m 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xac}, 0x8051, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000540)={0x320880, &(0x7f0000000040), 0x0, &(0x7f0000000240)=0x0, {}, &(0x7f0000000280)=""/244, 0xf4, 0x0, 0x0}, 0x58) perf_event_open(0x0, r2, 0x0, r1, 0x9) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3f}}, './file1\x00'}) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) [ 1025.821609] SELinux: security_context_str_to_sid(system_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 1025.825926] SELinux: security_context_str_to_sid(system_u) failed for (dev tmpfs, type tmpfs) errno=-22 19:19:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x10a) fallocate(r1, 0x0, 0x4, 0x87ffffc) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, r0) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000200)={0x2, 0x3ff, @start={0x0, 0x1, "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", "3c306f4ac11773db689eae5afdb0bb452294e599c098bd1b61d08a18bb41556faf798bcb4e23d44fc5fbed3816b1cc4f06ec2bc79fc691c5a7ba8c691a4fa381bed474be1f7095f197ca46bb75d74dd485707bbaf0cc9ca9a7c9dcc7fa7f13253779cbf8578d1811dddc44988fb5acbc8e4d11e4cd50ad72e181b1a75f9831d3be36d89420d456594a62c75af308167b03ce9b17b6d753db121d8cfb0dd1643c124fefdc016da8c0ee535c6b836d0962b691b45e85ccb048f42669fb990478f38ef64140cb32666c2632d43aa2a0c2fbae19114ab77b37f343654d5801662d5faafbe5df51c9a03eded2cea25a5fd4dfe5f1181c8c4c7f755b9593fd336c244e2d47f9a7461d64cf4d28b7560a504f4ae08474f496268668696099bbe5646d95d7b77e8242757011ba59bcdbb006efbb976ea9f61f2fe7d0569a9062a33a2b4ffad26319c9d5ce1ad3fa74cb461407eabc38791c6f0bc470ad7f2d0a8afe51579d90867583ba551d075d4ec5cf8c2815cf37e931e0727e888e0682c8b59940c21f3e96e0be822d08f6235164d0d660e06fefa58dc2601db7a79eb7f847f593fd6849a700342d2dbedb1bc763e7c493e87f0287d7681c03ebe871830610cbff18899360caff28fe80d985aadae0792d6ac9056fb9be04cc941d3261476b6b33420cf91b94815404ae9794e509593c0fb8c11fbf49545baeaa50ff5eb6123d3500705bbd57b5792721ad765bb8ff87b53f528ca89325c303d85791aa16064d8981a1b555a2877f90ddf13e6c29d21ed88554080a531b754b5b999a2a1521d648e889e24501f437901c956aef4a2f46918347e75285da6b20664b1a1d86cfc1dc441b2c823b33e2e62d0f5cda2abb464374ec832a470e41d6b6ee92760a0724fbd88e5b033755b5c143837c3f997982e946af4b0536a74f47d4c2838d6bb474571eb5e3adc5fd5752b581ee5a2ccf94c9196de40398ccd0d6d587b8e3c2e2fae9ca614bfbde65802ee1c82d0a12bbbc888e669b782d1aad9be0028b2d0a73124deba1a1998f8e155d17f6e48d555082e63711a711d16cd42f16cc2490f3dabd792107b1fcc0b6fc1c9cfeac6be1231ba0ec9225b9432365c11b481671f4bd777b443594cc73c68c2f290a2ccb4db6c949389ab2000c1dbe72d3433f976d90ff7d83813ae75c1dbcb4292e683c8574f6b62ddaa1fed14e74adebb2296823b75395beca408e99a23f3a6e8f037127d61f0bbcc890201962ba4b508da818bf8f29db1a2b6b066dbc7e53900faa6e2610f7e09246375123673c8617de14dee2d4a4d1e3191265cf0b76691acf374fd480bb5f14572eff1cd0c2c80035aef9e42a21ec66aaf459875322edde33d67eb24e0b10b9024a7cdb50e309bce84bf5bfacfc7fa8cdfc7c36b048b5920354f0fde0d3f2bddb462e5cf0accc05b5aeddd44ae47f4e81"}, [0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0xffffffffffffffff, 0xfff, 0x488e, 0x0, 0x3ff, 0x2, 0x0, 0x21, 0x0, 0x2111, 0x1f, 0x5ed914f4, 0x0, 0x10001, 0x401, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1800000000, 0x0, 0x0, 0x0, 0x9f1, 0x20, 0x0, 0x2000000000000, 0x7f, 0xfffffffffffffe01, 0x0, 0x352f, 0xfffffffffffff85b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x6, 0x0, 0xc5, 0x3ff, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x8499, 0x3, 0x0, 0x9, 0xe29c]}) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000c40), 0x1}, 0x0, 0x0, 0xe53f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x44800, 0x0) fcntl$setstatus(r2, 0x4, 0x45800) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) r4 = openat(r3, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100000001) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0xb9bd9388, @dev={0xfe, 0x80, '\x00', 0x27}, 0x4}, 0x1c) 19:19:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000880)) 19:19:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000880)) 19:19:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb, 0x7) shutdown(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000600)={0x0, {{0x2, 0x4e21, @private}}}, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="281f00000000010800000000000000005bc1570100"], 0x28}}, 0x0) signalfd(r0, &(0x7f00000000c0)={[0xa0]}, 0x8) getpid() r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000006c0)={{0x0, 0x26a23e74, 0xfffffffffffffffa, 0x0, 0xfffffffffffffff9, 0x2, 0x3, 0x80, 0x0, 0x9, 0x400, 0x1f, 0x4, 0x8, 0x6}}) r4 = accept4(r3, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000340)) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x14e4, {{0x2, 0x4e21, @local}}}, 0x88) socket$netlink(0x10, 0x3, 0x5) ioctl$CDROMRESET(0xffffffffffffffff, 0x5329) 19:19:35 executing program 3: preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f0000000740)=""/143, 0x8f}], 0x2, 0x10000, 0x8, 0xa6651f1a67c618f5) ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), 0x0, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:19:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sync_file_range(r1, 0x8, 0x5, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}]]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x170, 0x2b, 0x400, 0x70bd25, 0x25dfdbfb, {0xe}, [@generic="b6781f64d6e0c2f4382217307a8e7561e5dde1afe1cdfd117ea3c556e742f77b90532d3cf7c4fb9c2163f35dfaf8827e20db3218973b710cf865f50f5ab91bb1a754e33cb265456be3bb1d711e104a0e7128cb3bbf1e1747c5325aa75f500f007e8e5fef1eff4d8bb12e79d0e3b8d6ff86b2bcd1274a8efa322cebdb16a2a95be43df2d50e790123a696a52e16d0185d4600d299683b22a99a7db8458ec2cb3a518b833c04d6d7fd0fa250a9b3f094e91e5443f250ca05de1f663374371b80351bb12efbb5b315256d1cdbfd9b4d3cca2ca866c9c2c87360be8adeb213b78e9981ea7e58633bc006e60eb47c96e2ed477541e3b6e4", @nested={0x61, 0x83, 0x0, 0x1, [@generic="f776e8b9334c96c82ce3894f536c5f5e3639b64fe136b40049c4256a1ae801cca9eef0db7f99bd938737e322540e9fae8a08e180666347c3ace3830894a9cf0e41dab773c4f9280aceacd90f0e9289b6cc3f01ddfbcc2bf69a5ec0dc6d"]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) fallocate(r0, 0x30, 0x81, 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000380)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f0000000040)={{}, {}, 0x0, 0x6}) 19:19:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001d14001180809801a7b0c7dba09475f251c743092f00"/40], 0x28}}, 0x0) 19:19:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 45) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1040.177340] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1040.177340] program syz-executor.6 not setting count and/or reply_len properly [ 1040.183833] FAULT_INJECTION: forcing a failure. [ 1040.183833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.185185] CPU: 0 PID: 9183 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1040.186064] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.187148] Call Trace: [ 1040.187500] dump_stack+0x107/0x167 [ 1040.187983] should_fail.cold+0x5/0xa [ 1040.188490] copy_page_from_iter+0x40a/0x900 [ 1040.189074] blk_rq_map_user_iov+0x138b/0x1a60 [ 1040.189675] ? perf_trace_lock+0xac/0x490 [ 1040.190219] ? __lockdep_reset_lock+0x180/0x180 [ 1040.190821] ? blk_rq_unmap_user+0x750/0x750 [ 1040.191414] ? find_held_lock+0x2c/0x110 [ 1040.191953] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1040.192641] ? lock_downgrade+0x6d0/0x6d0 [ 1040.193180] ? import_single_range+0x24d/0x2e0 [ 1040.193779] blk_rq_map_user+0x103/0x170 [ 1040.194313] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1040.194943] ? alloc_pages_current+0x18f/0x280 [ 1040.195538] ? sg_build_indirect.isra.0+0x448/0x710 [ 1040.196195] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1040.196892] ? sg_build_indirect.isra.0+0x710/0x710 [ 1040.197537] ? vprintk_func+0x93/0x140 [ 1040.198045] ? record_print_text.cold+0x16/0x16 [ 1040.198662] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1040.199339] sg_write.part.0+0x69e/0xaa0 [ 1040.199870] ? sg_new_write.isra.0+0x770/0x770 [ 1040.200466] ? find_held_lock+0x2c/0x110 [ 1040.200889] ? __might_fault+0xd3/0x180 [ 1040.201402] ? lock_downgrade+0x6d0/0x6d0 [ 1040.201949] ? _cond_resched+0x12/0x80 [ 1040.202453] ? inode_security+0x107/0x140 [ 1040.203006] ? avc_policy_seqno+0x9/0x70 [ 1040.203531] ? selinux_file_permission+0x92/0x520 [ 1040.204157] ? security_file_permission+0x24e/0x570 [ 1040.204803] sg_write+0x87/0x120 [ 1040.205244] do_iter_write+0x482/0x670 [ 1040.205826] ? import_iovec+0x83/0xb0 [ 1040.206326] vfs_writev+0x1ae/0x620 [ 1040.206795] ? vfs_iter_write+0xa0/0xa0 [ 1040.207315] ? __fget_files+0x26d/0x4c0 [ 1040.207836] ? lock_downgrade+0x6d0/0x6d0 [ 1040.208384] ? __fget_files+0x296/0x4c0 [ 1040.208908] ? __fget_light+0xea/0x290 [ 1040.209418] do_writev+0x139/0x300 [ 1040.209925] ? vfs_writev+0x620/0x620 [ 1040.210416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1040.211096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1040.211639] do_syscall_64+0x33/0x40 [ 1040.212119] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1040.212777] RIP: 0033:0x7f8812842b19 [ 1040.213259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.215585] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1040.216561] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1040.217472] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1040.218380] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.219287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1040.220196] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:19:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000140)={[{@fat=@errors_remount}, {@utf8}, {@shortname_winnt}, {@shortname_lower}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x0) [ 1040.265072] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:19:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 46) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:19:36 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="6279d6c246609eee18215bad4e1768a21589e33b42c7de699ec9f3b48536b1a1f4799a00b29ae65ae9089ee3dc199069f5ca74b30d379ad68fb847d3d3410cc697c035849e7d35c10a53b34d3f45e47c82a2023d2b5790d2a20faa034313c9473a6cdfb5d49f8918"]) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200}, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat2(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) linkat(r1, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x1000) openat(r1, &(0x7f0000000180)='./file0\x00', 0x84400, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) flistxattr(r2, &(0x7f0000000340)=""/26, 0x1a) fsmount(r1, 0x1, 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0)) stat(0x0, &(0x7f00000004c0)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000880)=ANY=[@ANYBLOB="6e616d7cd32f6465762f736e617073686f74002c6e616d653d68756765746c622c616c6c2c6e6f6e652c6370757365745f76325f6d6f64652c78617474722c6e6f7072656669782c636c01e7af084ab5f43bf36f6e655f6365686c622c66736e616d653d06000000000000006f002c736d61636b6673666c6f6f723d2e282b2d5e2c6f626a5f726f6c653d5e282c00c01bb33846a64ba66b96d1f8c1fc5214b6ea396dbe3e011c45bb8386b1254b86bb32f5b5b695499776e30157481e647f7f582941945c1d8afebb2cfb3c985eab75c520e5b25ee3b715280f64de65f8f6"]) 19:19:36 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) accept$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x4b, 0x4, 0x9, 0x9, 0x0, 0xffff, 0x20000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x10001, 0xfe000000, 0x8, 0x8, 0x120, 0x7, 0x0, 0xe243, 0x0, 0x8}, 0xffffffffffffffff, 0x8, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = fsmount(r1, 0x1, 0x79) sendmmsg$inet6(r3, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)="1d2baec22ffab3d9147827070e75289f3ef7e26d03b7327211839f356ee062dd60a67b58b06ef1e5074496309686b98a77a530dbb365a2e1bbcccb0a3e6ed88bb15007db077420ba204131b7d36d07dc3b3ac471e2f3857c431c2d1650fffd62c07ce339d988694468942d26506b103e08bc621923a8d1f1fa56f022a715e272670a6511679d8e7967c1f8d0b1cf085e58acba0b3dee8d63d2e0c821e8f04ec80563fdc0d9032b1d043f83a53bf5282eb5e57e9807dfa97ebe2449434e37d81be646ba05cd6e111c551d94e0e78a85753efcdfad9992de5f331c", 0xda}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000080)="8772e84fec60b8b0bff50e5111c302d335b895c7674f78d22953073c8f", 0x1d}, {&(0x7f0000000300)="4a375b24b819e0018a2af417256187645dd5ee92530d5343924274a4abec2d41f9e0e270e5dedc4e5438712f9040be0257b988e3046cbd34a7e054c6edb12814a130fdb2f43d8e80376887fe33d81759fe515b48ecf7bda5b7ea8eb1486270cfec154ab3203eb20e40797f5e19726b6e208862ce917bdb57b47c8429526922f64c0164b20441", 0x86}, {&(0x7f00000003c0)="11e8de989795d2ddddb28f450822e841e63c1d819951339e99e051723b4b5dd10df793791e7b3b6c8f6b", 0x2a}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f00000015c0)="eeb19206c7343f08e11ef4625bd5a11a4904928f2eb87df213b29f726547293d696596c8dbe74cb4a2b9fc0b8501df168f5a973086640888651b65ad0d", 0x3d}], 0x7, &(0x7f0000001680)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x4, 0xc, 0x1, 0x0, 0x0, [@remote, @loopback, @private2, @loopback, @mcast1, @loopback]}}}, @dstopts={{0x160, 0x29, 0x37, {0x3a, 0x28, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x3}, @generic={0x1, 0xae, "58f583881ba2120a53f182045602c47233596617dc2d2219b468fe4f4c315b134e800dcb25a0ec8970377d8f2c512cf1c7823b1d84559f4893b249ae9fabcb7218653132a35a6576351ffd7c260492e06b43490c19001a1fc9422c5159c0b42b42dcdce2643a3b979540b897a7f524dd8f16fb2e5aa24357693df240c3656b76e69bd9fbe1ec38c08b157d3b0f0c6816153b52acf9a04a5cb04a51e5fd970f44cc772fa5bcb56b0c48e3056d4569"}, @generic={0xa0, 0x71, "e9d9244babb0ee3058cf7a840459fcaa5a9552b52b26388e276a1e81b828535aeff35f5bf2e99f19d7c38387f86679142889266d99a61cbd59a965ef26b36f2f3d435bd641ce8cc8f1d06de522a1d56387bf98373cd9437a705f1520f896a54abc28e8f7bc8d7eb5ae4f916fd546502bac"}, @ra={0x5, 0x2, 0x3ff}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0x80, 0x29, 0x37, {0x0, 0xc, '\x00', [@ra={0x5, 0x2, 0x2d22}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7f}, @enc_lim={0x4, 0x1, 0xcc}, @calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0xa8e2, [0xffffffffffffffff, 0x10001, 0x4, 0x0, 0x2, 0x6, 0x7, 0xb3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x81}}, @rthdrdstopts={{0x128, 0x29, 0x37, {0x4, 0x22, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x20, 0x7, [0x5, 0xedc9, 0xffffffffffffffff, 0xfffffffeffffffff, 0x9, 0x2]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x8, 0x1, [0x2, 0xd28, 0x4]}}, @ra={0x5, 0x2, 0x5}, @generic={0x5, 0x98, "40a76455a4d81c2288dc9de0e9899faec797707301d5679d8514fc52574ac6fd67a74aae4a16d81ee6e7ff479abb87474f5b19fd6c47eba726db8817935b2ef3af979887e1f3e217d42bd70a7e82c01b52af26b515c2c1bf96e52c36a13c35cea405409bd09ad5ce7b8b7c8e7af971497f5baa427c0a7d497f0393dbbfc2d385b1916af6117b63961ac81ede8eb2e258dd6e5c4db269f993"}, @ra={0x5, 0x2, 0x81}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0xff, [0x1]}}]}}}], 0x3d0}}, {{&(0x7f0000001a80)={0xa, 0x4e21, 0x10001, @private1, 0x7}, 0x1c, &(0x7f0000003fc0)=[{&(0x7f0000001ac0)="fa73369027e11ea76cda7a4b5135853f733d2d218704da07772576fc9be2b3c172583ba9491e82682453049786208e9acbcf158a08794a3cbab9d018482fd8bd241e5c207b8486f8753c3ecbd5ff2598dd205720c6d86eeb46b7a5b9e707c02271ce9dd1845ffb28d1c02821ee6b1873a7d137125b950bc55bee3270c13c608a584ed805b8aa8f5fca17b9fdf5952a97152ae2ba563b2fe85e8a34f25b22baefea620aaa14cbb7286aa8c4141e9b478c34abc923a59780f861ed5818a87a5dd65163cdb7977712681187d244ffe42b298ceae43bad7f99939ffd9a0a3af97a65963581a95271efe3fcc5", 0xea}, {&(0x7f0000001bc0)="65d0dae08d33effddc6d962dcec6b9bda4657c894913cc3418a076efcbf9a50a3e85ebb15b2327729de04bb1ad8452dd9848243f5e1f5758f107d645a3025999dfaeb070e67d2079886283290c4c29f60b61f5f853f717bc0631c82cf3585694bc43b019b963520662644af6857e67e8fe5d277352adbcb071a04a105d55f05d63ada12e755b07e8e03b6b26fb01e0bf27170485ce293aeaae77a04ac887731726910462757061e1568a79e96ac5819466092c6c7dc868ce528e873225879c99a5d00505c380f192141351", 0xcb}, {&(0x7f0000002e00)="14703799b3d32053effe2eae145390e108b041023eca347ba2e36f8191ead2a325f4259a40eb4eaa7a21d9b53ad0d5cb3e107b944b006b04fc35ce0069dc6d0ef1f076a84ce45dd6b2f390b82c580053774a279b77f8ecdf2e9553f62f28d223d714678b3854aaee7674b9891498b96b552f02c0c7068a571b81a97bd215af2039fce950be8afd3d073e845f3ac5a38ceb44796d3273520979bb325c52840f6dbb417ca63e234f498b33240ad12570d0d09c6d3dd065a17334c18a78176f875af1d211251ff96a1ea4256a485fbf2a9388004dc1e2d49a5831b434eb32591ae0cfa2efe3b522bf96ece5674f00b52735", 0xf0}, {&(0x7f0000001cc0)="fee74cc49d8f403d3ed43fd8de6ea35ac842d3a39405518e3ce4120d12df8089aa40850b32af850af30a038600a24410cb5b8da339344c73ce4ca8a3cf98ba1fbcb06bce0800b650c214c404c72761cb6a7eae0b1618c7ecf76a12a1822c8d3702ddf8ae807c4974891a1ab018fcf1a7feeddac5a477a5a7bb08b6fb1722bb3f91182238e69bf50d4d281233c4a54ea96856fd8833a98d708c78988843ec9fccc4304bbded3be4ac1b8c098b5c4a90a9f5f67b861f3e925ca8", 0xb9}, {&(0x7f0000002f00)="b578f9c76858994677bb281470bc7eaac3ae69e4927d2f84f8cb25c861bdbb72e0f3d181c19606778a982d87ee726b0b5489936143ba36cbb11538e6fd1825b171748be69ffc6e86119d4f4ab24585348e1d99dee17139f9804e00e0874f3295c93cd150fbf7b82eaa7de68cfa62e014edd207978d300fae461d5efcaa3dd28af917c9d5142ed0fe041a8ad6ecb7b66e2464fec44b292d3436d75344d8f5394ba061cd31d06f422efda82cdb3edc5c03b5f26426ebd5fd4c9e7faaf888dcaafbb8c93df4e6c921556888e62738a6db5a200b48567f7c66cdb30875ab481dfdde71d420e3f569c2018468788dda69e6a67933624719a98d2270e0cc9cd9738d5c03a7712b20eee35bb5b491898bd11f4155c9e08500bc0288bdeb75b2290976e9fff3b12aac980887a07a75a19b776cdbabdcdd213f4b93447fc91d8cc2b316f7f798030093b60d3f456d4895398227936cb3f13224c34cb81245c2591bd8b656042b8ad7af4613ad2e41d878f8f7d68c869b4df76ff561d6d3cfe72eebb98d739ced1fc87a61ca68e0fb52492e0358b25a9b07ac8b36ed67eaea82dad7a2dfeb09a51efcab97edcbc37614911917cd18b944bb9574a312d6344e3668bf50e96fe2357c0e6770e130fb238a9e028c63aa9efdd9094f736c5a89b4fbb474e049abf2db2a0506ea4a6ecd695837bf0d21c506d29f8b62a374d81a4c5570f8ec0a68d3076b642512570e9eba5555b7f324a659f54f7018fbb387d25a5b4d9142cd36641009719d22f5e923b3f9c2da3b3c3a8f4e9c1980a9203b312dea011933ffafc74ba9a1518a09807f63753819cc3f73418742f9f70f3c2d7dd7c9f1e25700dc0b667a598abe09c4743a5932159a827a056e101c54dfcb0c7954093936b369b67f571c0e8d756ceb6f0057d5a157c5e1fd2f4f6283b02d7c7d18e2506254b4c927e682a7a9fabdfe043935351f5dd66e09a284006ee5916e19c4579ce14bac96548b94b78c2cd2bc531adb30cb9f64d641e9cc093e761f274d5a2034dbd5165cc267d2ed3720727075148be86c2a4e6e0ff19f762f341f804621ae312cf959c227d30470faa4d271804627934c55efc05b372e573a235ef58e49b2de3261efdd6f97e9353939511b10b88294f36c9ced42ad6788ee04efa8f1995f41dfd81aae0fb031928343aba5a3a9bbc56bffd979e32a93c34adfac7a614c004eaca628421ab3b262e7da6af2e20f6055c3019955a6ebec7a168d46c7b0e9ec833c8b84816db698bcb55c666c86eef5a4b1a28f15935c795c5a20baebb48c8d1a88b74ebc7a0130e21990ef72e9c6ad1bd289e7217c1918a66af6b2cf44c692500dd6b3db99947a33468293bfaff23d4f93b7d73332a18204adee03a58c3b49c6ea581301c361b2476b09deff23a0a34e37348771f8ca135d2425875c5bf7ee628a4b1657142eed4b0d1c00e2f75bb3c748fa111306e36979140d7a07c0b7afe7e435c4d2f5d74695c71b545a1918e7b56a950c8dda48a039a9a694dbd00b6df6743d188ec96db26d733972bd124ad01e4f019d2081af3b9335f71bc5f1f91ab4b17568ad804f8eb8d5a2ee4b34b6a1b741d04c82386924cb5e9b623d4c3e5cf2979138fd66af5d899d0b776a7ba9acc7bf78c613cf0ad01966d698979971f00fd7b05257613dfecae664a1394f2ac5a6e6c82a9043bcfa28f255be6c4ab3b88f73d266f387f772a26474ba260a9df9a8eb8f50b949a9b1ce12128e0c13b92c7303fd6e578a4fb00f7a19da72a6e410eb1daf3a113112c436f798855c1805f006a3ecfdaf577a71bd57e1238b96902c0ebf61b91ffa982e5c319f8b1aa74ff79413f591659e9b9af6a5e6cace229be87b86490b05bbc2e0850be743a2b4394cc38b81f1cef5ad35d8591b1709f05bf3da21c3ac277f69e3e1a192bab9dfc07bfd17a8c4c5f3851f363708699c0b198c6709a136c3e4aea6c9dc33987d95e794d31930adbc19229f5e04b0b772f6cfd2505f337f7aabcd374b8d8db46803daeb8c9fd927d5c4019c535c117c3c4155365b0fb1293681f40049aa93de02855078714d0f0b4543f61ee1025c47a07bab087c910d270cdf73718930ab3b6a10f72135346f10bd6fe265662b797e15fb095edd16921302b404ab0b3034058eff33ff99a36c6bb41261f5ddc6e70b6f23c521c28f8a0d7ac87020dbb30ab1675129e039e4733c53b374cc74dec45f3a0ce49f8b4beb28c307219f48e4a98c57096b62d2d39a4acf676e094c8fe9e66742588884f713f2e998090a5afde0787201debe7e25381bc1556db4f1fea175b1149288c4f729bbcba85dfe3344b20f2953bb00709dcd732b9a2b436ee4308eb2957c9dfe6925be8804b95b4804998b877e63c6468e77c248e75d3aab84004bc6b3d4f93a8e3dfaa8840094d24b78d66d355b09e8d1775eaa8510add5ec98df12b82708ba41999143ae68c17d7d659a94ded89e9f0dc90b8dbb3cfd0f94a715b714bdbfe0aefa83e0c840fccc3dc4101887eb18368d69e9743fb2cf926fd16d55b9c4dae561cdfcaf700c89e73385545622db559495f57e95713b12854f6d31bc054bd1ccc9352d86fc6443df876dd172f43858a288ba42b313b8311962be1b323b1a5780820eab7be22ba401e41546fe6c325e2b70f4c24a6409c6623b216c0e022eed7edfdf57155a83cae69089bb1d010b269bba898e5a664353a4190e8031c53c3687baa9d32eee7bb14f5528d242ebe24028805af4b3353a92b4641ca37be3723de70a3b9f42b1cb3fdc3e3fba2a872fd111e25202ee2ea436cbdab414e287c2c31389073a43582bd98909841574fa4cfb21ebef55ab654ec6c62d34d89064b029fed28c43b65bf3888b9d490f1991ff495eb9d5d047e1649358ddb900516dbd4627e7b79f6b6940fb79264ed3f3a5313527f56d1340a58fee8c447b25d0022b58e6a1bc025d09e3c543318bd841b32680063bdaf39c6862cb6f580583cc7c52166e359bbcf6b7bec3624d674d1b653bb3faeceec2bdddd7086be8f08469c48df5eeb57e6f8bba85e5796ded89be37e368d2f21c330b8a26f8a9abf0c4c801a0967287e34d957b068b374da5658a9d270e0a2104783a9cf8c740383c8f149b7367373b72448dbc40948f95dd8ea45aa1f0631f25fcf4b066bc3e7eb4f0cebd0ff4c93a9e1eaa4b2dd77b7ee9de689e873360e0fc33d56f9c9abdb99736abf1974b6447a9785