbc11677ab67a4dd716335ceaa21014b493631ac896955cf7f134a1edd88d95ce57522c5bffe094bc2634a61adfbe8fbd738322abf365d9d6988d4223787e9e7cbd0b639f04907989c73fbd2ac0e5192b9ceb1d2f554527b57", 0xb5}], 0x1, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}, 0x4000810) getsockopt$bt_hci(r5, 0x0, 0x1, 0x0, &(0x7f0000000000)) 11:42:02 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:42:02 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 75) 11:42:03 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:03 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x6c01000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:03 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x0, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="1d50fda83ddc55d96a85cd41cb9c6f4cd7686b2ae7fbe485d75564738356eaeb876b2d72ce86e480737962c338151bd5368795e9976b6aa0b73e8268541a2204de37d6f625cdb65036b06088d1a2afec7e56fba4e12636e2c6c03ed36cbcbd4fb49d121ca80cecba8d004e0feb891d535e7c221b70e35956c9ba51fbc8bd2b4d317c55f9a2388298cc88d3813d28f777e3f243c49695ccee8b3eef3a05edde02d57fde98d519d8bff031a4e1c40bb1") r2 = accept4(r1, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80, 0x0) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)="eb5bfda2d3eaaa444ddca04cf76fa3c87bbcc22d197fa045a956e72412ef51dcb53824616dd93942132824d24851412115d78591e575814ed73ff117e1540ed4d5922c6cd41251058a3291fb13a318096f261f1128f28cececea85ccda0d07e2bc88c18506819da292cf9ef5f46853173846c60f2b1226cb4b60983ba5ad33a82ed8dcaeb05c4e5eda87b8852ff31d763969feda64eb2271fcc9", 0x9a}, {&(0x7f0000000340)="09afd5befd5532381f7d41a06aa99878bb01a4aaf0d7960d6fadaa822fe2f4bcc5a1648d8b23f3218ae3ef4696f2ac26c43a9b15f297695187a2271de53bb3429b5d7d91d519249c4237c763434a1307276c75eecb2a248e56df385e9f79c04126800cb5f03759812d79af71fdcfce7ba652c1ae1fa5d58cf5a369019fb24f57f1d62d4a6b59bae3de078bd3a87f6206a75397b9e2e8", 0x96}, {&(0x7f0000000400)="3822a911d45dbd7e0c20dfb152eafc9b2225058c160892fcf0b43952b4e1035eda0bb5bb527ff29504bd623d179efd663212338298c32641bb633c368a63f4b86622433131da8e7e844141c7c87aed99744c446925bc9ba7fc5d574c28d956ee38a338440c86c7fb908dc210d169054ce606f7d31e4ce31a6099c1466883a506a661c214e30b5bb0d01c7ae0776c7fa4db184a3a6d655c10dfc4686bc2faea4758993f7c465235f866ea889349930e33aed809e3a57a86ae571acd45732c40454f2481f1439822f3b18ac94c484c3fff3939", 0xd2}, {&(0x7f0000000500)="cbbc09e3ab59e76d8c532466fb483d86a350b9cf49399112e89a228b70578ddea18a5cdfb42f20ea3753b9f8e04ac4da2444cab3058dc3eb766cbb3bcaf07cac1b3533e4852747ddd12e1ccb2a4d88e4ea23f097dc0f37f487cb", 0x5a}, {&(0x7f0000000580)="e855084aee965e807a246a311e9eacdc691ba6abb3771d719b6097f83c2dfa7a4a67037a2bcfa09a", 0x28}, {&(0x7f00000005c0)="adf06fe84c8b35800610a97bd1f084b8fceca7f3c3d6c9401f29df05ffb3e122f95c9139d2f17ca0f85aebfc1d2282cb6f0442a93831600ad874aec7096340f0a37fa66f2678e376131290b90e9c4419735638a63320f80176", 0x59}], 0x6, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xd3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}, 0x94) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:42:03 executing program 7: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:42:03 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 53) close(r0) 11:42:03 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) [ 1684.497737] FAULT_INJECTION: forcing a failure. [ 1684.497737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1684.499546] CPU: 0 PID: 8745 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1684.500446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.501376] Call Trace: [ 1684.501685] [ 1684.501982] dump_stack_lvl+0x8b/0xb3 [ 1684.502454] should_fail.cold+0x5/0xa [ 1684.502932] copyin+0x19/0x120 [ 1684.503339] copy_page_from_iter_atomic+0x249/0x1290 [ 1684.503956] ? ext4_da_write_begin+0x63a/0x9a0 [ 1684.504518] ? hash_and_copy_to_iter+0x210/0x210 [ 1684.505094] ? ext4_write_begin+0x14d0/0x14d0 [ 1684.505661] generic_perform_write+0x2cb/0x580 [ 1684.506248] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1684.506869] ? discard_new_inode+0x190/0x190 [ 1684.507443] ? down_write_killable_nested+0x260/0x260 [ 1684.508139] ext4_buffered_write_iter+0x164/0x460 [ 1684.508793] ext4_file_write_iter+0x3fb/0x1900 [ 1684.509429] ? lock_release+0x750/0x750 [ 1684.509990] ? ext4_file_mmap+0x250/0x250 [ 1684.510531] ? lock_is_held_type+0xd7/0x130 [ 1684.511112] vfs_write+0x9c3/0xd90 [ 1684.511611] ? kernel_write+0x630/0x630 [ 1684.512145] ? __fget_files+0x270/0x450 [ 1684.512715] ksys_write+0x127/0x250 [ 1684.513223] ? __ia32_sys_read+0xb0/0xb0 [ 1684.513797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.514462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1684.515132] do_syscall_64+0x3b/0x90 [ 1684.515633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1684.516346] RIP: 0033:0x7fb922919b19 [ 1684.516834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.519092] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1684.520037] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1684.520976] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1684.521890] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.522838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.523765] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1684.524716] 