a65c197ca5fb9bb56f42af7b87595d42b13969f0d8ce80fc3ed8a3ad79cb37d55487637ded1b42736ad77a6189e4661247b1616e71105618b1aadec76c087b0c2a8660d6bf2de0f04a8a0ca65afac4abd9a07f259ea4742ecfe72072e01bebabbdd652f0933681e0ab79489a4d81f10fba986503333bbbd06df3f2115c8e99e33ca67be3bf03c47a74519228ae43414e0c7cd0b34e79ea98f0909af31071fa23070cd057f177c62b9015a421f2cc996604ead20edf569d8a1a5f4a79119cd805a6640f9ac567f3bfc47f99ed82cfdbda89782a3d0b002eb91d3481fd043773a56787a4c4dc73ad1f1dae3abae52c8f884ee9ed1f189ff1aa3a4d50fed09b42b215021ebefe68bda228e31bfcbbf3b5dad94f776fbe603349fc8321201f315d786f65372dd4c461397f2be9b1c2a9fa1abf97f411193e597aef8708a2f1fd98ab95054a01f6c277a5bd816cfd766163216106e2c3a9fca6e74b5d29e9df2f362a5b1239390a3fa60d3ec48d1c004d2069c2070bd0dc234ba8cc8febc705b778a793ba400768107af633815661683db2943c2b8f403b6160d49d29dffc447e6921dc38c103cc0c0e05db68910eb0bfabc0b923b3d5e859a48de0b17c978bbe8c04e1e110f6e5543853ddd58ee9480dc8b5e326eabe29cdbe8ff8a3ce754569b89772d7cfc10bd39c023753b1a11ec7683c57d7124f73d8c02d392715632919f5e738b79d61f97ef89b7cbb3e030f282efc8191761242b76a07596f569fb3e04c919ee29860bd875a88f40b9953226f00a87ecb391f1923d15d0a7e688d6ba484aedd8d1fac0fb714d35362bd16b2c53aef956ea1259b7a3d36cf3237a1781de7198d7a7398cf35b21639fad8a1433c71e763c50301f78b3bd4d5e261f6e7481274e12574f8fc1ea6a67036e165bb7bc9c0590518c127ce393ca11248c279e339dd2aacf24e6e1c61ab5ea9d03af7092a42c25b6e6fa8302acdfcfbdb811aac5b59970c24571c6a4a4007394bba197cbe469d56f4542291249647dfe6eb77d1e0f55c5f1aa9c1fe3822d19acc7cc896a7c504438b1e4af67c8c92d256c21308ea6f39383f13b74a045042dd59082fc2800ac20ab66cc896f912eac7244f9fe73dd550813c3b8a36773e76f35cd96f9fbac609c91f9370ec4077bd75f89d8a9614682023901582b632fefb35295da9eb3cd388baac284bf1515f20a4518da1f5774fe1a41daf9e592c6619eb3ef3a53de8c058f4da3208f28fae995b1ae7e2a0a4d15c9ae2e7d668b4ab00cfa434a0d162d21cd5468e274589962d88e9e36354176ec593071f839f73f6ce0e0fbf23ed14aae41d70ac4b1503bcf88883bf5a2d3385550b84689f4e3d69828a17ebce3b062d5092ecf08a581306dfe300516182145200ed5e6c74ad9758179e415f192a661d20ebaf461b22c2d55cb19700eb21b8840dd547571a490c47e533d10771ced99392fd0e177d5bc7f511bf64d4b6bbd771ebe2f1abc0f0eac6e879a06c4d589d10fc4b4f560938b66fd24578924318272dadc99a2b771cee87cb6f171754f2c26c4f426303ee52e36c1600a85277afd2658b161ca597348cde0a5eb760a5c0f1f8e167c65066f86085c5707ae2d3e1cf77a2e16597c9637b73ba32ae3d56e34923ac85aa0c0ba7b5bf19794d0fe92570306f2c7146453c28ecf8ea9f9ca89e33bccd76c8a299c0d63328f5bf87cd1af6922557a63fe20d2b3da7c139d6ebcc04a74a580d8bf3db23134be480ff23e0bff742d59bd91f210e933dc158bbdd3b527d6719ae863aadda386a6050bb32530790ca132a0d628cce217f3cec8e1a05648aef6c34ff8735170943c0c4fba3dd1860afb7441a81b7abdf3e6d797e4174f274c8e037244ce58732a6df65184e3e4de97006e51144416b980aaeb23138fadd3b7138d7d521e3a9816a12213a203f520ba47e561a5df2b336496f18c824f7aaa4704182d53c805777953eae4747d396428a1d934096de26d7791259da729eb7c940c284e67419db38f9b2c038d37b5b79473cab3cc23ea6b0f442c6f6fb15f8f8fb1b44bd37968b49915a6841922fde2550eb16570bb626f01e57f954b5b5db4f86ff99bf3261abc498b2b91c7790ad61322d3fe3e4b87623d2f02921c096c2cccc9963b32e98b73c1c27a4bc0fe4aa18107e393225ae9498367a1f84a8470debae3acf65226639c6aa02ec46ab4d8ac98663d4d44dc4aea9835bac8336b9fa79038cb7ce6294be7bc23ebeeb0065d6f362275cbbd1d44daed0e82e8e42b44b7ec51f4d00341716b84991afad52e17edb00c89ff22e2e3b9eb54b29a2f8f9d2f4f8a285c37625e7c4e5ae43cf840c69969771ed43c627574ff145aafbafd4f4929dd973ac895d4e091cf1b49cf299cc5592daedfbf36291969800ca152ba5e7aabbba40899fb5aaccb1ac954ea6cd7b840f07b0ebf1c474959848bb1e128418cf8d274b7d4f6c3bec60994add36752d7e30fc975312bde565f736f0100fc0b449f6ec394b9baa779fad2ff0024730c721f94ddfa8ff4785b016bbb45d4a4391779", 0x1000}, {&(0x7f0000003f00)="2f2fbd1cd9df5f1ec9f9ee92", 0xc}, {&(0x7f0000003f40)="aa1624da3d197e3d9d802bfe4d51193ffd8af60e7fa9e045ac073f6a14d5e9f55c6ff7127fc3d1afa8c1652d34e1d10ad8759bc0cb81f21a360e14a450581ff2caf8d023885f53", 0x47}], 0x7}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004040)="745b8173745377f5f8a36dd80115a82ac3ccd177b11f516226f2c854486713286cea63a395d5a0e1f566de929fdce649982eac7ede4e548a7df22ed87dfd53d9e7ab00fef9ce3fbb8c93afa548da18c1901d49e8c42ebe42bda74ca364171fbc591ecfd6c594c09c4469ff2f1b8d6a2dd2077d25b7643b4feba73bd6bee4e7e30b5d31b6cfde6df18b77fd39b6b3a0b869218fb7a325b7bd27416eb184039b24d4e0b174f7a91170a8efd567d2868f252b5202c7919ebf025974ab7926aee7022ed03ad031e023c9450f05168b02127025177d4812594caeab7361b6736c37dd6b242746", 0xe4}, {&(0x7f0000004140)="413e1c6fa70c07af3bc4652c325fe4443323eb65bb7ef35e34051644f15b6c8e288e17ccb173d80e2c22c19f5ebd5eebadafc1d7d978a9a5e0f640b3fac399db754e14a2cfb2b89e359d38a780e870c3af64de4a09d756c9383e6832edf049d3eda577c85df06aae6062e6cee3e1b2ba936e26c33e43772aa2eaed54ab47407d1926fa9f8c69fe8096db2e5a324c3993d4f6f323fd7f64b647c50ccf12f998f60a6b35766572843d1592eb1d67e0e948edfe2dcab797305e5b5c72ba8a124ff1d1877b2bdb893c438ca0e2a0cdbb410296fb5ad0", 0xd4}, {&(0x7f0000004240)="7f6299e227f88b5064c896064812ccfe92f6cba30266ae883f973846100121d0a18033b9d038ef8b531eadab97d5c2e68bccbb66b31cbe566b3ffd83f014e123809dcdd1945bf07cbe249341b45ea91028937baf2d69cc98850c662b98f8", 0x5e}], 0x3, &(0x7f00000045c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dstopts_2292={{0x178, 0x29, 0x4, {0xe6c05f168d8bf2ff, 0x2b, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x50, {0x0, 0x12, 0x4, 0x8001, [0x4, 0x133423e7, 0x7fffffff, 0x8, 0x4, 0xffffffff, 0x4, 0x2, 0x3]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim, @enc_lim={0x4, 0x1, 0x3}, @generic={0x0, 0xd5, "85c3d966ad4e76718bad614d2273fc990ef363c65e25c192e916361fa5d481add31392b0f1ef79a65a7fb8d192ae78d31e90f2a8f89daa70b965617cdd47fffb8aeb8c138c52691607df5cc6a0506fd2dc07f6b4e29d54fd59d2451b79cb0f357fc6b4c2880aa2c271745da7487a601c5c1bd85e0b5fad6cdaabc5d0c6132fd3eac39b7048abefcf9926faaf7e17983ebbdb0d91125664b6805f4af061ca1b6c4123fac230503fe9685eefb9eab24054123b827b6aeab3fe98aa14e1849ac9949ee20fac215ed46ca80d2786e714a12f566a530c5c"}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5b9}}, @rthdrdstopts={{0x1d0, 0x29, 0x37, {0x33, 0x36, '\x00', [@hao={0xc9, 0x10, @loopback}, @generic={0xf5, 0xbf, "ba61cb9c7f6785de5c19a29eecb7a85e7bf7343ac8eac4f7fe5e1126c00b9076cac9f0b313fb44ec168bbc52dbdccd52a1bf35eab9a8175f888f723ed4cb05a2059ef551d43a23f8094f435b515f3929017852d10b86e6384f8b34c9758871653abb8d0977f8d9ed17f7131ee57c5d4c84c44f78cff58cf7e5581cebab414d3a95ecc866c26dffd193211ad3e18e17c824775e78151ee05088da9f87ddfa671c2ee789889a112c6d63f39c436309102258e942d8985ed72ad5220d48265067"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0xa8, "7f068f49ef3069c8988ae6aa7b56568d007a7ca0d7642cd9c854f5aa0762d5140246f80a4f9230f1b053a9eff9b33c25f904ec89a2ebddccc36afb5333e78eb5bce73901f23ad36a006f5381661a53e48c84c98ac9f517ab6ef4a05b8a69fdb9cab5ae33e2a565d3ac2371a3ebf0fa0940022eaac19641d31d3b62d9f6a9f7ff5305b65fbf139df6aaf2b97e8ba9c0e6d26ffd92d1c2eae68a4e9bc6cea594d99b16ea598b087188"}, @ra={0x5, 0x2, 0xfff}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x3ff, [0x0, 0x7fffffff]}}, @jumbo={0xc2, 0x4, 0x16}, @enc_lim={0x4, 0x1, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2bf0}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}], 0x3c0}}], 0x3, 0x40c1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(r4, r0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x44800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) 19:19:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000880)) 19:19:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000880)) [ 1040.355989] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1040.355989] program syz-executor.6 not setting count and/or reply_len properly [ 1040.393937] FAULT_INJECTION: forcing a failure. [ 1040.393937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.395187] CPU: 0 PID: 9199 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1040.395998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1040.396968] Call Trace: [ 1040.397290] dump_stack+0x107/0x167 [ 1040.397737] should_fail.cold+0x5/0xa [ 1040.398198] copy_page_from_iter+0x40a/0x900 [ 1040.398733] blk_rq_map_user_iov+0x138b/0x1a60 [ 1040.399293] ? perf_trace_lock+0xac/0x490 [ 1040.399784] ? __lockdep_reset_lock+0x180/0x180 [ 1040.400338] ? __lockdep_reset_lock+0x180/0x180 [ 1040.400892] ? blk_rq_unmap_user+0x750/0x750 [ 1040.401406] ? mark_held_locks+0x9e/0xe0 [ 1040.401888] ? find_held_lock+0x2c/0x110 [ 1040.402377] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1040.403009] ? lock_downgrade+0x6d0/0x6d0 [ 1040.403499] ? import_single_range+0x24d/0x2e0 [ 1040.404040] blk_rq_map_user+0x103/0x170 [ 1040.404522] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1040.405086] ? alloc_pages_current+0x18f/0x280 [ 1040.405630] ? sg_build_indirect.isra.0+0x448/0x710 [ 1040.406231] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1040.406862] ? sg_build_indirect.isra.0+0x710/0x710 [ 1040.407465] ? vprintk_func+0x93/0x140 [ 1040.407934] ? record_print_text.cold+0x16/0x16 [ 1040.408487] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1040.409075] ? trace_hardirqs_on+0x5b/0x180 [ 1040.409596] sg_write.part.0+0x69e/0xaa0 [ 1040.410078] ? sg_new_write.isra.0+0x770/0x770 [ 1040.410620] ? find_held_lock+0x2c/0x110 [ 1040.411112] ? __might_fault+0xd3/0x180 [ 1040.411584] ? lock_downgrade+0x6d0/0x6d0 [ 1040.412088] ? _cond_resched+0x12/0x80 [ 1040.412549] ? inode_security+0x107/0x140 [ 1040.413044] ? avc_policy_seqno+0x9/0x70 [ 1040.413524] ? selinux_file_permission+0x92/0x520 [ 1040.414101] ? security_file_permission+0x24e/0x570 [ 1040.414696] sg_write+0x87/0x120 [ 1040.415108] do_iter_write+0x482/0x670 [ 1040.415569] ? import_iovec+0x83/0xb0 [ 1040.416020] vfs_writev+0x1ae/0x620 [ 1040.416453] ? vfs_iter_write+0xa0/0xa0 [ 1040.416923] ? __fget_files+0x26d/0x4c0 [ 1040.417392] ? lock_downgrade+0x6d0/0x6d0 [ 1040.417880] ? find_held_lock+0x2c/0x110 [ 1040.418370] ? __fget_files+0x296/0x4c0 [ 1040.418843] ? __fget_light+0xea/0x290 [ 1040.419310] do_writev+0x139/0x300 [ 1040.419731] ? vfs_writev+0x620/0x620 [ 1040.420182] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1040.420788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1040.421395] do_syscall_64+0x33/0x40 [ 1040.421829] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1040.422425] RIP: 0033:0x7f8812842b19 [ 1040.422867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1040.424996] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1040.425884] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1040.426706] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1040.427543] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1040.428371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1040.429196] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:19:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffcb5, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x100808, &(0x7f00000001c0)={'trans=unix,', {[], [{@smackfsdef={'smackfsdef', 0x3d, '\\/@@'}}, {@obj_role={'obj_role', 0x3d, ':'}}]}}) 19:19:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffffffffffe22, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000002500100027bd70d01f072b51726e8e263200000000000000000034067fdd27682418c8629fb26cd1618cad103a2f6db74d920a581a6304eb06599700a84d0a0238f919ebb91a4532c1105f5bfa505daf05047c858be8696352099ff5314a4c5862e11767ba9fae5cd66e4be177d595f8771a562c4c0210a598f2f43e72"], 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)='>') connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10) r2 = mq_open(&(0x7f0000000300)='.\x00', 0x80, 0x24, &(0x7f0000000340)={0x2, 0x0, 0x40, 0x10000}) dup2(0xffffffffffffffff, r2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x6) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) [ 1040.458076] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1040.507166] cgroup: Unknown subsys name 'nam|Ó/dev/snapshot' 19:19:36 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000880)) 19:19:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:19:36 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_bp={&(0x7f00000001c0), 0x10}}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0xa63fd6a5717620d2, 0x0, {0x0, r4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x30, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x4, &(0x7f0000001600)=[{&(0x7f0000000300), 0x0, 0xf9}, {0x0, 0x0, 0x80}, {&(0x7f0000001480)="c1cfdc3cd0acacae6547c9b0393104cc433c3331b8113613fc06fe6d05dd1628d1cc329596fbe972434319d296b79104f47913ed65e4a860d46a9a9263cd72dc4cbc40e61ec56fff66db75e235183f31775dfe15476da74ce0094bc61bdb351155e6f54ab874e54b7cce5bbd69d6cfc21413043f8a342ebf9939a49ddeebc00268d8f9c8e922aa7106f67ae3317264adbfb0291bbc132090cea44db0016717fc20808a659e53f9497098", 0xaa, 0x5}, {&(0x7f0000001580)="f477107bc9cc040105769c6702650ae7174ff915ca546e42d04cfb1ce829906460fd3b32a0079ba252a44cdc2aab81f66a402664b854dddb2d0f771eb08605d1b3989f8c56bdaea47c61a96ac71191211706056785b9b62491310307f4d501f576970c410242", 0x66}], 0x1004000, &(0x7f0000001680)={[{@utf8}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8}], [{@appraise}, {@dont_appraise}, {@hash}, {@seclabel}, {@appraise}]}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) sendto(r6, &(0x7f0000000040)="d5bf4f6155a090aa6d7c0cba35fd031f740f53", 0x13, 0x80, &(0x7f0000000140)=@generic={0x10, "3faa12adf8f78332f746bb2647388b875dab155bb2f85eab4386d45b55c07aebfa2f93ccd2db39d738a9015b4ef4a44180a783f183b617d8940527b5c8e40b86f78d526749e98a091a0666327715e86653ba0d2b83d63805b95d1918f91c72c27bf156ff60ee92f4ae4a2f563e73a9ef763096298c913af8376d4f67f368"}, 0x80) 19:19:36 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) rmdir(&(0x7f0000000280)='./file0\x00') faccessat(r1, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) creat(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x33, 0x0, 0x3f, 0x1, 0x0, 0x5, 0x64}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:36 executing program 3: r0 = getpid() pidfd_open(r0, 0x0) clone3(&(0x7f00000002c0)={0x300200800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r0], 0x1}, 0x58) [ 1040.624885] FAT-fs (loop7): Unrecognized mount option "appraise" or missing value [ 1040.685138] FAT-fs (loop7): Unrecognized mount option "appraise" or missing value [ 1053.645085] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1053.645085] program syz-executor.6 not setting count and/or reply_len properly 19:19:49 executing program 2: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000000440)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_init1(0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002bc0)='clear_refs\x00') write$P9_RREAD(r1, &(0x7f00000016c0)={0x34, 0x75, 0x0, {0x29, "8a50676fea9264ead883e521ef16394bc46ed41cf1b9a23445bdca8d33313707b6b37af614610d680a"}}, 0x34) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000001c0)={&(0x7f0000000280), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x10, 0x70bd29, 0x25dfdbff, {0x7, 0xfffffdee, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) renameat(r2, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') 19:19:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 47) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:19:49 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,fsname=cache=mmap,fscontext=sysadm_u,obj_role=!,obj_type=cache=loose,\x00']) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000200)={0x2, 0x2, 0x10}) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffc4}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x98000, 0x28) pidfd_getfd(r2, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18}, 0x18) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340)) r5 = syz_io_uring_setup(0x1e4, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:19:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:19:49 executing program 4: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8}) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f00000000c0)="03c35adbdcb5d51d74e1dcbff35bf127084ce5b50402000000852431b1f494923554fd04", 0x24, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="335ac33203de2afa87290a76b3e1f7e02f2cc068ad2c0a95328e2015fd1bdca783899aeb7166870fc464fd10e9f413f3e6029cda0d07721a9496da8a4bca92f8017e925c8768cec84b638fdaec9bdbd6a7aa79399c61c3338ac7ea8ba55d22d0f2bd5ec6dd5c90cea5c1e4fe0fee7b456b6b955d078cc3da2c97e96cd3610ea40c3a8fb8ce64794c51445fc7ee1ca6a4eed869677857cc054ca153ac155861258c12f02cc56ee7c9647c5069da44a3e035b8c7196f926cb4c9a97fa1950a5de737e661999cd7d521a82e666b3fadbe1f7305fbd3c1b26fd529adea963d92ffc61ba36fc92ccb59a0199cc3940373ee5ba2edeb19cf44716caf9465af1229a1aef26a95734f4b8c296fe0897ed615dbf7960e114fc94dbcb9b63b4ac42466025d87c3eba5298b42319781f4e797c4ca45b4b190a5478fb79cc5ac321f5bf6167ad03f1c9e122ae069189f21600477df8bb02c2e0f9bc4f77e7672fe6d2391c83879dbc891a4219642e472ef19f2a521276623108f19d171ea67762ca00bdc792d879c8574570839077d5b55937faec8d1627080c8f287ec3ab202b3667531fdc3cf67592e68cf0b0bfa86cb4a0c1dd8c4aabbffb46730d28ce7e8725bd238c195790c6edd5aba349aeae7914a33151874aa0adeb604f2bd731061a19a1afa73e24077673cd039ac739b0ca55190c7163f9c980481f8e15afc7c41bbaa6f668b372e40bef8c1a087508a5df646707ee47f051c8f14c312a56805e3c2653eca6fcd1f9e5bf605209c385023714d4ee30b6e0fe9c6a07b46ab2afb6d07181849b85fd7e97d8eba8ad9875a8467e1575e4a98ae6cf938ff3ba1e52ce91a751439b213e6745e31edc5be7fa880e9b24e1b72f864394476bdaeb6c8d10488ec34cf4ca4b0000e81f5a1e1364e658716941fd05f302477927bca22cd9d58e6a15e11a7ca50f4cd0831c14f389d42dc9f025107a56d48a0f58f2c0295d3e51270a82eedcb810981dc11f8fe774ecbe782494e7e2c000f6a756a1e946131d35365ab42ba25af3ac2ad1a7e3e0fb76f298fb7c09e61baa9dee0949c3ff814efb9bbaaf2eda3528cc4caefdfabbe78ccaa95ee1247c0eff65a2d8b2e5450fa09fe8c51cd651b6666b62bec99334e966c4e0113fceae3d21b721ca974f6c5e63ab9aee04ea926127eb2f36bd4e7c5c6be020a8c07a45a4cc2024cd32bf6881cbf347a0bf80c3c0343e048838c6410c6b568f08bf0314821f7c4287fa97e75bbf2440e195078f9bb4fdf6d0100e04e4ac5ec20b0ff14005641a65611ac3da7e38184e20cab9aa09f4cc28abd5c333b6dbfb8eb193e9d57f67e0368cc283fc6aa9caf0031cb89808136d94416256fe608c2fe0416c95553ee92989aae83e366ee7a6bf35fc37b06c98683c17ea42612bd8767d31374131c962f03b53406b9f0116bd69ec0b5846ec814d747af9fa8397fe039c6d883b7985e51412cfbc16b92a7eb287dceafa8c0cd5ed3b5e7c0c83f388c5432a16a420f26451dbb1eaa0d44af370769fb86df2a5b3a57425655e891d28c8c4976f78d46be1700aad4c5d0630782687270173fd39b0abbc3ed5a7c80e61306a4f8ef7812599358a35b29f469f3881ba6bafbbd51e77deec9481be2ce982c4093f124bf87e381f05ab4ad2adcbb51de0569695eece9d3d061e0ea34972b4b63dc415744480d9985c2c55e4260258734cd25cb5183cc55b0f12e8aa7e846944efe1ba3c3eebac5ac97f3cdee40eb90af33d4626e0654fd148e3c90ba31cb769100122f23ac2b4118ff8ca172c36aa329c5e4ba3e641163383476833e5733ee0ad8efc75af1b669096773b2357b1e9150e2f5c64e38a1e02e5225f939b95d8e6e72cb4ddca9d037d43ed47c21fa128cf100745c90f24ae8f237395cb9c4b4d8c7be299ae799d43a1bebdf954efd808c47363c639adfd283e2ef8a80844930b1185785b8d82ec9f53847f141ab778ae59f58725d0bde780fbf453d8f778bd6428a2ea3a4de906c5a9a973e3ee0c80951da21e19b4ad20695745c2f9c72f19abe5b6a0c0ec3abaeec20a38dd67351565fc56ed44e93488cede2084e296e08158d77c0bd5614727b907d2f9bacff62da8ba3674f939d7f3e9933ad97d41b3805d7b06032e863c448fb53253a79379db350599dabaccfc3f9eecbd65cbfdcdf83238e4303811235e314cb045cb649e9f3e3ee3ca37948dc278fae208de3993e3e1d9666ac4a193dcb397adcd6085f2834c981cd354753a62f53f953e2fa8fdf82795f0474877826214d9d263ef34dcb2f8a778774ad09b0aeac82cb8b87cecdddba521fb9f3fbf83014afddb1f6122b35582fe6062d79a58d9dab2007ba81e403de1741c2b46d312395cbddef4ad327c3ddab86b582cf3acac39cf0ed26d0b354959b50186ee109e90640492200ff79730330cc824be15fb66ab00dfe095759645c04be5d4d60eddbe5913d3243936291313432bb7ba8fcf06a5ac64a7d7b978e1b1e958c0f1b80012ef4e85bc1b0d789e3dc1ac991d44d98185c330f6f1063e9162c9af5f0f5dc5c7eb090359e1f0167b8f1b30e5405de8a9306fa8e049e907e41e109df666703a1d427a1ee7b2384ceed506ac91a516e3adfc8b76c90392b9ec5c993fc59f37fe7485385f454befa82ac3f44bfb2eb8989598114aa7d4a80b93a62674fcf9fbf19b813f57dc102ed5f2e9c47e5082c9dd85f67d5d6eab070b9a3cafa34e3d649dd61dc7f9d29b59370f4df8b9d53a7b71a16cd043aa80f87008a9cd5209c1ca374e5af7b853c24503f9cccd7b4b24db48ccbf6cbc9a6492f2b8b5ab6845a7aab55eeb1a24faa80e13e04b4761b682bd8fc9a2acecca9ce69a51b60d7d6990b14568a0198042b4585e9693c0031d7e12216768b2484ceb34b96e44ee8288d3c8339b8bbe90982c067c2af8401e8883881c93e86ffb9a4a7358fdf78af0a22c7816f07c3a1a68e66791c22a9319d7ce6a59dd582be7609b3285b7f4d83532ddf99698e040230a42eec7cf7637540cb1cec6db21eaf45d134411d11ef42c5d2e8ce9e555edecaf4673d63a77606e098abc74fc7d8a0d916ff400af6954992ff46f7d7533b3ddd3612e4393b7100418889059dd7b5be7a2c08380dd0f953131679c804b83c0bf887733f11771210832a4cca4ff6b13a03540a010b92bc86cab0aa7ec93ca8a7c1dcd27f885a7261e4fd000848000fb95cd08e84c05645772b899a4f6ec7781918a0d1924750a11559a6d4d6d7f37aefbfd5df9a1b84ba546e12e0ca2957bfad248347274fc7b1d0340aecf3eee9c5baf360dc25c4c76de24e487513665a7cb9434c063867c311332ab21eb7ebc9cd0e1e2226f5953bb83540b9fde7d491bddd8027e13c0c38991714287a78b2c6c1147241071802a892586535a8796a1e42534e65d29cfa0fc5fd97cbb17262a44fece26984e67f45b1566d489b4d9b7669c71cfc9bcd2e5a615f63e36e80d69f0aa8ce1762b1aa03cf6d5a3507704ef05ca91338268be44d14b806ff9f032286cce78942082d7974df62df23e9668263ec2efc0541692fa8d9a28ef64d83dd30117f92714c8c235355a644ba47de6a247face21263fe789fe1e3cad240b4653bccb2c22827d11de326c2b2754949bc876fff2be3251e37e75b6e06bcc76d961f2289546eb373b2a97d362bafb541e1a08b146474421b2a793d894b7a2172ae9129496312b6ab53c79ae8cd36c67542ec62d23964a80f5fd13be90c21db135d60b641ab347377215a21c2a450acb4306eb0cb9633a9cac787aa7ae19db772b7f11dfcf7f69a627b72becf205f4c20792546f67a49e2a10828764ed353ee39221e35dfd1cf25f74d7cddb48c437dd80edba23b4cfd03dea80d791039772274236ca0a27a477a449cd48fda8beece3e58806497dbf0806bd4f07abffb8bea382d5b04c545fb464b60c5f16ca1d4ed24d6196eefb6a45685c79454972fcec0e4b51fe3f9d8eb4b71cf71f3f5f9449b456ca247c439366739492ff4a9ecff40993f6dc2725336e531b0f36e261fb13b90aa3ec7e36526ed3bce250b61342cb8fe41f159e8e4f2f803716ff06813e5ca8f3a26ab42e934a4fdfcf4ddf48ea10c9e68bcdc21a718ffc3931926aafcecec046a1d0ddac5f35bc23ed32b56cc91439a9ef528a32c72586d913569f8c357b11ecc33aa6049fe2e02258da6e8823f1737ea47336419a13f77dcc05eb607d03ac2cbdffbb607b20c312fe793f1dd06bb2f9ed0ef147d531506873b66de46e2f08d9366c0ef074de3745362d227a53c6030e3a86d470060d6ffb18547e70897d886af962220c2e1c975a5c124554f1055c4c4e1c13c06195500899701aecc363f0ed411c9f632fe7630bee32af9f49947becb388ad0074263e0ae2892d4cdd565c2fd2c9bbe78949f14d98a95fc1c6c3419c0bcbe5955b2b3108f23cc501c7b0a2223c19d3bfb48f171a25353bb3b539930ca07d86e6a1105c1e123b7906ad8eac826d7bc0805cd3736abee882d67c35a82248ca6624878660e6cbb09570682d2253a2a0a8c186e8d83e7cebfb473e4ca5faff67c0e7200aa82c9c075741e49b559244c196dc9c1b09e4917aa6ad8e3e497228120a6ea7a2a2d8c51a9374289bbec9d4e9b8548261ddc8e31b5477cfd54a77eb063b8e5a1af5fe71132f386f15cda56299ee891e201de2827d41b3bf6d0faa4e576f3efe7d816f18376b098cde8649f661c0e390af7fe0e02a73b25efab627b75b3443eac4213044ebdb5e8c2d7a03f30cf65c087ae38d129e88d5fb70e921e01f2e1babfe0ffdacaf637d10a910b322fab74feab387aa4e3bafb1edd5fbf4206bb762646bac0e295484c00d69906d212cb12a4d14b4ff1d5cda390aa712a35e84a103eeafee8291914a7dea25404c1eb700c8835b43433771d3d83be8014179312ef7f1171fff2d737d29a3d7304865b38664216fda777a7b404162ae81d15016ec086c88443b86fc2a657c5e84eb5305be699463d6801b8a776c8862359e1c6f2c8f8a094ae12f72a789f2e1c21db2911acb614a3d5ec8ef9b4329e2947218a8eb789d05add9f86dedcec75b89bd9a09b7da6fc1808fe847553b754fd87358f7b99624e117f3975e1ed1d157c3ec83b64bb9121219675d67662f149f3ba48ac77d0c596875fbd1910f025373ebe294022b4c2833486c1fe1f464727cf55ecf46bb18d54abc111a69187325dec34d10bfded749d7779a40d8f3de54794643f5ce2d35408b2f97784a99a79f56d6e57d1a7c2a5deffd772be16311413bb15c07f45c5be3b46435800c739b88ee0a3d6b4cf0e377182145246937226336d3e0b5fc9a27748d8deca2e371edc01f30ef5d209738ebdfe3032409d296ab2470cdb5b92a35f0054a9240a10adf89bac5e83ec530a3686247b7dd1ac9d5d698dcc17583883ad60966d95610218fee7f74d933bf757783a6fa3f549f1b7bfd00ddb1cfa4686f8d02aa559a7bcb8dd72409ad5d015c3c0802b9fb0efbc5dea71bdfbef2bf34a5c418008a7a7cafd544e2449e3e79509b2c775af8792344ce6f532e3a39f34129b9b9a250937afb813308b6fbc0903a5bb8553bac3b9e2b676ddc067a9854f3b9ab7b07bc761c277ffbde8d3950fc2a25b024084225f12085287888b7049b2618185ded9a169f6e83ca61eee446bf44371f6b6eb2712fce516174d22aa912af555f23165aa9b939448bf3a4050d7716e74c397cab497d1c7c84d2b29f63fe2485d8ca6284a47e87bccbeb608f74c681bd9133588204247946b78b0c3", @ANYRESOCT, @ANYRES16, @ANYRESOCT=r0, @ANYRES32, @ANYRES64=r2, @ANYRESOCT=r2, @ANYRES64=r3, @ANYRESDEC=r2]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 19:19:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000880)) 19:19:49 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:19:49 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x2010, 0xffffffffffffffff, 0x966b7000) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x48c8b, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file1/file0\x00', 0x101) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8}, 0x11000, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000280)=0x3a, 0x6, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) splice(r2, &(0x7f0000000140)=0x7ef6, r1, &(0x7f00000001c0)=0x8, 0x0, 0x6) sendfile(r4, r3, 0x0, 0x9bbb) [ 1053.663857] FAULT_INJECTION: forcing a failure. [ 1053.663857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.664839] CPU: 1 PID: 9254 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1053.665377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.666039] Call Trace: [ 1053.666259] dump_stack+0x107/0x167 [ 1053.666553] should_fail.cold+0x5/0xa [ 1053.666868] copy_page_from_iter+0x40a/0x900 [ 1053.667241] blk_rq_map_user_iov+0x138b/0x1a60 [ 1053.667617] ? perf_trace_lock+0xac/0x490 [ 1053.667956] ? trace_hardirqs_on+0x5b/0x180 [ 1053.668309] ? blk_rq_unmap_user+0x750/0x750 [ 1053.668665] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1053.669098] ? import_single_range+0x1b2/0x2e0 [ 1053.669457] ? import_single_range+0x24d/0x2e0 [ 1053.669823] blk_rq_map_user+0x103/0x170 [ 1053.670150] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1053.670532] ? alloc_pages_current+0x18f/0x280 [ 1053.670899] ? sg_build_indirect.isra.0+0x448/0x710 [ 1053.671308] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1053.671727] ? sg_build_indirect.isra.0+0x710/0x710 [ 1053.672121] ? vprintk_func+0x93/0x140 [ 1053.672432] ? record_print_text.cold+0x16/0x16 [ 1053.672808] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1053.673204] ? trace_hardirqs_on+0x5b/0x180 [ 1053.673555] sg_write.part.0+0x69e/0xaa0 [ 1053.673877] ? sg_new_write.isra.0+0x770/0x770 [ 1053.674247] ? find_held_lock+0x2c/0x110 [ 1053.674573] ? __might_fault+0xd3/0x180 [ 1053.674892] ? lock_downgrade+0x6d0/0x6d0 [ 1053.675237] ? _cond_resched+0x12/0x80 [ 1053.675549] ? inode_security+0x107/0x140 [ 1053.675881] ? avc_policy_seqno+0x9/0x70 [ 1053.676199] ? selinux_file_permission+0x92/0x520 [ 1053.676585] ? security_file_permission+0x24e/0x570 [ 1053.676982] sg_write+0x87/0x120 [ 1053.677253] do_iter_write+0x482/0x670 [ 1053.677562] ? import_iovec+0x83/0xb0 [ 1053.677869] vfs_writev+0x1ae/0x620 [ 1053.678160] ? vfs_iter_write+0xa0/0xa0 [ 1053.678476] ? __fget_files+0x26d/0x4c0 [ 1053.678794] ? lock_downgrade+0x6d0/0x6d0 [ 1053.679127] ? find_held_lock+0x2c/0x110 [ 1053.679457] ? __fget_files+0x296/0x4c0 [ 1053.679785] ? __fget_light+0xea/0x290 [ 1053.680099] do_writev+0x139/0x300 [ 1053.680384] ? vfs_writev+0x620/0x620 [ 1053.680695] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.681110] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.681521] do_syscall_64+0x33/0x40 [ 1053.681815] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1053.682225] RIP: 0033:0x7f8812842b19 [ 1053.682522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.683987] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1053.684602] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1053.685167] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1053.685723] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.686284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1053.686843] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1053.692657] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 19:19:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000880)) [ 1053.739023] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 19:19:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 48) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:19:49 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,fsname=cache=mmap,fscontext=sysadm_u,obj_role=!,obj_type=cache=loose,\x00']) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000200)={0x2, 0x2, 0x10}) r1 = getpid() r2 = pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffc4}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x98000, 0x28) pidfd_getfd(r2, r0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RCREATE(r3, &(0x7f0000000080)={0x18}, 0x18) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000340)) r5 = syz_io_uring_setup(0x1e4, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:19:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80086601, &(0x7f0000000880)) [ 1053.860247] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1053.860247] program syz-executor.6 not setting count and/or reply_len properly [ 1053.862255] FAULT_INJECTION: forcing a failure. [ 1053.862255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.863238] CPU: 1 PID: 9292 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1053.863787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1053.864460] Call Trace: [ 1053.864680] dump_stack+0x107/0x167 [ 1053.864977] should_fail.cold+0x5/0xa [ 1053.865286] copy_page_from_iter+0x40a/0x900 [ 1053.865648] blk_rq_map_user_iov+0x138b/0x1a60 [ 1053.866024] ? perf_trace_lock+0xac/0x490 [ 1053.866359] ? __lockdep_reset_lock+0x180/0x180 [ 1053.866737] ? __lockdep_reset_lock+0x180/0x180 [ 1053.867119] ? blk_rq_unmap_user+0x750/0x750 [ 1053.867475] ? find_held_lock+0x2c/0x110 [ 1053.867808] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1053.868237] ? lock_downgrade+0x6d0/0x6d0 [ 1053.868570] ? import_single_range+0x24d/0x2e0 [ 1053.868942] blk_rq_map_user+0x103/0x170 [ 1053.869272] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1053.869655] ? alloc_pages_current+0x18f/0x280 [ 1053.870023] ? sg_build_indirect.isra.0+0x448/0x710 [ 1053.870429] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1053.870857] ? sg_build_indirect.isra.0+0x710/0x710 [ 1053.871267] ? vprintk_func+0x93/0x140 [ 1053.871585] ? record_print_text.cold+0x16/0x16 [ 1053.871969] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1053.872387] ? trace_hardirqs_on+0x5b/0x180 [ 1053.872753] sg_write.part.0+0x69e/0xaa0 [ 1053.873088] ? sg_new_write.isra.0+0x770/0x770 [ 1053.873431] ? find_held_lock+0x2c/0x110 [ 1053.873740] ? __might_fault+0xd3/0x180 [ 1053.874072] ? lock_downgrade+0x6d0/0x6d0 [ 1053.874424] ? _cond_resched+0x12/0x80 [ 1053.874749] ? inode_security+0x107/0x140 [ 1053.875098] ? avc_policy_seqno+0x9/0x70 [ 1053.875427] ? selinux_file_permission+0x92/0x520 [ 1053.875830] ? security_file_permission+0x24e/0x570 [ 1053.876248] sg_write+0x87/0x120 [ 1053.876533] do_iter_write+0x482/0x670 [ 1053.876851] ? import_iovec+0x83/0xb0 [ 1053.877172] vfs_writev+0x1ae/0x620 [ 1053.877476] ? vfs_iter_write+0xa0/0xa0 [ 1053.877770] ? __fget_files+0x26d/0x4c0 [ 1053.878064] ? lock_downgrade+0x6d0/0x6d0 [ 1053.878404] ? find_held_lock+0x2c/0x110 [ 1053.878714] ? __fget_files+0x296/0x4c0 [ 1053.879063] ? __fget_light+0xea/0x290 [ 1053.879358] do_writev+0x139/0x300 [ 1053.879653] ? vfs_writev+0x620/0x620 [ 1053.879963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1053.880350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1053.880739] do_syscall_64+0x33/0x40 [ 1053.881043] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1053.881419] RIP: 0033:0x7f8812842b19 [ 1053.881725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1053.883058] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1053.883690] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1053.884273] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1053.884863] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1053.885450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1053.886040] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1055.714552] Bluetooth: hci0: command 0x0401 tx timeout [ 1057.762507] Bluetooth: hci0: command 0x0401 tx timeout [ 1059.809493] Bluetooth: hci0: command 0x0401 tx timeout [ 1061.858506] Bluetooth: hci0: command 0x0401 tx timeout 19:20:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f080045000078000000000011907800000000ffffffff00004e200064836e00d2f1f7d78c2e218f90780200000000000000000000006bd60e8c561d4bbfed48726363582d54c82fee2b995254fa2817997b3828a5007d60fa6d1c0779e6cb3d5656f39594619e6946ecbd671680e02dce79b473ee4cea9e52a8c1"], 0x0) recvmmsg(r0, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000006c80)=""/159, 0x9f}], 0x1}}], 0x1, 0x123, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:20:04 executing program 5: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000003c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/197, 0xc5}], 0x4, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000007c0), 0x1}, 0x0, 0x6, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r2, &(0x7f00000000c0)="e4", 0x1, 0x0, 0x0, 0x0) r4 = dup(r3) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[], 0x78) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) gettid() mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r5, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xa4, 0x0, 0x40, 0x8, 0x0, 0x1, 0x402, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x40000, 0x6, 0x3, 0x9, 0x100, 0x3f, 0x2, 0x0, 0x8, 0x0, 0xed5}, 0x0, 0x5, 0xffffffffffffffff, 0x1) getsockname$unix(r3, &(0x7f0000000100), &(0x7f0000000000)=0x6e) recvmmsg(r4, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r6}}, 0x58) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x541c, &(0x7f0000000200)) 19:20:04 executing program 4: syz_extract_tcp_res$synack(&(0x7f0000001080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, r0, 0x0, 0x7, 0x5}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @val={0x3, 0x0, 0x1, 0x9, 0x3, 0x9}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@x25={0x805, {0x0, 0x1, 0xfd, "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"}}}}}, 0x101b) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) fsetxattr$security_evm(r1, &(0x7f0000001180), &(0x7f00000011c0)=@ng={0x4, 0x14, "6f98aee8a30fb65d02ecf8bc620af55a51463d"}, 0x15, 0x2) write$tun(r1, &(0x7f0000001100)={@val={0x0, 0x2}, @val={0x1, 0x0, 0x1, 0x9, 0x6b, 0x5}, @eth={@local, @link_local, @val={@val={0x9100, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x3}}, {@x25={0x805, {0x1, 0x27, 0x5, "182c77c9f69ce163e245076337668cfb3f548c05e327779d554e96fe4e3d6ec46ce74de8077f4bd7f399dd237b60a8434310709370c9d34711e606c7d6ea66a2ccf8b4bec7"}}}}}, 0x6c) 19:20:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80086601, &(0x7f0000000880)) 19:20:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80087601, &(0x7f0000000880)) 19:20:04 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 49) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:20:04 executing program 7: statx(0xffffffffffffffff, 0x0, 0x100, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x407, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x101000, 0x0) r3 = epoll_create(0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x6) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r2, 0xff, {0x0, r3}, 0x50, 0x2, 0x1, {0x0, r6, r7}}, 0x7ff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',dfltgid=', @ANYRESHEX=r0, @ANYBLOB="6c6f6f73652c76657273696f6e3d3970323030302e752c64666c746769643da43b65785a38893dbe75697bf8a80efac11fba43dec3229fea067d6f", @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC=r1, @ANYRESOCT=r2]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00080c00000000fa00000004000200291b00"/35], 0x1c}}, 0x0) 19:20:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80108906, &(0x7f0000000880)) [ 1068.342364] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1068.342364] program syz-executor.6 not setting count and/or reply_len properly [ 1068.348963] FAULT_INJECTION: forcing a failure. [ 1068.348963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.350315] CPU: 0 PID: 9320 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1068.351019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.351882] Call Trace: [ 1068.352163] dump_stack+0x107/0x167 [ 1068.352545] should_fail.cold+0x5/0xa [ 1068.352945] copy_page_from_iter+0x40a/0x900 [ 1068.353410] blk_rq_map_user_iov+0x138b/0x1a60 [ 1068.353886] ? perf_trace_lock+0xac/0x490 [ 1068.354313] ? __lockdep_reset_lock+0x180/0x180 [ 1068.354795] ? __lockdep_reset_lock+0x180/0x180 [ 1068.355281] ? blk_rq_unmap_user+0x750/0x750 [ 1068.355732] ? mark_held_locks+0x9e/0xe0 [ 1068.356156] ? find_held_lock+0x2c/0x110 [ 1068.356584] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1068.357133] ? lock_downgrade+0x6d0/0x6d0 [ 1068.357559] ? import_single_range+0x24d/0x2e0 [ 1068.358033] blk_rq_map_user+0x103/0x170 [ 1068.358453] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1068.358943] ? alloc_pages_current+0x18f/0x280 [ 1068.359423] ? sg_build_indirect.isra.0+0x448/0x710 [ 1068.359947] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1068.360494] ? sg_build_indirect.isra.0+0x710/0x710 [ 1068.361008] ? vprintk_func+0x93/0x140 [ 1068.361417] ? record_print_text.cold+0x16/0x16 [ 1068.361901] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1068.362421] ? trace_hardirqs_on+0x5b/0x180 [ 1068.362874] sg_write.part.0+0x69e/0xaa0 [ 1068.363303] ? sg_new_write.isra.0+0x770/0x770 [ 1068.363780] ? find_held_lock+0x2c/0x110 [ 1068.364209] ? __might_fault+0xd3/0x180 [ 1068.364617] ? lock_downgrade+0x6d0/0x6d0 [ 1068.365057] ? _cond_resched+0x12/0x80 [ 1068.365459] ? inode_security+0x107/0x140 [ 1068.365883] ? avc_policy_seqno+0x9/0x70 [ 1068.366297] ? selinux_file_permission+0x92/0x520 [ 1068.366797] ? security_file_permission+0x24e/0x570 [ 1068.367317] sg_write+0x87/0x120 [ 1068.367669] do_iter_write+0x482/0x670 [ 1068.368072] ? import_iovec+0x83/0xb0 [ 1068.368468] vfs_writev+0x1ae/0x620 [ 1068.368846] ? vfs_iter_write+0xa0/0xa0 [ 1068.369252] ? __fget_files+0x26d/0x4c0 [ 1068.369659] ? lock_downgrade+0x6d0/0x6d0 [ 1068.370080] ? find_held_lock+0x2c/0x110 [ 1068.370505] ? __fget_files+0x296/0x4c0 [ 1068.370918] ? __fget_light+0xea/0x290 [ 1068.371327] do_writev+0x139/0x300 [ 1068.371695] ? vfs_writev+0x620/0x620 [ 1068.372092] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1068.372627] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1068.373157] do_syscall_64+0x33/0x40 [ 1068.373538] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1068.374060] RIP: 0033:0x7f8812842b19 [ 1068.374442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.376301] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1068.377076] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1068.377796] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1068.378516] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.379287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.380012] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:20:04 executing program 7: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x101003, 0x0) pread64(r0, &(0x7f0000000280)=""/178, 0xb2, 0x9028) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de633978e40", 0x9b, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) pkey_mprotect(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='oom_score_adj\x00') pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="d4353902a8fc482a86ebe2be6558", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000680)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc010000", @ANYRES16=r3, @ANYBLOB="20002abd7000ffdbdf25010000003c0001801400020062726964676530000000000000000000140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000004000300e40002803c00018008000100000000000800010007000000080001000100000008000100000000000800010008000000080001000300000008000100040000002400018008000100040000000800010007000000080001000600000008000100000000004c00018008000100060000000800010005000000080001000400000008000100000000000800010004000000080001000a0000000800010008000000080001000300000008000100060000003400018008000100010000000800010002000000080001000c0000000800010001000000080001000700000008000100020000008000018008000100", @ANYRES32=r6, @ANYBLOB="140002006d61637365633000000000000000000014000200767863616e3100000000000000000000140002006272696467655f736c6176655f31000014000200776c616e30000000000000000000000008000300000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="190094d2d516470340f1b449ea7c45e90fe854e457d5983688321b1ff027a49ef8023d3050428f373583f3d15fdd788b9696b50be594023ce1ea6d304ff96bd8"], 0x1bc}, 0x1, 0x0, 0x0, 0x48054}, 0x4000000) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x4001, 0x0) ioctl$PTP_CLOCK_GETCAPS(r7, 0x80503d01, &(0x7f0000000140)) 19:20:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:04 executing program 4: mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab59066f5b0ea4c07f11318061364f160bc2b020d779e8a8cc3915f86077a78eee9e89cf5f43f8e4562"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x260d01, 0x0) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x2a, 0x7f, 0xfe, 0x2, 0x336ae70d, 0x2, 0x3e, 0x0, 0xf8, 0x40, 0x9a, 0x9e5, 0x6, 0x38, 0x1, 0x157d, 0x5, 0x6ee}, [{0x0, 0x9, 0x6, 0x60a4, 0x2, 0x7fff, 0x1f, 0x400}], "f44525fdd8927670aa5b7b3ef05e91ed2cf8c69e822f074f557676724744ffc47184aa715240d9fa89a868c07579d722a903901caa9357394d98e32f10d4952a09331edd7ddfc5a3c7bb31f850aa42a600582e6ee6038b2d62a2c848792e807335ef8417a8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7dd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/thermal', 0x18c01, 0x20) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4cc7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffebf, 0x33, 0x0, r2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) fcntl$getown(r3, 0x9) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x0, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 19:20:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80087601, &(0x7f0000000880)) 19:20:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80108906, &(0x7f0000000880)) [ 1068.557379] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz-executor.7: bad orphan inode 301979167 [ 1068.560060] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 19:20:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="27bd5800ff0900000000000000000000e4620e5882fab856f17c80ad57ea1b0d01009a14"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendfile(r0, r1, 0x0, 0x6) 19:20:18 executing program 7: sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x40080) r0 = socket$inet(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000180)) 