11:42:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 76) 11:42:20 executing program 1: ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000180)) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000040)={0x1000, {{0xa, 0x4e24, 0x81, @remote, 0x1ff}}, {{0xa, 0x4e23, 0x80002000, @remote, 0x1}}}, 0x108) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:42:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x9, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) accept(r1, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) 11:42:20 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:42:20 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x0, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:20 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x8004000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 54) close(r0) 11:42:20 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x8cffffff00000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:20 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 77) 11:42:20 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x1, 0x3ff, "bb920f", 0x3, 0x7}) 11:42:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 55) close(r0) 11:42:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x4802, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000040)="2e0bac66059c9e7c7ec290899d4dbedb0450abc63c22b60624b8b1de4bacac91b9f1ae2b1ec0088d4f61345fd4657e4c18ce0849bb95373a67fb84707c1dfb0adbadf7d37ea8426a60e1051107687782f1cc5cb04b76da2f3c613ea2", 0x5c) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:42:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0xfb, 0x47, 0x5, 0x0, "6a42671e50a9931052a14ccb1aa9fe22", "e803a9b8df1c7ac1c71951e628a0df25cf1c6af99b441cc38189f7fe5c3775833e1ffd07bdb3a8282b80711bf93eef598496"}, 0x47, 0x2) 11:42:20 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x0, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:20 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x0, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x80000000) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:42:36 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x0, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x0, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) 11:42:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 78) 11:42:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 56) close(r0) 11:42:36 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x1, 0x4, "9b8a6a", 0x2, 0x9}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:42:36 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xb601000000000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1717.484438] Bluetooth: hci1: HCI_REQ-0x0401 [ 1717.518946] FAULT_INJECTION: forcing a failure. [ 1717.518946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1717.520622] CPU: 1 PID: 8813 Comm: syz-executor.4 Not tainted 6.0.0-next-20221011 #1 [ 1717.521641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1717.522730] Call Trace: [ 1717.523090] [ 1717.523407] dump_stack_lvl+0x8b/0xb3 [ 1717.523937] should_fail.cold+0x5/0xa [ 1717.524485] copyin+0x19/0x120 [ 1717.524945] copy_page_from_iter_atomic+0x249/0x1290 [ 1717.525638] ? ext4_da_write_begin+0x63a/0x9a0 [ 1717.526296] ? hash_and_copy_to_iter+0x210/0x210 [ 1717.527004] ? ext4_write_begin+0x14d0/0x14d0 [ 1717.527692] generic_perform_write+0x2cb/0x580 [ 1717.528356] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1717.529082] ? discard_new_inode+0x190/0x190 [ 1717.529687] ? down_write_killable_nested+0x260/0x260 [ 1717.530417] ext4_buffered_write_iter+0x164/0x460 [ 1717.531082] ext4_file_write_iter+0x3fb/0x1900 [ 1717.531725] ? lock_release+0x750/0x750 [ 1717.532293] ? ext4_file_mmap+0x250/0x250 [ 1717.532873] ? lock_is_held_type+0xd7/0x130 [ 1717.533479] vfs_write+0x9c3/0xd90 [ 1717.533995] ? kernel_write+0x630/0x630 [ 1717.534589] ? __fget_files+0x270/0x450 [ 1717.535171] ksys_write+0x127/0x250 [ 1717.535686] ? __ia32_sys_read+0xb0/0xb0 [ 1717.536266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.536959] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1717.537661] do_syscall_64+0x3b/0x90 [ 1717.538171] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1717.538885] RIP: 0033:0x7f15cfaa8b19 [ 1717.539404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1717.541825] RSP: 002b:00007f15cd01e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1717.542865] RAX: ffffffffffffffda RBX: 00007f15cfbbbf60 RCX: 00007f15cfaa8b19 [ 1717.543830] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000004 [ 1717.544797] RBP: 00007f15cd01e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1717.545756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1717.546764] R13: 00007ffe0e9ca1df R14: 00007f15cd01e300 R15: 0000000000022000 [ 1717.547765] 