19:20:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=@ng={0x4, 0xa, "c351bfa60daf06e4669c"}, 0xc, 0x2) r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000180)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x906, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3, 0x9, 0x1, 0x7, 0x6, 0x1d99, 0x0, 0xf7e2}, 0x0, 0x10, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x381, 0x0) syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = syz_io_uring_setup(0x31dc, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000340)) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)='system_u:object_r:iptables_unit_file_t:s0\x00', 0x2a, 0x0) lseek(r1, 0x100000001, 0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)=""/228, 0xe4}], 0x1) 19:20:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80108907, &(0x7f0000000880)) 19:20:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80108907, &(0x7f0000000880)) 19:20:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 50) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:20:18 executing program 4: set_mempolicy(0x8000, &(0x7f00000000c0)=0x80000000, 0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() fork() tkill(0x0, 0xb) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x4) set_mempolicy(0x8000, &(0x7f0000000080)=0x4, 0xfff) r0 = fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="0e2157337fbbc7aff0628d7ee4008000007941acab2b0e4040a4f900000000a2d400"], 0xa) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f0000000140)={0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x1cb}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 1083.019171] SELinux: Context  is not valid (left unmapped). [ 1083.022772] audit: type=1400 audit(1707506418.876:125): avc: denied { associate } for pid=9359 comm="syz-executor.5" name="cgroup.procs" dev="cgroup2" ino=1372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1 srawcon=05 [ 1083.047213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.053246] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1083.053246] program syz-executor.6 not setting count and/or reply_len properly [ 1083.065386] FAULT_INJECTION: forcing a failure. [ 1083.065386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.066891] CPU: 0 PID: 9370 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1083.067822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1083.068936] Call Trace: [ 1083.069299] dump_stack+0x107/0x167 [ 1083.069796] should_fail.cold+0x5/0xa [ 1083.070316] copy_page_from_iter+0x40a/0x900 [ 1083.070924] blk_rq_map_user_iov+0x138b/0x1a60 [ 1083.071552] ? perf_trace_lock+0xac/0x490 [ 1083.072111] ? __lockdep_reset_lock+0x180/0x180 [ 1083.072735] ? __lockdep_reset_lock+0x180/0x180 [ 1083.073359] ? blk_rq_unmap_user+0x750/0x750 [ 1083.073956] ? find_held_lock+0x2c/0x110 [ 1083.074507] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1083.075217] ? lock_downgrade+0x6d0/0x6d0 [ 1083.075778] ? import_single_range+0x24d/0x2e0 [ 1083.076399] blk_rq_map_user+0x103/0x170 [ 1083.076865] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1083.077497] ? alloc_pages_current+0x18f/0x280 [ 1083.078040] ? sg_build_indirect.isra.0+0x448/0x710 [ 1083.078725] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1083.079352] ? sg_build_indirect.isra.0+0x710/0x710 [ 1083.080037] ? vprintk_func+0x93/0x140 [ 1083.080565] ? record_print_text.cold+0x16/0x16 [ 1083.081200] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1083.081871] ? trace_hardirqs_on+0x5b/0x180 [ 1083.082464] sg_write.part.0+0x69e/0xaa0 [ 1083.083023] ? sg_new_write.isra.0+0x770/0x770 [ 1083.083652] ? find_held_lock+0x2c/0x110 [ 1083.084215] ? __might_fault+0xd3/0x180 [ 1083.084751] ? lock_downgrade+0x6d0/0x6d0 [ 1083.085325] ? _cond_resched+0x12/0x80 [ 1083.085780] ? inode_security+0x107/0x140 [ 1083.086333] ? avc_policy_seqno+0x9/0x70 [ 1083.086876] ? selinux_file_permission+0x92/0x520 [ 1083.087535] ? security_file_permission+0x24e/0x570 [ 1083.088208] sg_write+0x87/0x120 [ 1083.088672] do_iter_write+0x482/0x670 [ 1083.089196] ? import_iovec+0x83/0xb0 [ 1083.089713] vfs_writev+0x1ae/0x620 [ 1083.090204] ? vfs_iter_write+0xa0/0xa0 [ 1083.090737] ? __fget_files+0x26d/0x4c0 [ 1083.091272] ? lock_downgrade+0x6d0/0x6d0 [ 1083.091769] ? find_held_lock+0x2c/0x110 [ 1083.092323] ? __fget_files+0x296/0x4c0 [ 1083.092862] ? __fget_light+0xea/0x290 [ 1083.093387] do_writev+0x139/0x300 [ 1083.093863] ? vfs_writev+0x620/0x620 [ 1083.094371] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1083.095061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1083.095754] do_syscall_64+0x33/0x40 [ 1083.096251] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1083.096805] RIP: 0033:0x7f8812842b19 [ 1083.097300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1083.099716] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1083.100725] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1083.101664] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1083.102606] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.103555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1083.104496] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:20:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0045878, &(0x7f0000000880)) 19:20:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:19 executing program 5: ftruncate(0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180)=0xfffffffffffffffe, 0xffffffffffffffff, &(0x7f0000000300)=0x100000001, 0x800, 0x1) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)) fallocate(r0, 0x60, 0x8, 0x6) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 19:20:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0045878, &(0x7f0000000880)) 19:20:19 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getpgid(0x0) clock_gettime(0x7, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000080)=""/55, 0x37}], 0x2, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000640)=""/87, 0x57}, {&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000880)=""/229, 0xe5}, {&(0x7f0000000780)=""/169, 0xa9}, {&(0x7f0000001980)=""/210, 0xd2}, {&(0x7f0000001a80)=""/108, 0x6c}, {&(0x7f0000001b00)=""/130, 0x82}], 0x7, &(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000020000005c6a000000000000000000000050a9869d457de48dfdef2b38", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000f9902f57de1d2350267e65dc9e902c2c5c4627bc9c3a42e275defad56b8b"], 0x90}}], 0x2, 0x10000, &(0x7f0000001e00)={r0, r1+60000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="a2", 0x1}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001e40)='task\x00') fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, 0x0, 0x0, 0xffffffffffffffff) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/200, 0xc8}], 0x1, 0x4, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000000140)={0x0, 0x8, 0x2, @thr={&(0x7f00000002c0)="5241fa5600a89dfc320965afea92efe07218bc6b126e46aeb8a5a1fe859fc84ac68a4bdad9dfdc3b5f84c00931b4a5d4bf3b0a23c11e340b19d17fa87b75b3a773a877a436a6d5a3b33ef05526e96693f200db213e6075248f69e5f3e2536f9bfb12be751d29079c4f6f67083ded4c0034fb7b636347f469", &(0x7f0000000380)="6b7b68426b738469fcb179c702fe5b62f3fa5018b9a9a5efd85562374c7ce0ee46cdba3c189fb67a256e60c7c9cbc1bff28ffe3733c2c2642b07289a31066e9a492aa2bf50b005a3a9c0e9df8b0aca19b0eae58250d37e86cc"}}, &(0x7f0000000400)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) kcmp(0x0, r5, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) kcmp(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000840)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_SPLICE, 0x7ffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001e80)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) 19:20:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) [ 1083.220072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 19:20:19 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) 19:20:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x80) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'vlan1\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7cee541"], 0xfdef) io_destroy(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x3, 0x8000008000) [ 1083.592905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.623117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.202349] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1097.202349] program syz-executor.6 not setting count and/or reply_len properly 19:20:33 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) 19:20:33 executing program 7: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1], 0x48, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x4eda}, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:20:33 executing program 4: rename(&(0x7f00000006c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040081, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ftruncate(0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x17) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) unshare(0x48020200) 19:20:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0xa69c263b59d167b8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) lchown(&(0x7f00000000c0)='./file0\x00', r2, 0xee00) setresuid(0xffffffffffffffff, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) 19:20:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 51) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:20:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0045878, &(0x7f0000000880)) [ 1097.213016] FAULT_INJECTION: forcing a failure. [ 1097.213016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.215233] CPU: 0 PID: 9425 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1097.216365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.217724] Call Trace: [ 1097.218163] dump_stack+0x107/0x167 [ 1097.218767] should_fail.cold+0x5/0xa [ 1097.219400] copy_page_from_iter+0x40a/0x900 [ 1097.220141] blk_rq_map_user_iov+0x138b/0x1a60 [ 1097.220902] ? perf_trace_lock+0xac/0x490 [ 1097.221582] ? __lockdep_reset_lock+0x180/0x180 [ 1097.222348] ? __lockdep_reset_lock+0x180/0x180 [ 1097.223109] ? blk_rq_unmap_user+0x750/0x750 [ 1097.223849] ? find_held_lock+0x2c/0x110 [ 1097.224524] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1097.225397] ? lock_downgrade+0x6d0/0x6d0 [ 1097.226073] ? import_single_range+0x24d/0x2e0 [ 1097.226827] blk_rq_map_user+0x103/0x170 [ 1097.227494] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1097.228279] ? alloc_pages_current+0x18f/0x280 [ 1097.229029] ? sg_build_indirect.isra.0+0x448/0x710 [ 1097.229862] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1097.230732] ? sg_build_indirect.isra.0+0x710/0x710 [ 1097.231552] ? vprintk_func+0x93/0x140 [ 1097.232204] ? record_print_text.cold+0x16/0x16 [ 1097.232974] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1097.233800] ? trace_hardirqs_on+0x5b/0x180 [ 1097.234522] sg_write.part.0+0x69e/0xaa0 [ 1097.235279] ? sg_new_write.isra.0+0x770/0x770 [ 1097.236147] ? find_held_lock+0x2c/0x110 19:20:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaab4c, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f8", 0x16}, {0x0, 0x0, 0x800}, {&(0x7f0000010600)="f8ffff0fffffff0f", 0x8, 0x4}], 0x808000, &(0x7f0000011200)) 19:20:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0045878, &(0x7f0000000880)) [ 1097.236918] ? __might_fault+0xd3/0x180 [ 1097.237741] ? lock_downgrade+0x6d0/0x6d0 [ 1097.238526] ? _cond_resched+0x12/0x80 [ 1097.239244] ? inode_security+0x107/0x140 [ 1097.240023] ? avc_policy_seqno+0x9/0x70 [ 1097.240775] ? selinux_file_permission+0x92/0x520 [ 1097.241677] ? security_file_permission+0x24e/0x570 [ 1097.242608] sg_write+0x87/0x120 [ 1097.243247] do_iter_write+0x482/0x670 [ 1097.243982] ? import_iovec+0x83/0xb0 [ 1097.244697] vfs_writev+0x1ae/0x620 [ 1097.245372] ? vfs_iter_write+0xa0/0xa0 [ 1097.246101] ? __fget_files+0x26d/0x4c0 [ 1097.246837] ? lock_downgrade+0x6d0/0x6d0 [ 1097.247606] ? find_held_lock+0x2c/0x110 [ 1097.248375] ? __fget_files+0x296/0x4c0 [ 1097.249122] ? __fget_light+0xea/0x290 [ 1097.249846] do_writev+0x139/0x300 [ 1097.250510] ? vfs_writev+0x620/0x620 [ 1097.251218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.252188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.253141] do_syscall_64+0x33/0x40 [ 1097.253828] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1097.254767] RIP: 0033:0x7f8812842b19 [ 1097.255456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.258808] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1097.258832] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1097.258844] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1097.258856] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.258872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.258884] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:20:33 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) 19:20:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0189436, &(0x7f0000000880)) 19:20:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc020660b, &(0x7f0000000880)) 19:20:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0189436, &(0x7f0000000880)) 19:20:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x4e, "6c684f2535a45b9df755211e0d5cfb9e2ddf707a1548f6754a532fdb76f4a1"}}}, 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x0, 0x1000000002, 0x2, 0xfffffffffffffff9, 0xa, 0xbffc}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000040)) [ 1097.477785] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1097.510380] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1097.552067] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) [ 1099.555206] Bluetooth: hci0: command 0x2008 tx timeout [ 1101.602694] Bluetooth: hci0: command 0x2008 tx timeout 19:20:46 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x61026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xa, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./\b\x00\x00\x00\x00\x00']) r3 = perf_event_open(0x0, 0x0, 0x4, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x26) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) r6 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, r6) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) copy_file_range(r3, &(0x7f0000000240)=0x5b2, r5, &(0x7f00000001c0)=0x1, 0x40, 0x0) sendfile(r5, r4, 0x0, 0x9bbb) 19:20:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc020660b, &(0x7f0000000880)) 19:20:46 executing program 7: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getdents64(r1, 0x0, 0x0) dup2(r1, r0) 19:20:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0xfffffffffffffc5c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x8, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x5, 0x7}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000880)) 19:20:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000980)={{0x0, 0x4}}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x7, 0x9}) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') fcntl$dupfd(r2, 0x0, r2) creat(&(0x7f0000000200)='./file1\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200c00, 0x0) write(r3, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) sendfile(r3, r4, 0x0, 0x100000001) 19:20:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 52) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:20:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x3a, 0x31, '\x00', [@ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x8, 0x63, "d4d6c085a5370ed2cb37395ca409945859d98c777dd42148394c855e40ee376e17fad439cb33b622951e5b22c3767e5a683e1dbb8cf8a7d6fbaa68fddecf7f7fe15aea2841271e5d5386298aa0d9d44b053d185c1986b425057fa8e8d1b75261524938"}, @calipso={0x7, 0x58, {0x1, 0x14, 0x0, 0x7, [0x400, 0x1, 0x80000000, 0x100000000, 0x3, 0x0, 0x5, 0x800, 0x20, 0x8]}}, @generic={0x3, 0x58, "93264812769adeb7d90199e24fb7a1f0162eed8877eefedd7f3db62fad7c4241dd2464c133b3f99cbd47cd067416d631c174798aaba51f18640d3eeebe13d847034b412f179155f7c762611c9bf5b32cc12e11de806e75f4"}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x8000, [0x1, 0x8, 0x1, 0x8]}}, @generic={0x2, 0x3c, "4a52de75afd543355aad1e784083b70d62c4de62943a3c3fb4cc021250f06a9ddc2f78a0a569e4969dd4cc56cad51c172b6ca9a8510b255941ddfdcd"}]}, 0x198) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f000001f940)=[{{&(0x7f0000004340)={0xa, 0x4e23, 0x0, @dev, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) [ 1110.844702] audit: type=1326 audit(1707506446.699:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9481 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16bab13b19 code=0x0 19:20:46 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000980)='./file1\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r2 = dup(r0) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x8) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) getdents64(r3, &(0x7f0000000300)=""/113, 0x71) linkat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00', 0x0) [ 1110.874587] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1110.882980] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1110.882980] program syz-executor.6 not setting count and/or reply_len properly [ 1110.895327] FAULT_INJECTION: forcing a failure. [ 1110.895327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.898791] CPU: 1 PID: 9492 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1110.900533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1110.902685] Call Trace: [ 1110.903420] dump_stack+0x107/0x167 [ 1110.904295] should_fail.cold+0x5/0xa [ 1110.905310] copy_page_from_iter+0x40a/0x900 [ 1110.906509] blk_rq_map_user_iov+0x138b/0x1a60 [ 1110.907524] ? perf_trace_lock+0xac/0x490 [ 1110.908582] ? __lockdep_reset_lock+0x180/0x180 [ 1110.909605] ? __lockdep_reset_lock+0x180/0x180 [ 1110.910447] ? blk_rq_unmap_user+0x750/0x750 [ 1110.911371] ? find_held_lock+0x2c/0x110 [ 1110.912141] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1110.913257] ? lock_downgrade+0x6d0/0x6d0 [ 1110.914119] ? import_single_range+0x24d/0x2e0 [ 1110.915082] blk_rq_map_user+0x103/0x170 [ 1110.915941] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1110.916945] ? alloc_pages_current+0x18f/0x280 [ 1110.917908] ? sg_build_indirect.isra.0+0x448/0x710 [ 1110.918981] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1110.920095] ? sg_build_indirect.isra.0+0x710/0x710 [ 1110.921136] ? vprintk_func+0x93/0x140 [ 1110.921856] ? record_print_text.cold+0x16/0x16 [ 1110.922822] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1110.923656] ? trace_hardirqs_on+0x5b/0x180 [ 1110.924449] sg_write.part.0+0x69e/0xaa0 [ 1110.925131] ? sg_new_write.isra.0+0x770/0x770 [ 1110.925898] ? find_held_lock+0x2c/0x110 [ 1110.926578] ? __might_fault+0xd3/0x180 [ 1110.927240] ? lock_downgrade+0x6d0/0x6d0 [ 1110.927960] ? _cond_resched+0x12/0x80 [ 1110.928608] ? inode_security+0x107/0x140 [ 1110.929302] ? avc_policy_seqno+0x9/0x70 [ 1110.929978] ? selinux_file_permission+0x92/0x520 [ 1110.930784] ? security_file_permission+0x24e/0x570 [ 1110.931618] sg_write+0x87/0x120 [ 1110.932208] do_iter_write+0x482/0x670 [ 1110.932861] ? import_iovec+0x83/0xb0 [ 1110.933501] vfs_writev+0x1ae/0x620 [ 1110.934107] ? vfs_iter_write+0xa0/0xa0 [ 1110.934761] ? __fget_files+0x26d/0x4c0 [ 1110.935411] ? lock_downgrade+0x6d0/0x6d0 [ 1110.936103] ? find_held_lock+0x2c/0x110 [ 1110.936802] ? __fget_files+0x296/0x4c0 [ 1110.937482] ? __fget_light+0xea/0x290 [ 1110.938138] do_writev+0x139/0x300 [ 1110.938738] ? vfs_writev+0x620/0x620 [ 1110.939381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1110.940259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1110.941123] do_syscall_64+0x33/0x40 [ 1110.941742] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1110.942594] RIP: 0033:0x7f8812842b19 [ 1110.943218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1110.946250] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1110.947514] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1110.948700] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1110.949880] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1110.951059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.952240] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:20:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4, "255026f247c044dc16b60fac92ad954d"}}}, 0x1b) ioctl$sock_bt_hci(r0, 0x2a08c86aed1ed21e, &(0x7f0000000080)="40b8d4129096538b651163320a4095622790d90cb3f0546181abd1167d198e588469e8d538367de1b2e9d42e2dcb0f356f2d8cf1c314a21ec73bb840aa") ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f00000000c0)="224bcff87b06e9945c720ecedf2d40f03ba51610cdcea067c70a2be59ef5267379e7f29dd41977293f76508c198c6450c977a053f1ad") 19:20:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:20:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010400000000000000000000000005000000ff7f000000000000040014"], 0x24}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)=""/146, 0x92}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000600), 0x38108a8, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/254, 0xfe}], 0x1, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000105) move_pages(0x0, 0x4, &(0x7f0000000500)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil], &(0x7f0000000540)=[0x0, 0x2], &(0x7f00000005c0)=[0x0], 0x0) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r1, 0x0}]) [ 1111.039222] device wlan1 entered promiscuous mode [ 1111.040376] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 19:20:46 executing program 5: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000001400)) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) sendto$inet(r1, &(0x7f0000000080)="b6d6a19956a9e9a214a3aafb0dba53447da71d2b9a99782de78b1c7221bc07c0e50b94ebe22568858ab658703af60e5b3e659c3dab584e3bff3a7c0ea460affbed146c089d0ecd1285c98c4ffdf2d4a2e3af47431bd5ae5e84b4935952a628e4b1713e95d5f79b51d776e5fa7bef7f632a619a1a6577256b541f5b149c55e359672c8db3e6eff92bd95b69492a8428ee7d084bd4c6594733569d7dbca4f080bbd78949f876524358fda094bd9fbeb7ceb3c8281654", 0xb5, 0x4004, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffff74be, 0xffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) 19:20:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 53) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:20:46 executing program 1: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1', "bcce0f854b680ec4cbbe493bb724370a9b942b1296ad6f305d26f4ba7be4bc529a3536992dbbc911727e1770fb812cc600e47e9b64fcd7fec89f96371f1f6b29162575fb05ca05bb28afb8394c90a600b362dfa46d0bad27d7fb281089ac5593727a43865f0520a0239e8b1947471a32482ccfcd13edd23aa3ecccc6095be3b4dad38e4c51eb8e90cac12b65"}, 0x90) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/4096) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x400400, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000001140)={'netpci0\x00', {0x2, 0x0, @loopback}}) 19:20:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) [ 1111.075781] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 19:20:46 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = getpgid(0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x8, 0x0, 0x0, @pid=r3}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000400)='macsec0\x00', 0x10) ptrace(0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x630, 0x11, 0x800, 0x70bd25, 0x25dfdbfd, {0xc}, [@typed={0x5, 0x4c, 0x0, 0x0, @str='\x00'}, @nested={0x1be, 0x3d, 0x0, 0x1, [@generic="c73b3dbb15c1c4d70c4b0cd4f1ff14d76e0c4dbc12ec0e3da5554137d153ab13a25a954ac1111cd4689a894a24a542415f0564b5a88d3deef55fc1e8bf572484de7a467f98b647633325ff64b92246490e2ee7df74e4661d8853d1aebf4936df85da0b613a091b361164bdd1917c002d9d933018698ff6ce8f8b0358a305dc7101a1cb6e309b95c75260aa2616149f17256249a368abcbb1ee5fb45e980ebc855598afe0b3", @typed={0xc, 0x40, 0x0, 0x0, @u64=0x9f27}, @generic="7df1a624d96ada9e830a5d57f4c9dda17df0d4b257b2f8a19395bb1f19ae3c1f781a0699d7ba55e5229670213079918d8c5b855ed70c852aa36295bc66341969a31e9c2982078d254b659fc6", @generic="3dc637ff8cdfc83e40520c16b581fae117265ac1f6e74dd174204fd31b08e97b7411087816b4aa85b55fed4b4d093ff22fbb42160eb6cf3ad2bfb8aa979db0cd0e18990181ab58982c", @typed={0x8, 0x20, 0x0, 0x0, @u32=0x7}, @generic="00d2c77d4f5e28839297001d9e9bb4878d7d346a05c04cb27bf17a6772501a6bf976f1953577a83b6ee5c9e61f6449964d501f83a7e8344ad1128975d6c7299498a712fe77b7a4bc231b39761b46937fcaeb12ee2fee7b8cc41450603081b58a8a3269626694582bc0e2f12c"]}, @nested={0x2f1, 0x48, 0x0, 0x1, [@typed={0xf7, 0x2, 0x0, 0x0, @binary="d79b620656b4b784c8f11345bb778b149a4545b9a04d4340d93a89e06eb0f69865273d9a33de05838d7975e5786a3e4b2ab6835b61cb7443715569ca7e04a9c263d6067c48f2fe036a6c4b01f2efb6a6fe703b9075c801f659bd1796d9f4d38a006be1f32edf891a487f162e6848b0718ebe1a23226dbe613dbf676e59f04dfaa4b1a751dcf84aa33d2111d46595b0115513ff4fa20a3b25ed2d4adfafb789f028077f8fab028e1280553010ff8d08615838da548c9c2d19e92b487fd5acacc9724f843dca2e7e5900f969e9bb2e471ceb79c0bdc0ed8442fd279ab02462c9912fa8e380abefa829584569cabf7784191536c1"}, @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x53, 0x0, 0x0, @ipv6=@private0}, @generic="72cf7b9a0775f34ed84991d76f6750d2071704998a172585295cf754136882c89540f49424d9529f269b234d0a5d13bfc9db121226f463f898da25c130248860d7d67801c91cd04e60cd664342393b8a90f034844a974d7bb29c500c3c79cde87711800757e95a6d4a4006fda7c06606037c9f92bf7736b9408a8bf385f4b468cc193e8e7360aa8251d997b2003f9d02d6f968faae4aee199cc94f9003d0b838a0fe0906e96d269eafc541c475f5c306519dd32c67afff6052aec273ef5c272e19e369c81fe543801c421bc53564acef47c69aaea3cd5e6a9aa4c0b7b9e42b70fb0baa6b39aea7", @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x100}, @generic="f6aedb024a", @typed={0x8, 0x78, 0x0, 0x0, @pid=r5}, @generic="5825f1db0571796a2de243e5681b884090f072cdd1741bd95e85e97f7669e4e633a5050796653e1968dbace8c189ee6a7da8af9cfb1d1b31a2176010289a5747b1f230d4f0b72ecfb8299cd0082b113585a6b719132d94db69225e9dde9faad07cab6a286ad9831bdbb1763a24add58ce575aa5a673d55cf033c62a1dc0ff12d8cf513280342da5c288ed408611ce07df84b8029c75e182c28562b87db6e2caf1e6542beaa024424085ffaa29d73c096d8840d39842ce3b86a2921696d498dfb75ed", @generic="4e452959a65b71eaf0d4d0b646ed8dc933e6fff8d5dcc0"]}, @typed={0x8, 0x48, 0x0, 0x0, @pid=r3}, @nested={0xd2, 0x8, 0x0, 0x1, [@generic="e144b77a24cf1a7b683e55782c2b10a8917482cfa90bf03b337fd69dac6f46167be4246194ce7885790dd4c7fd1e0f95509554e5f29b59235f3a2e7b15b905395ab5299d8f226c76b723a79565385ab971c7ae02c438ecf450b8e6ddaec62d007f259d086f4d5907c1b9b5bbc2843902edb52d906b33047ceba9103faa", @generic="6f06b06dd68231df3e1fecd48bc26f42523367c87fa31937c624f3760a86a4b1291cf7c634f73b4765701683c376c8e16cd36f846c463a4a95049c3f193b2c2867468a8decda53c2bb", @typed={0x8, 0x70, 0x0, 0x0, @fd=r2}]}, @generic="d7a06e7e8d8bd23acf6c1e738c85099fb4bc6677a4e16470681b257cf64cfdf7164bd80b3c029f3488f4082041564f4317a964696c96b42a0c0bb3e2c6cfd15f4a59ad40a4179ba66c2e7e7c5b658ee4408a9f80884aa7e16634190288dc148bfe71562fe543aa2611da00b26a0099cd7311678862a72b2040a7a94dc861057b", @typed={0x4, 0x95}]}, 0x630}, 0x1, 0x0, 0x0, 0x1}, 0x20044040) [ 1111.135434] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1111.135434] program syz-executor.6 not setting count and/or reply_len properly 19:20:46 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) [ 1111.147019] FAULT_INJECTION: forcing a failure. [ 1111.147019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.148222] CPU: 0 PID: 9520 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1111.148926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.149763] Call Trace: [ 1111.150029] dump_stack+0x107/0x167 [ 1111.150406] should_fail.cold+0x5/0xa [ 1111.150800] copy_page_from_iter+0x40a/0x900 [ 1111.151266] blk_rq_map_user_iov+0x138b/0x1a60 [ 1111.151734] ? perf_trace_lock+0xac/0x490 [ 1111.152165] ? __lockdep_reset_lock+0x180/0x180 [ 1111.152637] ? __lockdep_reset_lock+0x180/0x180 [ 1111.153106] ? blk_rq_unmap_user+0x750/0x750 [ 1111.153551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.154080] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1111.154614] ? trace_hardirqs_on+0x5b/0x180 [ 1111.155038] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1111.155600] ? import_single_range+0x24d/0x2e0 [ 1111.156068] blk_rq_map_user+0x103/0x170 [ 1111.156483] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1111.156976] ? alloc_pages_current+0x18f/0x280 [ 1111.157436] ? sg_build_indirect.isra.0+0x448/0x710 [ 1111.157944] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1111.158474] ? sg_build_indirect.isra.0+0x710/0x710 [ 1111.158953] ? vprintk_func+0x93/0x140 [ 1111.159342] ? record_print_text.cold+0x16/0x16 [ 1111.159800] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1111.160314] sg_write.part.0+0x69e/0xaa0 [ 1111.160725] ? sg_new_write.isra.0+0x770/0x770 [ 1111.161194] ? find_held_lock+0x2c/0x110 [ 1111.161601] ? __might_fault+0xd3/0x180 [ 1111.162009] ? lock_downgrade+0x6d0/0x6d0 [ 1111.162437] ? _cond_resched+0x12/0x80 [ 1111.162828] ? inode_security+0x107/0x140 [ 1111.163241] ? avc_policy_seqno+0x9/0x70 [ 1111.163652] ? selinux_file_permission+0x92/0x520 [ 1111.164155] ? security_file_permission+0x24e/0x570 [ 1111.164654] sg_write+0x87/0x120 [ 1111.164999] do_iter_write+0x482/0x670 [ 1111.165396] ? import_iovec+0x83/0xb0 [ 1111.165780] vfs_writev+0x1ae/0x620 [ 1111.166145] ? vfs_iter_write+0xa0/0xa0 [ 1111.166537] ? __fget_files+0x26d/0x4c0 [ 1111.166935] ? lock_downgrade+0x6d0/0x6d0 [ 1111.167354] ? find_held_lock+0x2c/0x110 [ 1111.167786] ? __fget_files+0x296/0x4c0 [ 1111.168172] ? __fget_light+0xea/0x290 [ 1111.168573] do_writev+0x139/0x300 [ 1111.168931] ? vfs_writev+0x620/0x620 [ 1111.169317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.169834] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.170354] do_syscall_64+0x33/0x40 [ 1111.170731] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1111.171244] RIP: 0033:0x7f8812842b19 [ 1111.171610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.173437] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1111.174186] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1111.174892] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1111.175610] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1111.176325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1111.177038] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1111.672207] audit: type=1326 audit(1707506447.527:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9481 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16bab13b19 code=0x0 [ 1111.698012] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 8 (only 16 groups) [ 1112.994494] Bluetooth: hci0: command 0x0c1a tx timeout [ 1115.041502] Bluetooth: hci0: command 0x040d tx timeout [ 1117.089517] Bluetooth: hci0: command 0x040d tx timeout 19:21:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 54) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040)="ec3101baed85aa1da69351124e434f71b0175c6efbd7309d33d0f84a500646c47e2c7e6242884f01294086cde4b84a3de59e1a684154f92ec9d19a5bd74e9e6ec7e7bbb78612d7e19780bdff76a8774be943f571d7982d35bf0d9fce475c0f0c7f216b374bb3dafee45f96272229f6294ba24726a9377119e73275ba605f80dcd61a1600c26e439e83a9fa25cef94d907cf03a9a691b909293d386a3ea0e7369076aad1ba70b1d4fe43496571b6d0b100ddff83562dafd49977805faa44ca142a053986fca13b8d6") 19:21:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000140)) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000040)="ebcc25eff2145efd6875cadbe58e21ddba3d5ac64203c7c9a51f2ae71360c4e27419231dd5d5989ca192714b72913d89e259675e23ab1d5f2533e2ffaac09738de65450b5006b011aa1602e672fa1073f6d909bc3fa7cba5db807932561b1316ec5d811480295e7c4e6b9a38af8ddfb87b25e33f28a3420be9c2764659") ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000880)) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 19:21:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfdef) fallocate(r0, 0x10, 0x0, 0x8000) recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)=""/119, 0x77}, {&(0x7f00000001c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/252, 0xfc}], 0x5, &(0x7f0000000000)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}, 0x10000) syz_open_procfs(r1, &(0x7f0000000600)='fd/4\x00') 19:21:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) 19:21:01 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x400) execveat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000280)='[,:.)*{)\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='+\x00', &(0x7f0000000340)='{(&-,\x00', &(0x7f0000000380)='}/@\x00'], 0x100) rmdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}, {&(0x7f0000000140)="000000000000000000040000d0a9da48497c4915a7449265c083aec0b887f1436e94d809b834d746d7624e3aa856bc7dd500e3cb6b1e7956ce5a6a5ede61e3d3e4da292ebbdfb2fcb2119cc728c9cfb078ec61f7b2dc8d95716dc7a19e3002f2132c64cd22b4703f0799d18ba5f9fb72ad177dc0e6e2ce9622613c67a4023fccaf24862f22908b51c000321bea9644fd5a00"/161, 0xa1, 0x4e3}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="001431d199c71973f41556f5b5e4d4aa6116b12e9e65137cac68e2273c22c349bd6a65fe393f965fd80e0871cca484d2421204272fc30a313350ae934e29eefd5065fd"]) r2 = getuid() write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0', [{0x20, '[,:.)*{)\x00'}], 0xa, "ab5ec34f1f9672c68b19098526cc31ce45cce4002edd5d072be6e3da3852c0c16920844e5bdf517ec67b958387592231f334d92ad1ebf6381a5e2167a4b7310425fde09b2cc6d5d144c4d38288d0e702b6a301b699dc6dff0719921527f8d1f3102dde34b9bbc446851dddef7bb7fffc83a6bf87f12dde3dbb296f9d5d22662908144af58b2a4c098b49370801e0bc2582599c273694adb04636e5281f0b707d04e6f223ec21e2581c4ca0cfc46d4c9488"}, 0xc6) syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x4a, 0x1, &(0x7f0000000580)=[{&(0x7f00000004c0)="447b660c8dc2d7f7782cf1e6ac5f33d81b035dc2629ea91ac4fcf9c28743d15c5f73bf3c77f90a2d5ce9f5e42bc95f6750771507ee2f8bd33ec70a84214d28c8bab17b1c9ccdbb7fc084d1d357dbf64201e8d560d7e2f62896aed858dd496bc976b0de67159bb876855f4393e492187b01a6244a567fe47eaced88a3d297b5840b17b225446c308375a1eb754fac482d6726f507ebcc24a535c83531989f53370b9ce4d4ad", 0xa5, 0x9}], 0x81084, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=within_size,uid=', @ANYRESDEC, @ANYBLOB="2c736e616de6ee959b5d2925262a2d7b237569643d00", @ANYRESDEC=r2, @ANYBLOB=',permit_directio,\x00']) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) 19:21:01 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x800, 0x2, &(0x7f0000000180)=[{&(0x7f0000000100)="c68a0426979c6f5b48067f4e8f4712b2b6e7aec3aee04724cf22cf937420a21672b2e87fd9add61fbd6671b5137a3de802b54cbc35e85417a892bf937bb78783343288824d3cf3076fdc7183485021141ab87923219845eba4ff6326", 0x5c, 0x1f}, {&(0x7f0000000300)="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", 0xff, 0x3}], 0x802042, &(0x7f0000000500)={[{@shortname_lower}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x3ff}}, {@utf8}, {@uni_xlate}, {@nonumtail}], [{@euid_gt={'euid>', r2}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'afid'}}, {@fsname={'fsname', 0x3d, '($^&}'}}, {@smackfshat={'smackfshat', 0x3d, 'rfdno'}}]}) openat2(r0, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)={0x40000, 0x41, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid}]}}) 19:21:01 executing program 2: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x12, 0x0, 0x8f6, 0x0, 0x15b}) preadv2(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/202, 0xca}, {&(0x7f0000001680)=""/190, 0xbe}, {&(0x7f0000001740)=""/229, 0xe5}], 0x5, 0x401, 0x1, 0x19) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) r1 = dup2(0xffffffffffffffff, r0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='[^.,+\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="006966ae3bbc5dee40e42f566c838fbe071c39b86e77264653811008e93019eed69d0422696d96d4a965693f7941d704f8f55f3b953f7a7ae4676dd56aa986f79ccaae09f6edc8e6c45849a0bdf43b5f2634339ea869cde561131969cad592ae8c25183f7ef00e309403c5ee5b308dda231880837b86395327ecaec7e7143fb268a3"]) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000180)=0x2, 0x8, 0x4) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) flock(r2, 0x7) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in6=@private0, {}, {0x80000001}, {}, 0x0, 0x0, 0xa, 0x4}}, 0xf0}}, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x14, 0x24, 0x14, 0x14, 0x7, 0x80000000, 0x0, 0xdc, 0x1}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 19:21:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) [ 1125.295009] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1125.295009] program syz-executor.6 not setting count and/or reply_len properly [ 1125.297343] FAULT_INJECTION: forcing a failure. [ 1125.297343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.298548] CPU: 0 PID: 9545 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1125.299166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.299895] Call Trace: [ 1125.300158] dump_stack+0x107/0x167 [ 1125.300493] should_fail.cold+0x5/0xa [ 1125.300840] copy_page_from_iter+0x40a/0x900 [ 1125.301241] blk_rq_map_user_iov+0x138b/0x1a60 [ 1125.301657] ? perf_trace_lock+0xac/0x490 [ 1125.302035] ? __lockdep_reset_lock+0x180/0x180 [ 1125.302447] ? __lockdep_reset_lock+0x180/0x180 [ 1125.302866] ? blk_rq_unmap_user+0x750/0x750 [ 1125.303272] ? find_held_lock+0x2c/0x110 [ 1125.303640] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1125.304120] ? lock_downgrade+0x6d0/0x6d0 [ 1125.304489] ? import_single_range+0x24d/0x2e0 [ 1125.304902] blk_rq_map_user+0x103/0x170 [ 1125.305269] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1125.305689] ? alloc_pages_current+0x18f/0x280 [ 1125.306099] ? sg_build_indirect.isra.0+0x448/0x710 [ 1125.306543] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1125.307010] ? sg_build_indirect.isra.0+0x710/0x710 [ 1125.307439] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1125.308288] ? vprintk_func+0x93/0x140 [ 1125.308637] ? record_print_text.cold+0x16/0x16 [ 1125.309064] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1125.309507] ? trace_hardirqs_on+0x5b/0x180 [ 1125.309901] sg_write.part.0+0x69e/0xaa0 [ 1125.310261] ? sg_new_write.isra.0+0x770/0x770 [ 1125.310664] ? find_held_lock+0x2c/0x110 [ 1125.311030] ? __might_fault+0xd3/0x180 [ 1125.311376] ? lock_downgrade+0x6d0/0x6d0 [ 1125.311749] ? _cond_resched+0x12/0x80 [ 1125.312189] ? inode_security+0x107/0x140 [ 1125.312653] ? avc_policy_seqno+0x9/0x70 [ 1125.313022] ? selinux_file_permission+0x92/0x520 [ 1125.313447] ? security_file_permission+0x24e/0x570 [ 1125.313892] sg_write+0x87/0x120 [ 1125.314196] do_iter_write+0x482/0x670 [ 1125.314536] ? import_iovec+0x83/0xb0 [ 1125.314877] vfs_writev+0x1ae/0x620 [ 1125.315206] ? vfs_iter_write+0xa0/0xa0 [ 1125.315551] ? __fget_files+0x26d/0x4c0 [ 1125.315904] ? lock_downgrade+0x6d0/0x6d0 [ 1125.316272] ? find_held_lock+0x2c/0x110 [ 1125.316634] ? __fget_files+0x296/0x4c0 [ 1125.317002] ? __fget_light+0xea/0x290 [ 1125.317347] do_writev+0x139/0x300 [ 1125.317661] ? vfs_writev+0x620/0x620 [ 1125.318000] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.318457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.318923] do_syscall_64+0x33/0x40 [ 1125.319246] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1125.319691] RIP: 0033:0x7f8812842b19 [ 1125.320032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.321615] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1125.322280] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1125.322899] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1125.323518] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.324154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.324771] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:21:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 55) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x409c2, 0x0) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x1f, 0x20, 0x0, 0x0, "021cf26c869ae89aa95ea97da76096c81ee1baeff9c5cad316ed45e56eaa54"}}}, 0x27) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0xe1, 0xe0}, 0x2) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) fallocate(r2, 0x1, 0x81, 0x7) [ 1125.382584] EXT4-fs (loop5): unsupported descriptor size 47296 [ 1125.481138] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1125.505499] print_req_error: 998 callbacks suppressed [ 1125.505536] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1125.520271] EXT4-fs (loop5): unable to read superblock [ 1125.523291] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1125.523291] program syz-executor.6 not setting count and/or reply_len properly [ 1125.543065] FAULT_INJECTION: forcing a failure. [ 1125.543065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.545379] CPU: 1 PID: 9582 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1125.546469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1125.547781] Call Trace: [ 1125.548217] dump_stack+0x107/0x167 [ 1125.548804] should_fail.cold+0x5/0xa [ 1125.549417] copy_page_from_iter+0x40a/0x900 [ 1125.550128] blk_rq_map_user_iov+0x138b/0x1a60 [ 1125.550862] ? perf_trace_lock+0xac/0x490 [ 1125.551519] ? __lockdep_reset_lock+0x180/0x180 [ 1125.552265] ? __lockdep_reset_lock+0x180/0x180 [ 1125.552999] ? blk_rq_unmap_user+0x750/0x750 [ 1125.553704] ? find_held_lock+0x2c/0x110 [ 1125.554360] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1125.555200] ? lock_downgrade+0x6d0/0x6d0 [ 1125.555851] ? import_single_range+0x24d/0x2e0 [ 1125.556585] blk_rq_map_user+0x103/0x170 [ 1125.557232] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1125.557973] ? alloc_pages_current+0x18f/0x280 [ 1125.558689] ? sg_build_indirect.isra.0+0x448/0x710 [ 1125.559494] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1125.560343] ? sg_build_indirect.isra.0+0x710/0x710 [ 1125.561136] ? vprintk_func+0x93/0x140 [ 1125.561758] ? record_print_text.cold+0x16/0x16 [ 1125.562501] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1125.563297] ? trace_hardirqs_on+0x5b/0x180 [ 1125.564005] sg_write.part.0+0x69e/0xaa0 [ 1125.564654] ? sg_new_write.isra.0+0x770/0x770 [ 1125.565385] ? find_held_lock+0x2c/0x110 [ 1125.566038] ? __might_fault+0xd3/0x180 [ 1125.566668] ? lock_downgrade+0x6d0/0x6d0 [ 1125.567341] ? _cond_resched+0x12/0x80 [ 1125.567964] ? inode_security+0x107/0x140 [ 1125.568621] ? avc_policy_seqno+0x9/0x70 [ 1125.569265] ? selinux_file_permission+0x92/0x520 [ 1125.570051] ? security_file_permission+0x24e/0x570 [ 1125.570843] sg_write+0x87/0x120 [ 1125.571389] do_iter_write+0x482/0x670 [ 1125.572020] ? import_iovec+0x83/0xb0 [ 1125.572633] vfs_writev+0x1ae/0x620 [ 1125.573212] ? vfs_iter_write+0xa0/0xa0 [ 1125.573840] ? __fget_files+0x26d/0x4c0 [ 1125.574472] ? lock_downgrade+0x6d0/0x6d0 [ 1125.575127] ? find_held_lock+0x2c/0x110 [ 1125.575785] ? __fget_files+0x296/0x4c0 [ 1125.576446] ? __fget_light+0xea/0x290 [ 1125.577070] do_writev+0x139/0x300 [ 1125.577635] ? vfs_writev+0x620/0x620 [ 