11:42:36 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r0, 0x0, 0x6c84, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000001e40), 0x9cbacb02f4ecc735, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000002700)={@private0={0xfc, 0x0, '\x00', 0x1}, r6}, 0x14) socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000040)={0x9, {{0xa, 0x4e22, 0x1ff, @mcast2, 0x2c}}, {{0xa, 0x4e24, 0x1, @mcast1, 0xb7}}}, 0x108) r7 = socket$inet6(0xa, 0x1, 0x0) fadvise64(r7, 0x0, 0xfffffffffffffff8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000180)) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r8, &(0x7f0000002480)=[{{&(0x7f00000001c0), 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/50, 0x32}, {&(0x7f0000000300)=""/62, 0x3e}], 0x3, &(0x7f0000000380)=""/70, 0x46}, 0x5}, {{&(0x7f0000000400)=@ethernet={0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/133, 0x85}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/75, 0x4b}, {&(0x7f0000000780)=""/36, 0x24}], 0x6, &(0x7f0000000840)=""/160, 0xa0}, 0x36}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/180, 0xb4}], 0x1, &(0x7f0000000a00)=""/99, 0x63}, 0x3ff}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/142, 0x8e}], 0x1, &(0x7f0000000b80)=""/182, 0xb6}, 0xfffffff9}, {{&(0x7f0000000c40), 0x80, &(0x7f0000001180)=[{&(0x7f0000000cc0)=""/213, 0xd5}, {&(0x7f0000000dc0)=""/249, 0xf9}, {&(0x7f0000000ec0)=""/222, 0xde}, {&(0x7f0000000fc0)=""/231, 0xe7}, {&(0x7f00000010c0)=""/186, 0xba}], 0x5, &(0x7f0000001200)=""/30, 0x1e}, 0x407d0bf2}, {{&(0x7f0000001240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000012c0)=""/87, 0x57}, {&(0x7f0000001340)=""/150, 0x96}, {&(0x7f0000001400)=""/206, 0xce}, {&(0x7f0000001500)=""/124, 0x7c}], 0x4, &(0x7f00000015c0)=""/118, 0x76}}, {{&(0x7f0000001640)=@phonet, 0x80, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/64, 0x40}, {&(0x7f0000001700)=""/66, 0x42}, {&(0x7f0000001780)=""/15, 0xf}, {&(0x7f00000017c0)=""/39, 0x27}, {&(0x7f0000001800)=""/184, 0xb8}, {&(0x7f00000018c0)=""/13, 0xd}, {&(0x7f0000001900)=""/101, 0x65}], 0x7}, 0x1}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/64, 0x40}, {&(0x7f0000001a40)=""/14, 0xe}, {&(0x7f0000001a80)=""/40, 0x28}], 0x3, &(0x7f0000001b00)=""/81, 0x51}, 0x4}, {{&(0x7f0000001b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c00)=""/143, 0x8f}, {&(0x7f0000001cc0)=""/53, 0x35}, {&(0x7f0000001d00)=""/20, 0x14}, {&(0x7f0000001d40)=""/192, 0xc0}, {&(0x7f0000001e00)=""/14, 0xe}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=""/43, 0x2b}, {&(0x7f0000001ec0)=""/136, 0x88}], 0x8, &(0x7f0000002000)=""/76, 0x4c}, 0x8}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002080)=""/209, 0xd1}, {&(0x7f0000002180)=""/165, 0xa5}, {&(0x7f0000002240)=""/166, 0xa6}, {&(0x7f0000002300)=""/40, 0x28}, {&(0x7f0000002340)=""/139, 0x8b}], 0x5}, 0x4}], 0xa, 0x12003, 0x0) 11:42:36 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xf6ffffff00000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 57) close(r0) 11:42:36 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x0, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) 11:42:36 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x0, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 79) 11:42:36 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfcfdffff00000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:36 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x0, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:36 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) 11:42:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 58) close(r0) 11:42:37 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfeffffff00000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 80) 11:42:37 executing program 6: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x3, 0x80, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x20000880) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x0) 11:42:37 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1719.528171] Bluetooth: hci1: command 0x0401 tx timeout 11:42:53 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x0, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:53 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x1, 0x0) 11:42:53 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:42:53 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x3fd) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x9, {{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x800, @local}}}, 0x108) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0xd1, 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:42:53 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x3ff, "bb920f", 0x3, 0x7}) 11:42:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 59) close(r0) 11:42:53 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfeffffffffffffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 81) [ 1734.133540] Bluetooth: hci0: HCI_REQ-0x0401 11:42:53 