1125.578244] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1125.579072] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1125.579893] do_syscall_64+0x33/0x40 [ 1125.580491] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1125.581278] RIP: 0033:0x7f8812842b19 [ 1125.581859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1125.584682] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1125.585860] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1125.586956] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1125.588056] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1125.589149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1125.590244] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1126.129801] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1127.393494] Bluetooth: hci0: command 0x080f tx timeout [ 1129.441501] Bluetooth: hci0: command 0x2037 tx timeout [ 1131.489496] Bluetooth: hci0: command 0x2037 tx timeout [ 1133.537507] Bluetooth: hci0: command 0x080f tx timeout 19:21:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) 19:21:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:21:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000040)="fd13acd66d1ba54d7af974bdc9925f3a5043f6e5750cc418bcb4db181d2a23fc1891810e0c8600") 19:21:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 56) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:16 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004f8c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="07000000000000003f00000000000000050006000000000000000003000000000000ff07000000000052020000003f000000ffe8ffff800000000004000010010000ff7f000000000000010000000000000000000100000000001800f8ff00000000000000004400"/122]) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='macvlan0\x00', 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "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", "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"}) [ 1140.666613] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000003e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}], 0x0, "e6a2e51d013042"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/netlink\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x100000000, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x9, 0x5, 0x9, 0x0, 0x9, 0x210, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x10001}, 0x40, 0x9, 0x0, 0x0, 0x80000001, 0x9, 0x4, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0x2, r2, 0x2) readv(r2, &(0x7f0000001940)=[{&(0x7f0000000240)}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/254, 0xfe}, {&(0x7f0000000700)=""/134, 0x86}, {&(0x7f00000007c0)=""/115, 0x73}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_mr_vif\x00') syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:21:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, 0x11, 0xc21, 0x0, 0x0, {}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}]}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xffffffff}]}, 0x28}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {}, [@typed={0x25, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x378}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}}, 0x40000c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, 0x0, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r4 = fork() fork() move_pages(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = fork() move_pages(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, 0xd, 0x6, 0xf03, 0x0, 0x0, {0x9, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) [ 1140.678270] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1140.678270] program syz-executor.6 not setting count and/or reply_len properly 19:21:16 executing program 5: setreuid(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x1eb4, &(0x7f0000001040)={0x0, 0x0, 0x2, 0x1, 0x391}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000010c0), &(0x7f0000001100)) getegid() syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 19:21:16 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000000000000000085dd6096153f0030"], 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x8, 0x0, 0x7, 0x8, 0x0, 0x401, 0x24144, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x10004, 0x0, 0x6, 0x5, 0x200, 0x0, 0x4, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0xd}, @val={0x2, 0x80, 0x8, 0x5, 0x0, 0x9}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private1={0xfc, 0x1, '\x00', 0x1}, @random="f42ae5941ea0", @dev={0xfe, 0x80, '\x00', 0x44}}}, 0x42) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000200)={0x14db}) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) [ 1140.687226] FAULT_INJECTION: forcing a failure. [ 1140.687226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.691855] CPU: 0 PID: 9597 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1140.693047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.694433] Call Trace: [ 1140.694885] dump_stack+0x107/0x167 [ 1140.695509] should_fail.cold+0x5/0xa [ 1140.696164] copy_page_from_iter+0x40a/0x900 [ 1140.696921] blk_rq_map_user_iov+0x138b/0x1a60 [ 1140.697705] ? perf_trace_lock+0xac/0x490 [ 1140.698408] ? __lockdep_reset_lock+0x180/0x180 [ 1140.699193] ? __lockdep_reset_lock+0x180/0x180 [ 1140.699979] ? blk_rq_unmap_user+0x750/0x750 [ 1140.700732] ? find_held_lock+0x2c/0x110 [ 1140.701430] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1140.702328] ? lock_downgrade+0x6d0/0x6d0 [ 1140.703024] ? import_single_range+0x24d/0x2e0 [ 1140.703801] blk_rq_map_user+0x103/0x170 [ 1140.704502] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1140.705308] ? alloc_pages_current+0x18f/0x280 [ 1140.706082] ? sg_build_indirect.isra.0+0x448/0x710 [ 1140.706945] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1140.707839] ? sg_build_indirect.isra.0+0x710/0x710 [ 1140.708690] ? vprintk_func+0x93/0x140 [ 1140.709349] ? printk+0xbf/0xf1 [ 1140.709921] ? record_print_text.cold+0x16/0x16 [ 1140.710710] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1140.711559] ? trace_hardirqs_on+0x5b/0x180 [ 1140.712315] sg_write.part.0+0x69e/0xaa0 [ 1140.713010] ? sg_new_write.isra.0+0x770/0x770 [ 1140.713790] ? find_held_lock+0x2c/0x110 [ 1140.714483] ? __might_fault+0xd3/0x180 [ 1140.715156] ? lock_downgrade+0x6d0/0x6d0 [ 1140.715874] ? _cond_resched+0x12/0x80 [ 1140.716541] ? inode_security+0x107/0x140 [ 1140.717247] ? avc_policy_seqno+0x9/0x70 [ 1140.717930] ? selinux_file_permission+0x92/0x520 [ 1140.718752] ? security_file_permission+0x24e/0x570 [ 1140.719601] sg_write+0x87/0x120 [ 1140.720191] do_iter_write+0x482/0x670 [ 1140.720855] ? import_iovec+0x83/0xb0 [ 1140.721511] vfs_writev+0x1ae/0x620 [ 1140.722130] ? vfs_iter_write+0xa0/0xa0 [ 1140.722802] ? __fget_files+0x26d/0x4c0 [ 1140.723477] ? lock_downgrade+0x6d0/0x6d0 [ 1140.724185] ? find_held_lock+0x2c/0x110 [ 1140.724893] ? __fget_files+0x296/0x4c0 [ 1140.725582] ? __fget_light+0xea/0x290 [ 1140.726252] do_writev+0x139/0x300 [ 1140.726858] ? vfs_writev+0x620/0x620 [ 1140.727512] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1140.728406] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1140.729285] do_syscall_64+0x33/0x40 [ 1140.729915] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1140.730780] RIP: 0033:0x7f8812842b19 [ 1140.731415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1140.734489] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1140.735766] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1140.736975] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1140.738165] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1140.739357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1140.740557] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000880)) 19:21:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1140.754060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9607 comm=syz-executor.2 [ 1140.767137] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 262175 (only 16 groups) 19:21:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 57) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = timerfd_create(0x8, 0x800) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 19:21:16 executing program 5: io_setup(0x5, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4000006}) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x505142, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7f, 0xb4, 0x0, 0x0, 0x0, 0x5, 0x21014, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000000080)}, 0x280, 0x1000, 0x4fc2, 0x1, 0xfff, 0x7fff, 0x8, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0xe, r2, 0x8) io_submit(r0, 0x1, &(0x7f0000000800)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340)="d0", 0x1, 0x8000}]) [ 1140.962248] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1140.962248] program syz-executor.6 not setting count and/or reply_len properly [ 1140.967075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9607 comm=syz-executor.2 [ 1140.983264] FAULT_INJECTION: forcing a failure. [ 1140.983264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.985049] CPU: 1 PID: 9633 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1140.986035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1140.987229] Call Trace: [ 1140.987622] dump_stack+0x107/0x167 [ 1140.988167] should_fail.cold+0x5/0xa [ 1140.988730] copy_page_from_iter+0x40a/0x900 [ 1140.989384] blk_rq_map_user_iov+0x138b/0x1a60 [ 1140.990057] ? perf_trace_lock+0xac/0x490 [ 1140.990662] ? __lockdep_reset_lock+0x180/0x180 [ 1140.991339] ? __lockdep_reset_lock+0x180/0x180 [ 1140.992014] ? blk_rq_unmap_user+0x750/0x750 [ 1140.992678] ? find_held_lock+0x2c/0x110 [ 1140.993285] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1140.994055] ? lock_downgrade+0x6d0/0x6d0 [ 1140.994649] ? import_single_range+0x24d/0x2e0 [ 1140.995317] blk_rq_map_user+0x103/0x170 [ 1140.995912] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1140.996619] ? alloc_pages_current+0x18f/0x280 [ 1140.997282] ? sg_build_indirect.isra.0+0x448/0x710 [ 1140.998022] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1140.998793] ? sg_build_indirect.isra.0+0x710/0x710 [ 1140.999521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.000288] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1141.001070] ? trace_hardirqs_on+0x5b/0x180 [ 1141.001718] ? vprintk_func+0x93/0x140 [ 1141.002286] ? printk+0xe5/0xf1 [ 1141.002777] sg_write.part.0+0x69e/0xaa0 [ 1141.003375] ? sg_new_write.isra.0+0x770/0x770 [ 1141.004043] ? find_held_lock+0x2c/0x110 [ 1141.004655] ? __might_fault+0xd3/0x180 [ 1141.005234] ? lock_downgrade+0x6d0/0x6d0 [ 1141.005852] ? _cond_resched+0x12/0x80 [ 1141.006418] ? inode_security+0x107/0x140 [ 1141.007015] ? avc_policy_seqno+0x9/0x70 [ 1141.007604] ? selinux_file_permission+0x92/0x520 [ 1141.008317] ? security_file_permission+0x24e/0x570 [ 1141.009048] sg_write+0x87/0x120 [ 1141.009548] do_iter_write+0x482/0x670 [ 1141.010123] ? import_iovec+0x83/0xb0 [ 1141.010682] vfs_writev+0x1ae/0x620 [ 1141.011216] ? vfs_iter_write+0xa0/0xa0 [ 1141.011791] ? __fget_files+0x26d/0x4c0 [ 1141.012386] ? lock_downgrade+0x6d0/0x6d0 [ 1141.013014] ? find_held_lock+0x2c/0x110 [ 1141.013623] ? __fget_files+0x296/0x4c0 [ 1141.014238] ? __fget_light+0xea/0x290 [ 1141.014814] do_writev+0x139/0x300 [ 1141.015364] ? vfs_writev+0x620/0x620 [ 1141.015922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.016724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.017483] do_syscall_64+0x33/0x40 [ 1141.018052] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1141.018830] RIP: 0033:0x7f8812842b19 [ 1141.019398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.022165] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1141.023316] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1141.024401] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1141.025474] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.026548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1141.027621] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:16 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdddf25120000000c0099001f060000530000000a000600080211000000009c0500740002000000"], 0x34}, 0x1, 0x0, 0x0, 0x24040091}, 0x40000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x8001) setsockopt(0xffffffffffffffff, 0x80000001, 0x0, &(0x7f0000000000)="d6547e36fc54c90660b7476ebee6fc625172f9fb41501b197b5f3f70983636a6339e1e85d66136c9ab9c4c4ac9f47e62e803b9ef933f94e7743dd3f042e684ce17f03e969718e964ee18366ffdfce76af1d45d6363a4174148eed0ed680f244413688cf5740d20bfec520e6a149e3680f24f23ef267afc48c0982fa7", 0x7c) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="d4353902a8fc482a86ebe2be6558", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x110, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x400c080}, 0x40004000) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x14, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r2, @ANYRES32]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1141.058096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 19:21:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000880)) 19:21:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:21:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48500, 0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x6, 0x5, &(0x7f00000006c0)=[{&(0x7f0000000300)="90790d6e8b6d3640391e5b8907c6747a6050b5dd766b5f95eda1177253eb4f3cd2ed96a66d05a7073e7c0c12eada587a4244c366d67c432a3a39d6088a414dd317b353cfbf91b3c0c0b36e8e7dea83aff330ad876519bf98045538112be830f964545ff38d0d71b7844fd9ef0ae55530372e9dd7c284ec752cb0b5519f256d01987d974d5ac06953d91d183b88f01ec9e6c543f069a4cced71e75eb28f124af49209e0130a039d9820810ab27934973bbd607bffc365cf", 0xb7, 0x3f}, {&(0x7f00000003c0)="5903028ff7708b860a9d5147af1d1c45cbcecedb1df371a72de970d4290d7639bdd92d32c2a3c41ea4856f51bebc6f76b4e401b07b643e01e795360c85011cd2ed56663b5e0857bc6be108a4c5465848349147cc346ad8b5b66eb6f443cc6d61742a375a4d210f3799021580453a7ec84b50539418340edadc5cf88131ba55c3d432b4e9325b65f4e843917687a15477bfefd527171362c5734c0811786f205e6ecd6cd992b9b9c143d0cd71f66882e5ff38c3dfc00a49edc11b635c8933e2d08d189c90302927f9cb54dfef4316c51dfe", 0xd1, 0x9}, {&(0x7f00000004c0)="d3622da48fcded47de3b94e8f2fad7b08ac13cad2ea02b3e7caeefc6e7e6a28cf8883e55a8f2a96dbeb928bef254c39db0bce7261ce2dda3c41283b9f26c64385dc765", 0x43, 0x8}, {&(0x7f0000000540)="e30e0996df1581bb1cdb8ef7425559f51f18d6bbe6a94adc7e29fa76206384652bebf006cb9f44a07a5f0dd09a30073ee7e91dd46ae215b13732c357868457913c637681f85de4a44991d4a8b1e5b83f4029cbcd7781640632244abe93a9179ff7ae7a014c75b0a11486680360ae7436330dc8a737feb7", 0x77, 0x3}, {&(0x7f00000005c0)="f1cd5d60944e549ce4cfd50fd7ece980ae23aae244f14fa7625b43215c46a455d396de30e567118769cd2d4d37e2ad2515507e720c73536133a25c693191eadcd152c5f16498f61bf642f0ab8e137ce1778cc2f901b193db06c3d368955e9a9092dca27cd4589d26dcd277483bfd22e19c5b91eb42dfc9f04e660d864b8ae376205b60dd795cbf3d557502eed05a3ddff770684db2d58350fce06eabedd9ecd45f39082a1b7454072b548ef85e92b2dec4ff65ef50bfa1af077767954d61a2f33409cedf59a95a758066f8e750e09d5152266d5957e82826475478739e4ae16ebfe67202", 0xe4, 0x3}], 0x818404, &(0x7f0000000740)={[{'%[\\'}, {}, {}, {'^'}, {'$){^'}, {',\xf8^#'}], [{@measure}]}) r4 = syz_open_dev$mouse(&(0x7f0000000780), 0x0, 0x98000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = timerfd_create(0x7, 0x0) timerfd_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000080), 0x0) r7 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x4800) sendmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="32d51d7b751fd07a", 0x8}, {&(0x7f0000000100)="6f26cc84e8b1be09579f7e171329ebd821d34854d012b38c54a2e9f136dabfd93b2b0b549f01aacb7738e53c9ab505d46e80cc7d3c7b099613829a28fd7b5ce06df35867a30d56272e39f2779faffc5db43b97db9bd98088108b5344fd291555cea5029032e49c50554e7b1119f3871ce5e6d3db9fef5f67bc4bf57875d583fcc842f3905ece15d77ff355c7f04ff2b97fb76275f3acd6bcc78ff4c4db15e8ac153f2d78eba4da8d326abace35df1f3745eaa4f943e52b38f8baa8b863f40db147ea408a676142b8e529014b981434519182e275618a5845562a1f92402b0e5dab1ca94d8e842eeedbdbdf64e57857cb", 0xf0}], 0x2, &(0x7f0000000840)=[@rights={{0x28, 0x1, 0x1, [r2, r3, r4, r0, r5, r6]}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}], 0x68, 0x90}, 0x24040081) fcntl$dupfd(r1, 0x0, r0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a00)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000900)="d749ebea98f605ef4201f207052dcab5841483dbce8778f926f012e0cf18d03354674340ac2272ca15e152886edf8cf3df9de66fbd5c594977e31d910b83e9496c64a9fa7794602b44afb8ee676b8cf44412cb4a5c1ab8e739606961b8e762fc87fc7b4518f31ede1c9ff3f9f1d810d2712ee4702755a521601d63d5be54ed8e2864dbf2babe46bad2c58249c46965e760547b15bc6c8745f068b31a8296442e0114bb891e978bb76f6d0fef1c6d34268b5bc1ab21cc929d1d93d319e55ab0250848ffcda6db14ee8cc5ce58237e19bbf0a6f1ce4f8afb88c36512a88b534f3ca0616dbdfc49", 0xe6, 0x140, 0x0, {0x0, r9}}, 0x10000) [ 1141.122638] nfs4: Unknown parameter '%[\' 19:21:16 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid}, {@msize={'msize', 0x3d, 0x101}}, {@access_user}, {@debug={'debug', 0x3d, 0xfffffffffffff597}}, {@access_any}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r3 = getpid() pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8, 0x3, 0x1f, 0x9, 0x0, 0x8, 0x200, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140), 0x9}, 0x1200, 0xdd28, 0xffffffff, 0x1, 0x1, 0x101, 0x6, 0x0, 0x902d, 0x0, 0x9}, r3, 0x6, r4, 0x8) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', r5, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) creat(&(0x7f0000000100)='./file0\x00', 0x15) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1141.229552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1141.374036] Process accounting resumed [ 1141.417042] Process accounting resumed 19:21:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000007ffffffc) 19:21:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000880)) 19:21:30 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000040)={0xc88, "bd0909452df9395f5c4dd12db809e1d814954947b4ea15e4ac4b390502ce23368ac6415353cbe75860b4ce4a7a26092e0ba9eb446037f8fa6b97a4ac775bdc6a06e9e82a3cee597c102e0a7ad5eb24449ba8f156c9e5b4a3df95c07cc839fb04c0a77a6c5661b5d098079e0988a5ee619bacd9cf8b807947062359e360a8156bf524542c3c6c5fbc19053702d05ef0988e9f02a11ad16248c119c9749b487d2c624a7cc2a832efa9d36f14a137b2a4d78665b27653a6472986318d4d671b02e390352f67d79059f52494553e5431f7db6fe63806a3ff46bce64e12c61803a7d673d8b341d622f551936986f072a5063dc14f7f0061e6a66e40dc5af97e9ee56f544d8dde9cd24b009b5f9f138b2eb9d4ca26e5b90862951683db10c99c28864ab95d2a61e68d35d4393ac54c8d2d37893b17a4225d98a4b094378d138a6fd56d0a05747d7ac45fbe05aa960d43ffcc1ed15aca9bd68acccb4b20947cce405e40bb67d433cc00c1d92df987f805cd86e930b8060ee39bb01778fc7e09ba1b8a23cb39be21e57fd6b3faec9bd5349446ded31d2c03ccc62763dcb7453807e8711bd473a8eccfc34355bf69b87c81109e7052bad0cde81102c56b0ba1677c6d132bd233464a996a520608ce6c8cae133661c0b30df5d359c7c26ae9d91c47b4d8a9497047918e5305433de3c9bcc19cfbd5d429bce878cf769ae1c1379f8c74826611467397e7bb407b07a5098cf8d98e89fdea9a3ed8beff2b9b0369e17fa8d21a6a953626c1110f9a954c9828ae092cbad7e1af9d942f74e1f691b60dcb5e3cbcb92ee92182c5aef2ae8ea3f89deaa31aec9b4447e8ed22baeaaabdc67ecedc8a27da9ff8950fe928181d4e4c85af1973d505af881ee1e46e2467ff8ac7290310af720b59dacaf311cb4746f930c44996cdb77d1f59dd7a424b9e99133011ff4cc7bb4869f125423791e7321b232c2c0cc4c6c971d1846722eb80e580b57c155e17cc27272e9de29bcc0a142a0d6aceaed7ab03d1cb13b1592a61b1cc34c47f2c8615df4a613216e1c8a2ecaa7a374d66494b126262f09cc75c065864043ec85e2051eb651a6879490af6636e52304c09cbc3bdc73e2fe5c6ad95f371a8fabc1fbf2d5172ce31b324c0f041be1277834101a39cd92607cdf6e9a813b12b55df9f928b2386c08a80074b7d8228b3d29cfd0c382e4a082833efcf088821968259f768797ae11a33edbd198abd48f537a3a7b00c94a75b2a266d0429e6ea750cfad2d00067951653b51ea9e9b48db8ffb23f28549468f27e7b8748585bd0690532549b4234f8e3b99c7fede1acdc12fd2fd0a791571ff3bdf08e582563005b826ce87498fa9572935d951c7378ea4e3c6546161edb0ac2dfb45b984b14ce45988e9ae895cde851a2c6ac45c536e6617aa25249b318ac118996f2980ddaf492eb5322daf137e225a5465b301483d975a2af1a19f01ed4761d2de554ab5edfdc655b1e3d120e56319135ed941921a185df5c7cd2cd2325cb96f31e0e990d8973ea20cdb148342a2c2b4b0bd9b264d54d272bb4c94e739b56372462c9821d0e9d3638ad4480d0150649a43b94d99480fb250c57e102b752a01a5f89c1836b3df1c7520d3ce63255b96bc5bcba9d5194f4a2c6d2b4809dfbc58a35acb05ff77fecf4bc6c6d1276162da1702916eb51f8bb0c1f1ef0e08a1de60673872aaaa82aabef8756ab468aed2fdde609aba672e9b075f541ed24211877560181fc1cfd3f13524d15b82278b5d5b5f180a2de4544938f2e5c5165b527c6cbe4114aded867f760c7690e921c0ad153c027d9ca28fe20bff817e9a36209668dc831db169539558b01c7e741174c7158b9f9f069d66c4aab1432ca40e3d969e3ea5f4f46e55565040be292b2188457e177bbc1fa4388c1c1516918c3aa971bc9f3a7113217691416854b05b4b38e03cf802e592cf16f3ee93f047101480e45ec0f51d1874a3c7bb744cc8433748683543e1f7903427db4750853b0d9c0595d8661ae64cd4e7dead341585dd7075e86459280293288aa5288f2c8a49b5d7f3f619040319f0de87b150487976ac2a451d4c38d11e7f39d624e9638633feee517564bea329191e8f5ab47c64155b9386c2c75aa6ab0a9b53ec691756a4c8b6a34503d39d8feafae49c5e4ca9f865e98e0624bd1f3f7baeb6526306efb66b10fc8c2e2184c3dcb84818da76db0e339d49cc322e4a55401e375bbd218e5c34bd92c26b3514404381c04d945fcc89728357b308f2f25862c47d008575595aa5e290deed410c99cefd67414e42b5a4fa5d03c612424bc950b8c0bc3319f3b238929ab31b4d5dab70cced499087c167f58799f7bd9a46af229d01bd7341799a7583f1d77734db8878db668d542ba9