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xffffffff00000000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x684680, 0x104) write$bt_hci(r1, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}}}, 0x6) r2 = getpid() pread64(r1, &(0x7f0000000140)=""/239, 0xef, 0x20) pidfd_open(r2, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r2) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000100)=0x1, 0x0) [ 1734.192567] FAULT_INJECTION: forcing a failure. [ 1734.192567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1734.194371] CPU: 0 PID: 8899 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1734.195401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1734.196455] Call Trace: [ 1734.196804] [ 1734.197121] dump_stack_lvl+0x8b/0xb3 [ 1734.197647] should_fail.cold+0x5/0xa [ 1734.198185] copyin+0x19/0x120 [ 1734.198655] copy_page_from_iter_atomic+0x249/0x1290 [ 1734.199355] ? ext4_da_write_begin+0x63a/0x9a0 [ 1734.199985] ? hash_and_copy_to_iter+0x210/0x210 [ 1734.200634] ? ext4_write_begin+0x14d0/0x14d0 [ 1734.201272] generic_perform_write+0x2cb/0x580 [ 1734.201929] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1734.202660] ? discard_new_inode+0x190/0x190 [ 1734.203256] ? down_write_killable_nested+0x260/0x260 [ 1734.203984] ext4_buffered_write_iter+0x164/0x460 [ 1734.204665] ext4_file_write_iter+0x3fb/0x1900 [ 1734.205319] ? lock_release+0x750/0x750 [ 1734.205884] ? ext4_file_mmap+0x250/0x250 [ 1734.206482] ? lock_is_held_type+0xd7/0x130 [ 1734.207096] vfs_write+0x9c3/0xd90 [ 1734.207626] ? kernel_write+0x630/0x630 [ 1734.208211] ? __fget_files+0x270/0x450 [ 1734.208805] ksys_write+0x127/0x250 [ 1734.209335] ? __ia32_sys_read+0xb0/0xb0 [ 1734.209912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.210647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1734.211383] do_syscall_64+0x3b/0x90 [ 1734.211914] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1734.212642] RIP: 0033:0x7fb922919b19 [ 1734.213160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1734.215616] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1734.216645] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1734.217598] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1734.218563] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1734.219529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1734.220482] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1734.221480] 11:42:53 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffffffffffff000, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:42:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040), &(0x7f0000000080)=0x4) 11:42:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 82) 11:42:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0xc80, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000180)="428ead924d52b36829cfccbf7a1f44") write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="010df704c9000800"], 0x8) 11:42:53 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:10 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x0, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:10 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x3ff, "bb920f", 0x3, 0x7}) 11:43:10 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 83) 11:43:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:43:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) dup(r1) 11:43:10 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 60) close(r0) 11:43:10 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xfffffffffffffffe, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1752.070918] Bluetooth: hci0: HCI_REQ-0x0401 11:43:11 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:11 executing program 1: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xff}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x80) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="68800008", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf25010000000000000008410000004c00180000001f62726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x240088ca}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x5, 0x0, &(0x7f0000000000)) 11:43:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:43:26 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "bb920f", 0x3, 0x7}) 11:43:26 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 61) close(r0) 11:43:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 84) 11:43:26 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x0, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:26 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x2, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x1ba2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x3, {{0xa, 0x4e24, 0x2, @mcast2, 0x87}}, {{0xa, 0x4e21, 0x200, @private2}}}, 0x108) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000280)={0x9, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x9}}}, 0x88) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000040)) 11:43:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) clone3(&(0x7f0000000540)={0x3000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xe}, &(0x7f0000000140)=""/251, 0xfb, &(0x7f00000000c0)=""/32, &(0x7f00000002c0)=[r2, 0xffffffffffffffff, r3], 0x3, {r4}}, 0x58) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) [ 1767.474948] Bluetooth: hci0: HCI_REQ-0x0401 11:43:26 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x400c810, 0xffffffffffffffff, 0x10000000) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r1}, 0x9) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x7, 0x2, 0xffffffffffffff8f}) getsockname$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000001140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}, 0x14) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x4) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:43:26 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x0, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:26 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "bb920f", 0x0, 0x7}) 11:43:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) fchdir(r1) 11:43:41 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x3, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 62) close(r0) 11:43:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 85) 11:43:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60044804}, 0x90) 11:43:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x0, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0xa51d, 0x0) [ 1782.680193] Bluetooth: hci0: HCI_REQ-0x0401 11:43:41 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 63) close(r0) 11:43:41 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x4, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:41 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "bb920f", 0x0, 0x7}) 11:43:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$rtc(&(0x7f00000007c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x12}) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) shutdown(r0, 0x1) fcntl$dupfd(r1, 0x406, r0) 11:43:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x200, {{0xa, 0x4e23, 0x8, @local, 0x8}}, {{0xa, 0x4e24, 0x8, @mcast2, 0x7}}}, 0x108) 11:43:41 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x3, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:41 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 86) 11:43:41 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x0, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1782.852539] Bluetooth: hci0: HCI_REQ-0x0401 11:43:57 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "bb920f", 0x0, 0x7}) 11:43:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 64) close(r0) 11:43:57 executing program 1: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:43:57 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x0, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:57 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x5, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:57 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x0, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r1, &(0x7f0000000000)=@in6={0xa, 0x4e22, 0x2, @mcast2, 0xe0}, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="8100000000000000af05000000000000"]) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100), 0x0) dup3(r1, r0, 0x0) 11:43:57 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 87) [ 1798.870804] Bluetooth: hci0: HCI_REQ-0x0401 [ 1798.911365] FAULT_INJECTION: forcing a failure. [ 1798.911365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.913170] CPU: 0 PID: 9052 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1798.914188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1798.915268] Call Trace: [ 1798.915631] [ 1798.915938] dump_stack_lvl+0x8b/0xb3 [ 1798.916462] should_fail.cold+0x5/0xa [ 1798.917001] copyin+0x19/0x120 [ 1798.917442] copy_page_from_iter_atomic+0x249/0x1290 [ 1798.918248] ? ext4_da_write_begin+0x63a/0x9a0 [ 1798.918893] ? hash_and_copy_to_iter+0x210/0x210 [ 1798.919561] ? ext4_write_begin+0x14d0/0x14d0 [ 1798.920203] generic_perform_write+0x2cb/0x580 [ 1798.920846] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1798.921558] ? discard_new_inode+0x190/0x190 [ 1798.922141] ? down_write_killable_nested+0x260/0x260 [ 1798.922845] ext4_buffered_write_iter+0x164/0x460 [ 1798.923494] ext4_file_write_iter+0x3fb/0x1900 [ 1798.924114] ? lock_release+0x750/0x750 [ 1798.924652] ? ext4_file_mmap+0x250/0x250 [ 1798.925203] ? lock_is_held_type+0xd7/0x130 [ 1798.925786] vfs_write+0x9c3/0xd90 [ 1798.926284] ? kernel_write+0x630/0x630 [ 1798.926837] ? __fget_files+0x270/0x450 [ 1798.927414] ksys_write+0x127/0x250 [ 1798.927918] ? __ia32_sys_read+0xb0/0xb0 [ 1798.928464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1798.929117] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1798.929805] do_syscall_64+0x3b/0x90 [ 1798.930301] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1798.930972] RIP: 0033:0x7fb922919b19 [ 