ce503ed85a8913b60c9a29ca415880aa7d1735d95aaa85c03464025e18b36374974b163c8e39d2419c620080e886ce5894fbc62bfb05d85117c25e565b45bd31f9695a750dc1205888426858abc7dfc47df517ec2a1d82509613095aafa32ff87e063b90ca47953252af66bbb68e3d4ab29a3449e53e9757c9b2165daed7ddcb58553e0edaecc8dbfbf267cf976cf9591d2fbb02b9d441e00a2931535c2d08a3b5e78208f1da6562f8a48cbac333697627ebfef016042da0dfdee23a7977166e7b2b42f7cce15addbf19a10956c2ccdcfbd580c5d0493003a52ce61180d8a19e05370fa82642aa43eb1235679e8ccd2bdfa59c25d89da28ea50488fd427bac6c9b12cb02194323448fc0f4e77b93f5a7d477c1eb67850a36d7732b6b22a618dbf5a5f772d16d90189f5b57f0f218fa7389182f64fd7346eab64039bc05254f118fed540b7fecfd78953fad95a6d080cace0eff22eb18b77d2d6011059cc14dad34e3ed7c455220157920c831e9cc3d69ae460a21a9ce5abf233127280bff07a3e6dcef41862e1fb5d703983b37026e01ba46a6b363899ff1f51a71c28413d11ea4b0a68dca147afcfaa58d2dbc7383ad7c6c9ad71cc577f54df38919090fdd51dc0169f524d3135d1c8e8534ad8056ccc99c27cf25fe762eba6761b9d3cd9ddb00992f5cf7fe938543c35441cea2570dc2c2d9c2135b56fa976cd2830bee4956ae630d4f2ecb8ffaf179718972c7c507027db3a9ef6a4fcd037d283635be59aaa2317b880db9c0d3879043e7ae3c99db048840aa8e1ebb4b895c38919179ea527900b2271297c9f61d5341f73f46aee99703df2b82a4b875e160962ae9c27a4f1b0cd749bc0edeb407572a526e1d7bcac47abd4816cb1264898b7ee0e55d40d4b4c482886b8c1fe72133b20faeda57ac9fbd08da475e8f27782559e380f444577b14cbb48493d218345d732d8a53e84f13bcacd09b5c65111004002cd0ec6bf1b3b7fd552eb207da94b4af4fa7364a9fec104b5f33bc2aed0f32dc341c8b4bbf2207aaf2bbeeca721122370926dd26bafacb9bd92149eeadbe8516b06ec7560ce554dbcbac78ce5f9f1417a5b6655471329d5313534c7c6fd9d3b3fb00892640225575708b3a47fed6b4767f09029b457032f75bd14dbd75f07da1c4b04fca9f02043066fd3862a65dcec3d72e6ea5ba0815268ab4c5267efa96409462dbb33a0c6215f87eb5e93846d65811ceef7a5eb6dcf84eceb645b62722b24d0886e97160bbed8ea5b6e3b1bfd17c70f9dfd0c9ece429800bb266c6376aefc734fdebe789f3c878b744c7146725caf0b401bf12666a37a6dd3c110f8855630feed8012d22f128f222cb71ee31e835e9f91e561a47bdd9a71379713b0bbbdcbb4eaeea216cdb51c18d437201e0a77e13367a9d05f5d8cb0e8c5bd0cf8c92e4bb1cf7ebcb6ba14965edac36e9433ba2c333f264d279702be881246e0c53282d20a593b73072ac8277e6669988ee6f08617b6755ffdc4a24ab6f0168f266486e5a4ca6ddabde9f8fff5a74d2f13954bf6077175d8d51ebd643c254230a133041cfb577c5441d0564555644c017e86c2fb36c37d2c5b7b00bf562be72eca56f1c8dc0188a1c903264f5f89f99dd467b1a50899251fdf9b1667bad60f26d0df8730dead43249da9f0b4c27c5a8842989521f0dd3e782fb692f4b1d6fcab884fd40b4b33e50ca1f3da3f3b5abf02856a2a7d12d6a92c597d0394fcd452ffb69b0c91b3739e30adeda3645232360926ebdcb8b85964b79ee75a5a9200c7aea273a8aff078ad2081ab18d4fa25e64152cffb07f1f0546ff781871e4c252cd46fd436883bfaff4288a66d54a9a88ff02c0f267d456f033a340cdfbc6341143a8bbca9324ecc7167807774cd08a39738a14ad4195276351d8677a78b1394912817640152e37cd2432e22da772cc90a3c21e3ad6083519e8f7e17028b791c2b499eb9c57304c9278051b3d30973faabd49912bee15805b6dfa5f879e4643a6158a4ae84fcaa0443163f23a1853a41017503bd1cfa17c908e3a5f0129c0114e34a32a6a1dc4fac11de3e50151adf0f6a8018edd0f1f942d9d17a7078c72b9fb52174b18ffa05816dc0371856eeef6a106e"}) pipe(&(0x7f0000000dc0)={0xffffffffffffffff}) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) pidfd_getfd(r1, r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000d40)="71a7e8b435f29b3ad31d560b1b3e43bb1e7dfa79165ce0ed0668cb9cddb312bd5433a83bb990920e4e03faf38a3da8ce9e71979d32047ba52577c0fe52447c343082ff8174488cfd7c1cc839b2ab56137a0aefd573f9118b4bdabf8c") r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000d00)) 19:21:30 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="e300600078af5f6132d8f13ea0aa1f94d2795bf7c94c7aca20adec6a1192fd0f45c6eb5aa724bf3de579214173a6b69c7322229691976530d25f45e0828e8d89ff1af6ad1dc2953d150cec22049709b41f20b0acd5fe6eefd69ca7ae9dad151c01359a831577a163cedf40211e79c5829965fd2ef83c45f16010a9cba86f476697a478723903a3913ebec11131536bbcccb8bc31c51207e80411bed8a083761cb2cd8fb0b9193b17913a3600581ca11a057f2207a5d1dda02f6c4e44bb2b4c2719364097", 0xc4}, {&(0x7f0000000300)="6d8b06012edd4868b23423b98ec65b6f206f4998b000c7348cbae520f2011ce5ba0bbd23d4f537ecd17be1330f3ed18b4b8f55c5620c07e6a0ed653599c8f7035ffa50f4a8462d1d831fc4070b0083f5767247860806133eafe2889e26d68f17f50393d9cb363743cab1d76798d8b2de577ae21aa08782ce7c698f1e9c9dd3ac837afd778fe9d8aefb50fe9a14657b7914e9b14420afffb578924b6c2789a06cb17cf920ba05fe625f3c0499b8dc76e71483e9e1e26ceb515e79a7f73a8dd7ce20afe3f777b50403029fdfabe39acd99c92251", 0xd3}, {&(0x7f00000000c0)="8a420b7e07bc287d010dc16e8af137ca1f9c94a84abcaa2c336c864d0242093627906b75e779876b0ca316faeb4943a98b1516eaea0e1482dedbb1827b8657f0dfc0d89f2892332e66b1acbe50ede343e5bb11de0d8c16e068b016ac83b7c492a404b3e6455286b259a40bda974c88da37a181152d0aae3e25dfe0b301f20d1c558f432da630a6adbd0c22c7afaf01db8e82ce079b4ab9620777e97517298c4777160cb24bf8", 0xa6}, {&(0x7f0000000400)="aca87a59e17a5a79b19d6983545cb5d096389702b64a2c089d91fbb0fe12c3c4ddaceddbefe5cacf9487f1ed423574046b8c5e6863314d030da725275e40dc9cb4cd8da42b54882287c4809c3d88d2f207a17ff4c37a05438e021d958dc8a6300bafd50f74fa3ab03e622b2fb49227ebf1e45d15388fe4df3b9ec943ced121cd963a658e236082fba92ad1731671c4b0fd0326a3b7f2b3f0f2acba635d4818256f196f448db8ab5c9b8d905c5a5846364eb6be7c298e67ba026ede6ebd46301b7f4250e38410e134", 0xc8}, {&(0x7f0000000500)="094df8588ffad47829dc07b3265ebbb755c5746212926ae7b52fcf558507c466e634f7011cdd7c6c5f5fafc90f1a3cb4278d", 0x32}, {&(0x7f0000000540)="c282a798eb1ec3334991ede55b3782a2143cfd40bcee81401a9e029f1c1c53b93091888babfc784a8cbc5602bcff96b83a4ff374e3f6f9097e760f901319c58bfa6e1f3833996990", 0x48}], 0x6, 0x1, 0xff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 19:21:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @link_key_reply={{0x40b, 0x16}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, "35f7e5300741f599512cf706bbfb8562"}}}, 0x1a) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x80, [0x20, 0x80], 0x3}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) 19:21:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x6, 0x2, 0x5, 0x1, 0x0, 0x1000, 0xc5021, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0xffffffff}, 0x88, 0x5, 0x6, 0x5, 0x7, 0x6, 0x2, 0x0, 0x100, 0x0, 0x7f}, 0x0, 0x0, r0, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e3, 0x6a}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75738e00000000a1613d2c00", @ANYRESHEX]) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x6609, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = getpid() faccessat2(r3, &(0x7f00000000c0)='./file2\x00', 0x80, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x7, 0x2}, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x9}}, './file2\x00'}) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xff, 0x4, 0x1, 0x7, 0x0, 0x4, 0x100, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xe42, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x4000, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x670}, r4, 0xe, r5, 0x2) fstat(r3, &(0x7f0000000180)) ptrace(0x4208, 0x0) fcntl$setown(r3, 0x8, r4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x40, 0x2, 0xac, 0x8, 0x0, 0x81, 0x11000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x401, 0xa513}, 0x48000, 0x0, 0x2, 0x4, 0x1cd98b4a, 0x9, 0x7fff, 0x0, 0x9, 0x0, 0xddb2}, 0x0, 0xd, r5, 0x8) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 19:21:30 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000f3fd002e2f66696c65"]) sendmsg$TIPC_NL_KEY_FLUSH(r0, 0x0, 0x44000) flock(0xffffffffffffffff, 0x8) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x9, 0x0, 0x7ffc0000}]}) r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) eventfd(0x4) r2 = fsopen(&(0x7f0000000280)='mqueue\x00', 0x2a8edb9c8acdd1a8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3, 0xfffffffffffffff9, 0x9, 0x6}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 19:21:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 58) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1154.576963] audit: type=1326 audit(1707506490.432:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.581109] audit: type=1326 audit(1707506490.433:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.593668] audit: type=1326 audit(1707506490.434:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16bab13b62 code=0x7ffc0000 [ 1154.602157] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1154.602157] program syz-executor.6 not setting count and/or reply_len properly 19:21:30 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000000, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010000000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000000c0)="020000001800000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) fallocate(r0, 0x4, 0x100000001, 0x522a00000000) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') [ 1154.619150] audit: type=1326 audit(1707506490.434:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f16bab13b62 code=0x7ffc0000 [ 1154.629353] FAULT_INJECTION: forcing a failure. [ 1154.629353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.631952] CPU: 0 PID: 9682 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1154.633152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1154.634567] Call Trace: [ 1154.635024] dump_stack+0x107/0x167 [ 1154.635655] should_fail.cold+0x5/0xa [ 1154.636324] copy_page_from_iter+0x40a/0x900 [ 1154.637095] blk_rq_map_user_iov+0x138b/0x1a60 [ 1154.637889] ? perf_trace_lock+0xac/0x490 [ 1154.638603] ? __lockdep_reset_lock+0x180/0x180 [ 1154.639403] ? __lockdep_reset_lock+0x180/0x180 [ 1154.640205] ? blk_rq_unmap_user+0x750/0x750 [ 1154.640980] ? find_held_lock+0x2c/0x110 [ 1154.641685] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1154.642595] ? lock_downgrade+0x6d0/0x6d0 [ 1154.643304] ? import_single_range+0x24d/0x2e0 [ 1154.644092] blk_rq_map_user+0x103/0x170 [ 1154.644800] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1154.645625] ? alloc_pages_current+0x18f/0x280 [ 1154.646411] ? sg_build_indirect.isra.0+0x448/0x710 [ 1154.647283] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1154.648194] ? sg_build_indirect.isra.0+0x710/0x710 [ 1154.649071] ? vprintk_func+0x93/0x140 [ 1154.649149] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 1154.649149] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1154.649149] [ 1154.649745] ? record_print_text.cold+0x16/0x16 [ 1154.649773] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1154.649795] ? trace_hardirqs_on+0x5b/0x180 [ 1154.653469] sg_write.part.0+0x69e/0xaa0 [ 1154.654190] ? sg_new_write.isra.0+0x770/0x770 [ 1154.655003] ? find_held_lock+0x2c/0x110 [ 1154.655727] ? __might_fault+0xd3/0x180 [ 1154.656434] ? lock_downgrade+0x6d0/0x6d0 [ 1154.657181] ? _cond_resched+0x12/0x80 [ 1154.657867] ? inode_security+0x107/0x140 [ 1154.658597] ? avc_policy_seqno+0x9/0x70 [ 1154.659339] ? selinux_file_permission+0x92/0x520 [ 1154.660193] ? security_file_permission+0x24e/0x570 [ 1154.661080] sg_write+0x87/0x120 [ 1154.661684] do_iter_write+0x482/0x670 [ 1154.662371] ? import_iovec+0x83/0xb0 [ 1154.663049] vfs_writev+0x1ae/0x620 [ 1154.663693] ? vfs_iter_write+0xa0/0xa0 [ 1154.664394] ? __fget_files+0x26d/0x4c0 [ 1154.665099] ? lock_downgrade+0x6d0/0x6d0 [ 1154.665826] ? find_held_lock+0x2c/0x110 [ 1154.666540] ? __fget_files+0x296/0x4c0 [ 1154.667250] ? __fget_light+0xea/0x290 [ 1154.667944] do_writev+0x139/0x300 [ 1154.668578] ? vfs_writev+0x620/0x620 [ 1154.669252] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1154.670169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1154.671061] do_syscall_64+0x33/0x40 [ 1154.671717] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1154.672602] RIP: 0033:0x7f8812842b19 [ 1154.673255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1154.676379] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1154.677708] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1154.678948] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1154.680187] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.681434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.682677] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:30 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x210040, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="011c0403d959eca075ed1dfaabe36337201201ecaf720008"], 0x7) bind$bt_hci(r1, &(0x7f0000000000), 0x6) r2 = accept4(r0, 0x0, &(0x7f0000000100), 0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$bt_hci(r3, &(0x7f0000000180)={0x1, @accept_conn_req={{0x409, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}}}, 0xb) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000040)="855774d39086e3f8c677d779973fd27823fc26201d59") [ 1154.690808] audit: type=1326 audit(1707506490.434:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 19:21:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = accept(r0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hci(r1, 0xc0000031, &(0x7f00000000c0)="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") [ 1154.695872] audit: type=1326 audit(1707506490.434:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.699950] audit: type=1326 audit(1707506490.434:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.702872] audit: type=1326 audit(1707506490.435:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.705798] audit: type=1326 audit(1707506490.435:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.708398] audit: type=1326 audit(1707506490.435:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=9684 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16bab13b19 code=0x7ffc0000 [ 1154.762530] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 19:21:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) [ 1154.777279] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue 19:21:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:21:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 59) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 19:21:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x83) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000140)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2, 0x6}, 0x6) close(r0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) [ 1154.870908] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1154.870908] program syz-executor.6 not setting count and/or reply_len properly [ 1154.877342] FAULT_INJECTION: forcing a failure. [ 1154.877342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1154.878393] CPU: 1 PID: 9723 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1154.878950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1154.879626] Call Trace: [ 1154.879847] dump_stack+0x107/0x167 [ 1154.880149] should_fail.cold+0x5/0xa [ 1154.880478] copy_page_from_iter+0x40a/0x900 [ 1154.880847] blk_rq_map_user_iov+0x138b/0x1a60 [ 1154.881236] ? perf_trace_lock+0xac/0x490 [ 1154.881575] ? __lockdep_reset_lock+0x180/0x180 [ 1154.881959] ? __lockdep_reset_lock+0x180/0x180 [ 1154.882357] ? blk_rq_unmap_user+0x750/0x750 [ 1154.882725] ? mark_held_locks+0x9e/0xe0 [ 1154.883058] ? find_held_lock+0x2c/0x110 [ 1154.883401] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1154.883835] ? lock_downgrade+0x6d0/0x6d0 [ 1154.884171] ? import_single_range+0x24d/0x2e0 [ 1154.884562] blk_rq_map_user+0x103/0x170 [ 1154.884896] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1154.885288] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 1154.885686] ? sg_build_indirect.isra.0+0x448/0x710 [ 1154.886106] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1154.886549] ? sg_build_indirect.isra.0+0x710/0x710 [ 1154.886958] ? vprintk_func+0x93/0x140 [ 1154.887285] ? record_print_text.cold+0x16/0x16 [ 1154.887673] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1154.888092] ? trace_hardirqs_on+0x5b/0x180 [ 1154.888464] sg_write.part.0+0x69e/0xaa0 [ 1154.888812] ? sg_new_write.isra.0+0x770/0x770 [ 1154.889194] ? find_held_lock+0x2c/0x110 [ 1154.889526] ? __might_fault+0xd3/0x180 [ 1154.889858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1154.890287] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1154.890728] ? trace_hardirqs_on+0x5b/0x180 [ 1154.891082] ? _cond_resched+0x12/0x80 [ 1154.891397] ? inode_security+0x107/0x140 [ 1154.891742] ? avc_policy_seqno+0x9/0x70 [ 1154.892074] ? selinux_file_permission+0x92/0x520 [ 1154.892481] ? security_file_permission+0x24e/0x570 [ 1154.892919] sg_write+0x87/0x120 [ 1154.893204] do_iter_write+0x482/0x670 [ 1154.893526] ? import_iovec+0x83/0xb0 [ 1154.893851] vfs_writev+0x1ae/0x620 [ 1154.894152] ? vfs_iter_write+0xa0/0xa0 [ 1154.894481] ? __fget_files+0x26d/0x4c0 [ 1154.894800] ? lock_downgrade+0x6d0/0x6d0 [ 1154.895142] ? find_held_lock+0x2c/0x110 [ 1154.895482] ? __fget_files+0x296/0x4c0 [ 1154.895820] ? __fget_light+0xea/0x290 [ 1154.896144] do_writev+0x139/0x300 [ 1154.896446] ? vfs_writev+0x620/0x620 [ 1154.896759] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1154.897186] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1154.897610] do_syscall_64+0x33/0x40 [ 1154.897922] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1154.898338] RIP: 0033:0x7f8812842b19 [ 1154.898646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1154.900148] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1154.900776] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1154.901361] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1154.901955] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1154.902537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1154.903116] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = timerfd_create(0x9, 0x180800) open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="12287254b61a21b013fdffff3f00000002d5a1645fdc781b186a08b52c6a3fef8325825ca05e59a5a8a7bbc457fcfab3243723d04bf0bc195686b6853157875878305fe3bba1d95e453b038eb8c10bef9e174c30247f6dea61fa413bfa986431b0ff5a773b3ddb0cf899b225deaf765b786222934661314747eefe5531fea085aec24ff68a42585aeb37e019e326d7a13f9c2b8d80ddbfe4b1da1fd8cb926299f7816a911a859b8181"], 0x624edc776a5bd610) 19:21:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 19:21:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) [ 1154.978865] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1156.642489] Bluetooth: hci0: command 0x040b tx timeout [ 1158.689481] Bluetooth: hci0: command 0x040b tx timeout [ 1169.119269] FAULT_INJECTION: forcing a failure. [ 1169.119269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.121333] CPU: 0 PID: 9748 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1169.122494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.123904] Call Trace: [ 1169.124362] dump_stack+0x107/0x167 [ 1169.125005] should_fail.cold+0x5/0xa [ 1169.125668] _copy_from_user+0x2e/0x1b0 [ 1169.126357] hci_get_conn_info+0x95/0x620 [ 1169.127075] ? hci_get_conn_list+0x680/0x680 [ 1169.127833] ? mark_held_locks+0x9e/0xe0 [ 1169.128547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.129441] ? __local_bh_enable_ip+0x9d/0x100 [ 1169.130247] hci_sock_ioctl+0x8d2/0x980 [ 1169.130931] ? create_monitor_event+0x930/0x930 [ 1169.131742] ? perf_trace_lock+0xac/0x490 19:21:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000f21669908de5a5295d27c4acb88c8150e288ecfe2fba242c12f8977a111c13254b21bac5f41f75ba67fb817e2b36d56a49068820305ce8a1a7cbb1bac21189b394a782473a556c39583842a22a8757b75a184e5d16bcc54650bb974c66e1ac8540cccb97463a94910be2890bbdf6a7d46e51dc20d35ad1c47c6c8a4102c9e9ce2829c3b541390fd2215335e0e6a37551a3d832d848344db0be7c71cbadea5b8be77409dec7bd27bca1aab0a3e52eaccd835d2d0154602577ef0b19bfa0b820f43200000000", @ANYRES16, @ANYBLOB="050000000000000000000200000300472a1ce7ce4a9bd625c53049a063f37941917b0fceee349b2c43db7ac71e7c93166a74995e29", @ANYRES64, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 19:21:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) (fail_nth: 1) [ 1169.132453] ? SOFTIRQ_verbose+0x10/0x10 [ 1169.133364] sock_do_ioctl+0xd3/0x300 [ 1169.134012] ? compat_ifr_data_ioctl+0x180/0x180 [ 1169.134819] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1169.135790] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1169.136674] ? do_vfs_ioctl+0x283/0x10d0 [ 1169.137367] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1169.138252] ? generic_block_fiemap+0x60/0x60 [ 1169.139019] sock_ioctl+0x3ea/0x700 [ 1169.139642] ? dlci_ioctl_set+0x30/0x30 19:21:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa674}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, r0}}, 0x20) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:21:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa674}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa674}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x80) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:21:44 executing program 2: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x37, 0x61, 0x31, 0x36, 0x32, 0x61, 0x64, 0x61, 0x66, 0x68, 0x62, 0x35, 0x34, 0x31, 0x32]}, &(0x7f0000000640)={0x0, "f0129584e72cdc5f58ff7843606d9563719b9c6d4cfe30f47a7f1685ba5e77f13f15983cd53213806e78e42bdfad24967f633de9f4331681ba75234359307a0f", 0x25}, 0x48, r0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000200)={&(0x7f00000006c0)=""/110, 0x6e}) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000540)) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="020000000000000001020b0405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f202122232425262728292a2b32333435363723c8081953e7c5383b3a3b3c3d3e3f40000000000000"], 