1798.931476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1798.933747] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1798.934710] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1798.935625] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1798.936523] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1798.937431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1798.938338] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1798.939272] 11:43:57 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x0, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:43:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f00000000c0)={0x3f, 0x7, 0x2, 0x7, 0x1, [0x37b2, 0x92c, 0x8c, 0x2]}) clone3(&(0x7f0000000200)={0x2030500, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0xb}, &(0x7f0000000140)=""/98, 0x62, &(0x7f00000000c0), &(0x7f00000001c0)=[0x0], 0x1, {r2}}, 0x58) fcntl$dupfd(r0, 0x406, r4) 11:43:57 executing program 1: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8, 0x7f}, {0x6, 0x8000}]}, 0x14, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000bc0), 0x10000, 0x24443) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000c00)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) ioctl$CDROMREADMODE2(r3, 0x530c, &(0x7f00000000c0)={0x1f, 0x9, 0x21, 0x12, 0xff, 0x8}) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000c40)) ioctl$CDROMEJECT_SW(r4, 0x530f, 0x1) fstat(r4, &(0x7f0000000b40)) 11:43:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "bb920f", 0x3}) 11:43:58 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 88) 11:43:58 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x0, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1799.211114] Bluetooth: hci0: HCI_REQ-0x0401 [ 1799.225761] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:43:58 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x7, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:43:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 65) close(r0) 11:43:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r1, 0x530f, 0x1) sendfile(r1, r0, &(0x7f0000000000)=0xe5, 0x0) 11:43:58 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0x0, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) [ 1799.565079] FAULT_INJECTION: forcing a failure. [ 1799.565079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.566768] CPU: 1 PID: 9089 Comm: syz-executor.5 Not tainted 6.0.0-next-20221011 #1 [ 1799.567831] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1799.568913] Call Trace: [ 1799.569267] [ 1799.569581] dump_stack_lvl+0x8b/0xb3 [ 1799.570121] should_fail.cold+0x5/0xa [ 1799.570659] copyin+0x19/0x120 [ 1799.571167] copy_page_from_iter_atomic+0x249/0x1290 [ 1799.571926] ? ext4_da_write_begin+0x63a/0x9a0 [ 1799.572566] ? hash_and_copy_to_iter+0x210/0x210 [ 1799.573233] ? ext4_write_begin+0x14d0/0x14d0 [ 1799.573901] generic_perform_write+0x2cb/0x580 [ 1799.574751] ? generic_file_readonly_mmap+0x1b0/0x1b0 [ 1799.575501] ? discard_new_inode+0x190/0x190 [ 1799.576090] ? down_write_killable_nested+0x260/0x260 [ 1799.576840] ext4_buffered_write_iter+0x164/0x460 [ 1799.577500] ext4_file_write_iter+0x3fb/0x1900 [ 1799.578136] ? lock_release+0x750/0x750 [ 1799.578681] ? ext4_file_mmap+0x250/0x250 [ 1799.579239] ? lock_is_held_type+0xd7/0x130 [ 1799.579853] vfs_write+0x9c3/0xd90 [ 1799.580351] ? kernel_write+0x630/0x630 [ 1799.580899] ? __fget_files+0x270/0x450 [ 1799.581438] ksys_write+0x127/0x250 [ 1799.581941] ? __ia32_sys_read+0xb0/0xb0 [ 1799.582488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1799.583174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1799.583880] do_syscall_64+0x3b/0x90 [ 1799.584388] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1799.585069] RIP: 0033:0x7fb922919b19 [ 1799.585572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1799.587980] RSP: 002b:00007fb91fe8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1799.588944] RAX: ffffffffffffffda RBX: 00007fb922a2cf60 RCX: 00007fb922919b19 [ 1799.589861] RDX: 0000000000041030 RSI: 0000000020000080 RDI: 0000000000000005 [ 1799.590775] RBP: 00007fb91fe8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1799.591708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1799.592634] R13: 00007fff0afc051f R14: 00007fb91fe8f300 R15: 0000000000022000 [ 1799.593591] 11:44:15 executing program 3: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000027f) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0xfffff801, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x20, 0x0, 0xe0, 0x4, 0x0, 0x7fff, 0x4020, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x3a00, 0x3, 0x7f1, 0x1, 0x4, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xd, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:44:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x81}, 0x703, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 66) close(r0) 11:44:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000080)="01", 0x41030) (fail_nth: 89) 11:44:15 executing program 6: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}}}, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r1) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="017a5c840c0100"], 0x5) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r3, 0x530f, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4c802, 0x0) ioctl$CDROMEJECT_SW(r4, 0x530f, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000000c0)=0x2) fcntl$dupfd(r3, 0x406, r4) r6 = dup(r2) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8000, 0x20280) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 11:44:15 executing program 0: syslog(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000027f) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0x1, 0x7, 0x81, 0x1, 0x0, 0x21, 0x30000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8, 0x6}, 0x1800, 0x5a, 0x6, 0x6, 0x459, 0x0, 0x5, 0x0, 0x81, 0x0, 0x6a}) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) 11:44:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 11:44:15 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8d) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)=0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) clone3(&(0x7f0000000540)={0x3000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0xe}, &(0x7f0000000140)=""/251, 0xfb, &(0x7f00000000c0)=""/32, &(0x7f00000002c0)=[r2, 0xffffffffffffffff, r3], 0x3, {r4}}, 0x58) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100), 0x0) 11:44:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)=""/130, 0x82}, {&(0x7f00000001c0)=""/98, 0x62}, {&(0x7f0000000240)=""/142, 0x8e}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/13, 0xd}], 0x9, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000103) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000780)={@mcast1, 0x34, r5}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @private2, 0x7fff}, 0x1c) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)) 11:44:15 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x18, &(0x7f0000000140), 0x1010, &(0x7f0000000180)) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 1816.652183] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 1816.687395] [ 1816.688068] ====================================================== [ 1816.688484] WARNING: possible circular locking dependency detected [ 1816.688894] 6.0.0-next-20221011 #1 Not tainted [ 1816.689197] ------------------------------------------------------ [ 1816.689579] syz-executor.6/9097 is trying to acquire lock: [ 1816.689918] ffff88800c938400 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_bmap+0x4e/0x470 [ 1816.690491] [ 1816.690491] but task is already holding lock: [ 1816.690845] ffff88800ff9a3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48b/0xc00 [ 1816.691471] [ 1816.691471] which lock already depends on the new lock. [ 1816.691471] [ 1816.691971] [ 1816.691971] the existing dependency chain (in reverse order) is: [ 1816.692424] [ 1816.692424] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 1816.692887] mutex_lock_io_nested+0x148/0x1310 [ 1816.693214] jbd2_journal_flush+0x19a/0xc00 [ 1816.693521] __ext4_ioctl+0x9e9/0x40a0 [ 1816.693805] __x64_sys_ioctl+0x19a/0x210 [ 1816.694097] do_syscall_64+0x3b/0x90 [ 1816.694363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1816.694715] [ 1816.694715] -> #2 (&journal->j_barrier){+.+.}-{3:3}: [ 1816.695125] __mutex_lock+0x136/0x14d0 [ 1816.695409] jbd2_journal_lock_updates+0x15e/0x310 [ 1816.695761] ext4_change_inode_journal_flag+0x17f/0x530 [ 1816.696133] ext4_fileattr_set+0x1427/0x18c0 [ 1816.696447] vfs_fileattr_set+0x77c/0xb80 [ 1816.696742] do_vfs_ioctl+0xfc1/0x1610 [ 1816.697026] __x64_sys_ioctl+0x10c/0x210 [ 1816.697317] do_syscall_64+0x3b/0x90 [ 1816.697579] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1816.697932] [ 1816.697932] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1816.698363] ext4_writepages+0x1d2/0x3690 [ 1816.698662] do_writepages+0x1b0/0x6a0 [ 1816.699642] filemap_fdatawrite_wbc+0x147/0x1b0 [ 1816.700606] __filemap_fdatawrite_range+0xb6/0x100 [ 1816.701936] filemap_write_and_wait_range+0x89/0x110 [ 1816.703230] __iomap_dio_rw+0x5ed/0x1bd0 [ 1816.703530] iomap_dio_rw+0x3c/0xa0 [ 1816.703794] ext4_file_read_iter+0x2f0/0x490 [ 1816.704102] generic_file_splice_read+0x187/0x4d0 [ 1816.704435] do_splice_to+0x1bc/0x240 [ 1816.704706] splice_direct_to_actor+0x2ac/0x8c0 [ 1816.705033] do_splice_direct+0x1b8/0x290 [ 1816.705325] do_sendfile+0xb1d/0x1280 [ 1816.705602] __x64_sys_sendfile64+0x1d1/0x210 [ 1816.705918] do_syscall_64+0x3b/0x90 [ 1816.706184] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1816.706535] [ 1816.706535] -> #0 (&sb->s_type->i_mutex_key#6){++++}-{3:3}: [ 1816.706990] __lock_acquire+0x2a02/0x5e70 [ 1816.707291] lock_acquire+0x1a2/0x530 [ 1816.707584] down_read+0x98/0x450 [ 1816.707833] ext4_bmap+0x4e/0x470 [ 1816.708086] bmap+0xac/0x120 [ 1816.708322] jbd2_journal_bmap+0xa8/0x180 [ 1816.708694] jbd2_journal_flush+0x853/0xc00 [ 1816.709120] __ext4_ioctl+0x9e9/0x40a0 [ 1816.709513] __x64_sys_ioctl+0x19a/0x210 [ 1816.709916] do_syscall_64+0x3b/0x90 [ 1816.710281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1816.710767] [ 1816.710767] other info that might help us debug this: [ 1816.710767] [ 1816.711486] Chain exists of: [ 1816.711486] &sb->s_type->i_mutex_key#6 --> &journal->j_barrier --> &journal->j_checkpoint_mutex [ 1816.711486] [ 1816.712730] Possible unsafe locking scenario: [ 1816.712730] [ 1816.713283] CPU0 CPU1 [ 1816.713718] ---- ---- [ 1816.714154] lock(&journal->j_checkpoint_mutex); [ 1816.714613] lock(&journal->j_barrier); [ 1816.715222] lock(&journal->j_checkpoint_mutex); [ 1816.715922] lock(&sb->s_type->i_mutex_key#6); [ 1816.716372] [ 1816.716372] *** DEADLOCK *** [ 1816.716372] [ 1816.716814] 2 locks held by syz-executor.6/9097: [ 1816.717112] #0: ffff88800ff9a170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x15e/0x310 [ 1816.717749] #1: ffff88800ff9a3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x48b/0xc00 [ 1816.718388] [ 1816.718388] stack backtrace: [ 1816.718697] CPU: 1 PID: 9097 Comm: syz-executor.6 Not tainted 6.0.0-next-20221011 #1 [ 1816.719245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1816.719827] Call Trace: [ 1816.720017] [ 1816.720183] dump_stack_lvl+0x8b/0xb3 [ 1816.720461] check_noncircular+0x263/0x2e0 [ 1816.720773] ? print_circular_bug+0x450/0x450 [ 1816.721106] ? finish_task_switch.isra.0+0x22d/0x8a0 [ 1816.721477] ? lock_is_held_type+0xd7/0x130 [ 1816.721790] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 1816.722125] __lock_acquire+0x2a02/0x5e70 [ 1816.722435] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1816.722816] ? __mutex_add_waiter+0x120/0x120 [ 1816.723148] lock_acquire+0x1a2/0x530 [ 1816.723427] ? ext4_bmap+0x4e/0x470 [ 1816.723704] ? lock_release+0x750/0x750 [ 1816.724002] ? lock_is_held_type+0xd7/0x130 [ 1816.724316] down_read+0x98/0x450 [ 1816.724567] ? ext4_bmap+0x4e/0x470 [ 1816.724841] ? rwsem_down_read_slowpath+0xad0/0xad0 [ 1816.725203] ? lock_is_held_type+0xd7/0x130 [ 1816.725517] ? find_held_lock+0x2c/0x110 [ 1816.725822] ext4_bmap+0x4e/0x470 [ 1816.726082] ? ext4_readahead+0x140/0x140 [ 1816.726394] bmap+0xac/0x120 [ 1816.726625] ? do_raw_read_unlock+0x70/0x70 [ 1816.726946] jbd2_journal_bmap+0xa8/0x180 [ 1816.727252] ? jbd2_log_start_commit+0x50/0x50 [ 1816.727607] ? _raw_write_unlock+0x24/0x40 [ 1816.727914] ? jbd2_mark_journal_empty+0x309/0x3f0 [ 1816.728276] jbd2_journal_flush+0x853/0xc00 [ 1816.728598] ? jbd2_fc_get_buf+0x310/0x310 [ 1816.728910] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 1816.729279] ? __ext4_ioctl.cold+0x1b/0x82 [ 1816.729590] __ext4_ioctl+0x9e9/0x40a0 [ 1816.729885] ? ext4_reset_inode_seed+0x450/0x450 [ 1816.730237] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 1816.730618] ? do_vfs_ioctl+0x132/0x1610 [ 1816.730914] ? vfs_fileattr_set+0xb80/0xb80 [ 1816.731227] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1816.731652] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x410 [ 1816.732077] ? selinux_inode_getsecctx+0xa0/0xa0 [ 1816.732425] ? lock_downgrade+0x6d0/0x6d0 [ 1816.732736] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1816.733115] ? selinux_file_ioctl+0xb1/0x260 [ 1816.733446] ? ext4_fileattr_set+0x18c0/0x18c0 [ 1816.733783] __x64_sys_ioctl+0x19a/0x210 [ 1816.734079] do_syscall_64+0x3b/0x90 [ 1816.734345] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1816.734720] RIP: 0033:0x7f060e53db19 [ 1816.734983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1816.736246] RSP: 002b:00007f060bab3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1816.736783] RAX: ffffffffffffffda RBX: 00007f060e650f60 RCX: 00007f060e53db19 [ 1816.737292] RDX: 00000000200000c0 RSI: 000000004004662b RDI: 000000000000000b [ 1816.737785] RBP: 00007f060e597f6d R08: 0000000000000000 R09: 0000000000000000 [ 1816.738281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1816.738777] R13: 00007fff8b48c5cf R14: 00007f060bab3300 R15: 0000000000022000 [ 1816.739283] VM DIAGNOSIS: 11:44:15 Registers: info registers vcpu 0 RAX=ffff88800feeb6c8 RBX=0000000000000001 RCX=000000000000001c RDX=00000000000000aa RSI=0000000000000001 RDI=ffff88800feeb6dc RBP=ffff888020497a68 RSP=ffff8880204979e0 R8 =0000000000000000 R9 =000000000000008e R10=0000000000000000 R11=0000000000000001 R12=ffff88800feeb600 R13=ffffffff85b09301 R14=000000000000001c R15=000001a6fbd2a800 RIP=ffffffff812631b4 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555571b400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb91fe6e718 CR3=000000000cf06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823c1301 RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff8880426df148 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000a R13=ffffffff8765c9a0 R14=0000000000000010 R15=ffffffff823c12f0 RIP=ffffffff823c1359 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f060bab3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2de27000 CR3=0000000017508000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff4ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000