0x48, r0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1169.140326] ? selinux_file_ioctl+0xb6/0x270 [ 1169.141158] ? dlci_ioctl_set+0x30/0x30 [ 1169.141837] __x64_sys_ioctl+0x19a/0x210 [ 1169.142533] do_syscall_64+0x33/0x40 [ 1169.143163] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1169.144027] RIP: 0033:0x7fe9dba52b19 [ 1169.144668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.147755] RSP: 002b:00007fe9d8fc8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.149048] RAX: ffffffffffffffda RBX: 00007fe9dbb65f60 RCX: 00007fe9dba52b19 [ 1169.150309] RDX: 0000000020000880 RSI: 00000000800448d5 RDI: 0000000000000004 [ 1169.151508] RBP: 00007fe9d8fc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.152729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.153927] R13: 00007ffd75c0b64f R14: 00007fe9d8fc8300 R15: 0000000000022000 19:21:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x404c099) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1e3}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/187, 0xbb}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e24, 0x7228, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="a1595aec4409d3e85be38c", 0xb}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/328], 0x148}, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 19:21:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fork() r1 = getpid() openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa674}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x1, 0x40, 0x0, 0x3, 0x0, 0x1}, 0x84) pidfd_open(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='fd\x00') 19:21:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 60) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xa041, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{@gid}]}) openat(r1, &(0x7f0000000200)='./file1\x00', 0xc0, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xa0b) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRESHEX], 0x88}, 0x1, 0x0, 0x0, 0x44000015}, 0x48810) close(0xffffffffffffffff) openat(r1, &(0x7f0000000180)='./file0\x00', 0x4a8a80, 0x2) [ 1169.228079] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1169.228079] program syz-executor.6 not setting count and/or reply_len properly [ 1169.256010] FAULT_INJECTION: forcing a failure. [ 1169.256010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.258230] CPU: 1 PID: 9763 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1169.259224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.260416] Call Trace: [ 1169.260815] dump_stack+0x107/0x167 [ 1169.261352] should_fail.cold+0x5/0xa [ 1169.261918] copy_page_from_iter+0x40a/0x900 [ 1169.262575] blk_rq_map_user_iov+0x138b/0x1a60 [ 1169.263256] ? perf_trace_lock+0xac/0x490 [ 1169.263865] ? __lockdep_reset_lock+0x180/0x180 [ 1169.264553] ? __lockdep_reset_lock+0x180/0x180 [ 1169.265226] ? blk_rq_unmap_user+0x750/0x750 [ 1169.265873] ? find_held_lock+0x2c/0x110 [ 1169.266470] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1169.267240] ? lock_downgrade+0x6d0/0x6d0 [ 1169.267854] ? import_single_range+0x24d/0x2e0 [ 1169.268535] blk_rq_map_user+0x103/0x170 [ 1169.269136] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1169.269837] ? alloc_pages_current+0x18f/0x280 [ 1169.270503] ? sg_build_indirect.isra.0+0x448/0x710 [ 1169.271238] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1169.272015] ? sg_build_indirect.isra.0+0x710/0x710 [ 1169.272757] ? vprintk_func+0x93/0x140 [ 1169.273332] ? record_print_text.cold+0x16/0x16 [ 1169.274027] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1169.274763] ? trace_hardirqs_on+0x5b/0x180 [ 1169.275401] sg_write.part.0+0x69e/0xaa0 [ 1169.275994] ? sg_new_write.isra.0+0x770/0x770 [ 1169.276672] ? find_held_lock+0x2c/0x110 [ 1169.277275] ? __might_fault+0xd3/0x180 [ 1169.277856] ? lock_downgrade+0x6d0/0x6d0 [ 1169.278476] ? _cond_resched+0x12/0x80 [ 1169.279056] ? inode_security+0x107/0x140 [ 1169.279663] ? avc_policy_seqno+0x9/0x70 [ 1169.280261] ? selinux_file_permission+0x92/0x520 [ 1169.280985] ? security_file_permission+0x24e/0x570 [ 1169.281713] sg_write+0x87/0x120 [ 1169.282214] do_iter_write+0x482/0x670 [ 1169.282798] ? import_iovec+0x83/0xb0 [ 1169.283359] vfs_writev+0x1ae/0x620 [ 1169.283902] ? vfs_iter_write+0xa0/0xa0 [ 1169.284487] ? __fget_files+0x26d/0x4c0 [ 1169.285072] ? lock_downgrade+0x6d0/0x6d0 [ 1169.285676] ? find_held_lock+0x2c/0x110 [ 1169.286292] ? __fget_files+0x296/0x4c0 [ 1169.286900] ? __fget_light+0xea/0x290 [ 1169.287476] do_writev+0x139/0x300 [ 1169.288000] ? vfs_writev+0x620/0x620 [ 1169.288573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.289329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.290082] do_syscall_64+0x33/0x40 [ 1169.290630] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1169.291372] RIP: 0033:0x7f8812842b19 [ 1169.291914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.294553] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1169.295652] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1169.296686] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1169.297710] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.298741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.299775] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) (fail_nth: 2) 19:21:45 executing program 1: r0 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x840) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000880)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0x0, @broadcast}}) 19:21:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7e5d, 0x440802) setsockopt$inet6_group_source_req(r2, 0x29, 0x3, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x1, 0xc92, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x2, {{0xa, 0x4e20, 0x1, @loopback, 0x1800000}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x0, @mcast1, 0x30000}}, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5473}}, {{0xa, 0x4e20, 0x822, @loopback, 0xfffffe01}}, {{0xa, 0x4e23, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xbbce}}]}, 0x290) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0x88c8, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x0, @multicast2}}) [ 1169.428163] FAULT_INJECTION: forcing a failure. [ 1169.428163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.429962] CPU: 1 PID: 9780 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1169.430969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.432173] Call Trace: [ 1169.432572] dump_stack+0x107/0x167 [ 1169.433111] should_fail.cold+0x5/0xa [ 1169.433675] _copy_to_user+0x2e/0x180 [ 1169.434246] hci_get_conn_info+0x352/0x620 [ 1169.434877] ? hci_get_conn_list+0x680/0x680 [ 1169.435518] ? mark_held_locks+0x9e/0xe0 [ 1169.436125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.436908] ? __local_bh_enable_ip+0x9d/0x100 [ 1169.437576] hci_sock_ioctl+0x8d2/0x980 [ 1169.438158] ? create_monitor_event+0x930/0x930 [ 1169.438840] ? perf_trace_lock+0xac/0x490 [ 1169.439441] ? SOFTIRQ_verbose+0x10/0x10 [ 1169.440047] sock_do_ioctl+0xd3/0x300 [ 1169.440609] ? compat_ifr_data_ioctl+0x180/0x180 [ 1169.441301] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1169.442145] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1169.442910] ? do_vfs_ioctl+0x283/0x10d0 [ 1169.443499] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1169.444261] ? generic_block_fiemap+0x60/0x60 [ 1169.444940] sock_ioctl+0x3ea/0x700 [ 1169.445472] ? dlci_ioctl_set+0x30/0x30 [ 1169.446055] ? selinux_file_ioctl+0xb6/0x270 [ 1169.446719] ? dlci_ioctl_set+0x30/0x30 [ 1169.447303] __x64_sys_ioctl+0x19a/0x210 [ 1169.447915] do_syscall_64+0x33/0x40 [ 1169.448457] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1169.449216] RIP: 0033:0x7fe9dba52b19 [ 1169.449756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.452418] RSP: 002b:00007fe9d8fc8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1169.453527] RAX: ffffffffffffffda RBX: 00007fe9dbb65f60 RCX: 00007fe9dba52b19 [ 1169.454563] RDX: 0000000020000880 RSI: 00000000800448d5 RDI: 0000000000000004 [ 1169.455588] RBP: 00007fe9d8fc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.456632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.457658] R13: 00007ffd75c0b64f R14: 00007fe9d8fc8300 R15: 0000000000022000 19:21:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) r2 = io_uring_setup(0x6c59, &(0x7f0000000040)={0x0, 0xddc8, 0x20, 0x2, 0x40000167}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x7ff, 0x773}}, './file0\x00'}) [ 1169.517454] device veth0_vlan entered promiscuous mode 19:21:45 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000d75839e3ca5869a423a5057d4a6be0f7d4f10ffc50dabfbf7d039c3772c025ece864b836eb620137f4de06af046b3728d0d98e3b57f9b3a0a803278b68b326920d13806bd5f3b61e14bb9a6b8fde07b3d5b2d50a5a9ed4d9d78d687bf2003b6c7dcadd4921c9e9d06dcdfa1f5317194658fd8d47dc44de0f482a00024f2cdc6ee86c538157e92effff0000bc15cde3ba860caed9e0d5847b894c64226420e1531baf7a5c1f8859852182077ea45536e2cc8c8f1d011149d7754e51bcc98a03556756ad2eaaaac148c344f493e29ebb7a8df0", @ANYBLOB="63254c300074f7f11db1d492c0d6", @ANYRES32=r1, @ANYRESDEC]) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x40034, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r2 = pkey_alloc(0x0, 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)=""/223, 0xdf) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f00000000c0)=0x50, 0x3f, 0x2) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1000003, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0)=0x7, 0x7) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r2) 19:21:45 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000006c0)=ANY=[@ANYBLOB="2f5d6e41e8654e85549ffdc4b11ed277b0a1bc27f2ab448a08ec3d3d842cfa2e8161f309cc02cdb530b62229a5d4d2999615b446f75f00bab875e151f3e7fcf2cab0992e3e4f8b5a6ef6ee6454a6704a18f8dcf35746356b9dffb4fd90495dad93b30e52ede33ce266a4d7d7b20e361b35608bec27c6e1e4593b3b14c8020d479156f51cfbedb2411f36afcffa1eda305cfc22f0e0f2394ea5d2f5190f174628c0884f846842a3deea08ee3890737580aafe1c5d08f9ddbb9e8ed12ca1c1540a11220ae0989e533577a6b87d06811cc9dcf1da8273824367b3440279e2407b0059d23294c79808ec9fbd", @ANYRES32=r0, @ANYBLOB="08521afaff0800000000000000f40ffc05c48b0046f4656900f3c91d0a1733cf48a4f5d0337757f03e283754acfe72dada474b583d9f8b8b9f21bff5aae622739294fcd5f659951910141290d1d50c359adc4d92babfa96c570e9f9339b41fd773d30309e18252e20cf32cf479c880fb6aed124a7dcf8b08fc6bfb7f56519a2203b9ef3f255eb62498e52069ac3baca5733e9b47864b9e6fb10eedb5408701c56b5f18ddf84b5e82c3772772b150f63865d7ea137fa3829ca95949aa90973e362a831614e5caac6f6d480cd72ca1c1e7be8bf1dba608e7b5bb7623a7e39e12a1d1c461b2fe3acca3fd08be814dc97020a2dd3f"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r5 = epoll_create(0x7ffd) readv(r5, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f00000001c0)=r6) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat(r7, &(0x7f0000000280)='./file1\x00', 0x436a40, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7fc6, 0x9a04, 0x3, &(0x7f0000000100)={[0x2]}, 0x8) 19:21:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 61) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x404c099) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1e3}) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/187, 0xbb}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e24, 0x7228, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="a1595aec4409d3e85be38c", 0xb}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/328], 0x148}, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1169.746102] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue [ 1169.774933] EXT4-fs (loop7): re-mounted. Opts: (null) [ 1169.795343] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1169.795343] program syz-executor.6 not setting count and/or reply_len properly [ 1169.808010] device veth0_vlan entered promiscuous mode [ 1169.825277] FAULT_INJECTION: forcing a failure. [ 1169.825277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1169.826940] CPU: 1 PID: 9810 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1169.827865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1169.828995] Call Trace: [ 1169.829362] dump_stack+0x107/0x167 [ 1169.829862] should_fail.cold+0x5/0xa [ 1169.830384] copy_page_from_iter+0x40a/0x900 [ 1169.830991] blk_rq_map_user_iov+0x138b/0x1a60 [ 1169.831620] ? perf_trace_lock+0xac/0x490 [ 1169.832177] ? __lockdep_reset_lock+0x180/0x180 [ 1169.832812] ? __lockdep_reset_lock+0x180/0x180 [ 1169.833434] ? blk_rq_unmap_user+0x750/0x750 [ 1169.834023] ? mark_held_locks+0x9e/0xe0 [ 1169.834574] ? find_held_lock+0x2c/0x110 [ 1169.835128] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1169.835841] ? lock_downgrade+0x6d0/0x6d0 [ 1169.836394] ? import_single_range+0x24d/0x2e0 [ 1169.837020] blk_rq_map_user+0x103/0x170 [ 1169.837571] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1169.838203] ? alloc_pages_current+0x18f/0x280 [ 1169.838822] ? sg_build_indirect.isra.0+0x448/0x710 [ 1169.839501] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1169.840210] ? sg_build_indirect.isra.0+0x710/0x710 [ 1169.840888] ? vprintk_func+0x93/0x140 [ 1169.841413] ? record_print_text.cold+0x16/0x16 [ 1169.842044] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1169.842720] ? trace_hardirqs_on+0x5b/0x180 [ 1169.843310] sg_write.part.0+0x69e/0xaa0 [ 1169.843858] ? sg_new_write.isra.0+0x770/0x770 [ 1169.844475] ? find_held_lock+0x2c/0x110 [ 1169.845030] ? __might_fault+0xd3/0x180 [ 1169.845570] ? lock_downgrade+0x6d0/0x6d0 [ 1169.846139] ? _cond_resched+0x12/0x80 [ 1169.846661] ? inode_security+0x107/0x140 [ 1169.847216] ? avc_policy_seqno+0x9/0x70 [ 1169.847764] ? selinux_file_permission+0x92/0x520 [ 1169.848416] ? security_file_permission+0x24e/0x570 [ 1169.849092] sg_write+0x87/0x120 [ 1169.849554] do_iter_write+0x482/0x670 [ 1169.850079] ? import_iovec+0x83/0xb0 [ 1169.850603] vfs_writev+0x1ae/0x620 [ 1169.851098] ? vfs_iter_write+0xa0/0xa0 [ 1169.851633] ? __fget_files+0x26d/0x4c0 [ 1169.852167] ? lock_downgrade+0x6d0/0x6d0 [ 1169.852721] ? find_held_lock+0x2c/0x110 [ 1169.853273] ? __fget_files+0x296/0x4c0 [ 1169.853818] ? __fget_light+0xea/0x290 [ 1169.854344] do_writev+0x139/0x300 [ 1169.854817] ? vfs_writev+0x620/0x620 [ 1169.855331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1169.856019] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1169.856720] do_syscall_64+0x33/0x40 [ 1169.857211] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1169.857888] RIP: 0033:0x7f8812842b19 [ 1169.858382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1169.860781] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1169.861777] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1169.862710] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1169.863646] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1169.864587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1169.865521] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:21:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 62) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:21:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)="d37815a7eeef96303c07da768b5bdc48b1156c12da74488633bfebdf0035dd229c2792fbb637754887c047eaf2d7e37e147979aedb05b0cf014b774bad33dba10cbbaad5be8c6ba8ba0c81d466a153a3b64d9f4f1eeedb7edf01e58f07e7375c4184205261") 19:21:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0xaa48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x20, 0x20, 0x5, 0x0, 0x5, 0x52400, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0xd11, 0x1000000000000002, 0x80000000, 0x0, 0x5, 0x7, 0x2f, 0x0, 0x3d1, 0x0, 0x3ff}, r1, 0xc, 0xffffffffffffffff, 0x1) r2 = eventfd(0x9) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r3}}, 0x58) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4500}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x1010, 0x464, 0x4, 0x70bd26, 0x25dfdbfc, "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", [""]}, 0x1010}, 0x1, 0x0, 0x0, 0x24000440}, 0x8040) dup2(r0, r2) 19:21:59 executing program 4: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, 0x0) r0 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) add_key$fscrypt_provisioning(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000180)={0x0, 0x0, @d}, 0x18, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1, 0x0, 0x64}, &(0x7f0000000780)=ANY=[@ANYBLOB="656e633d6f616570206861736b6532732d3132382d7838360000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000b226efbe72c6e684c10000e5aca1101bcc753ae462ede3fe90ffdf30344bba1195061a0689f5bd94862302f69edb6885c77f026874b47106da5e4f2bbd588b9527722aeb507202231f86fa1653fa7ca9f9ea5a99853ccb2600bdb5f3a0ff010c72128ebdd76b2ffd842f86013c3d576fc893944ee3445fb30f2ae5f754216fae808e0a0ed627cbd3fd808e450a954e6d2a0a31fab856f9b2d1b0a12be8bfb6b0a07a29e74ae7beebe8fcd87fc7297c7cdb40606b226daef39c9611186b5eb1ac231486075e204c5d03fadb157dc668db9d2b5913659ccab5356cdbb9a6635e92d7f8fc706babc000d26807a27d68e4b7cdd18d8fb501608a18a759882d5295be85a5a068"], &(0x7f0000000280), &(0x7f0000000580)=""/100) r2 = clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) r4 = getpid() pidfd_open(r4, 0x0) clone3(&(0x7f0000000400)={0x4002150c0, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0), {0x3b}, &(0x7f0000000300)=""/8, 0x8, &(0x7f0000000b40)=""/4096, &(0x7f00000003c0)=[0x0, 0x0, r2, r3, r2, r2, r4], 0x7}, 0x58) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) 19:21:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) (fail_nth: 3) 19:21:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = syz_open_dev$vcsa(&(0x7f00000010c0), 0x5, 0x400) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000001100)=0x400, 0x4) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000080)={{0x0, 0x8, 0xdcab, 0xc516, 0x9, 0x4, 0xfffffffffffffff8, 0x400, 0x20, 0xc12, 0x7, 0x7c0, 0x9, 0xffffffff, 0xffffffffffff0000}}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) openat(r3, &(0x7f0000001080)='./file0\x00', 0x200000, 0x80) 19:21:59 executing program 7: keyctl$chown(0x4, 0x0, 0xee01, 0xee00) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fff}, 0x400, 0x0, 0x2d34}, 0x0, 0xffffffffffffffff, r0, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000240)=0x5) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) dup3(r4, r1, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="a43395d0d5ef1b9a"]) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x81, 0x3, 0x1f, 0x0, 0x8, 0x10020, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffa, 0x2, @perf_config_ext={0x4, 0xd9b}, 0x40, 0xde, 0xfffffff8, 0x1, 0x3, 0x80, 0x1, 0x0, 0xffffffff, 0x0, 0x1}, r3, 0x3, r5, 0x4) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x7, 0x9, 0x80, 0x0, 0x3ff, 0x40187, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x10000, 0x1, 0x4, 0x7, 0x6, 0x0, 0x7fff, 0x0, 0x2, 0x0, 0x3}, r2, 0xc, r1, 0x0) 19:21:59 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x12f, &(0x7f0000000140)={@random="f70443644f38", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@mpls_mc={0x8848, {[{0xffffc}], @ipv6=@udp={0x8, 0x6, "b70bc0", 0xf5, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[@srh={0x2f, 0x12, 0x4, 0x9, 0x40, 0x20, 0x1ff, [@dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @dev={0xfe, 0x80, '\x00', 0xf}]}], {0x4e22, 0x4e20, 0x5d, 0x0, @opaque="658f880e82c0b360a2874fcdd622633a5d147553da319df6d0fcbe1a4e5113224e8820e715dcdb189f5a87d00378ef888ce3c3ab0c8294d8c20023df446776324584aff6bc288fa3c0002b72b17a7ecdb609cee04b"}}}}}}}, &(0x7f0000000000)={0x1, 0x1, [0xa25, 0xc1c, 0xf64, 0xe9a]}) [ 1183.473535] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1183.479340] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1183.479340] program syz-executor.6 not setting count and/or reply_len properly [ 1183.486986] FAULT_INJECTION: forcing a failure. [ 1183.486986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.488578] CPU: 1 PID: 9835 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1183.489442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.490480] Call Trace: [ 1183.490768] dump_stack+0x107/0x167 [ 1183.491239] should_fail.cold+0x5/0xa [ 1183.491741] copy_page_from_iter+0x40a/0x900 [ 1183.492180] blk_rq_map_user_iov+0x138b/0x1a60 [ 1183.492636] ? perf_trace_lock+0xac/0x490 [ 1183.493052] ? __lockdep_reset_lock+0x180/0x180 [ 1183.493527] ? __lockdep_reset_lock+0x180/0x180 [ 1183.494111] ? blk_rq_unmap_user+0x750/0x750 [ 1183.494667] ? find_held_lock+0x2c/0x110 [ 1183.495195] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1183.495845] ? lock_downgrade+0x6d0/0x6d0 [ 1183.496324] ? import_single_range+0x24d/0x2e0 [ 1183.496866] blk_rq_map_user+0x103/0x170 [ 1183.497340] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1183.497920] ? alloc_pages_current+0x18f/0x280 [ 1183.498453] ? sg_build_indirect.isra.0+0x448/0x710 [ 1183.499082] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1183.499648] ? sg_build_indirect.isra.0+0x710/0x710 [ 1183.500261] ? vprintk_func+0x93/0x140 [ 1183.500797] ? record_print_text.cold+0x16/0x16 [ 1183.501314] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1183.501896] ? trace_hardirqs_on+0x5b/0x180 [ 1183.502424] sg_write.part.0+0x69e/0xaa0 [ 1183.502917] ? sg_new_write.isra.0+0x770/0x770 [ 1183.503465] ? find_held_lock+0x2c/0x110 [ 1183.503960] ? __might_fault+0xd3/0x180 [ 1183.504465] ? lock_downgrade+0x6d0/0x6d0 [ 1183.504987] ? _cond_resched+0x12/0x80 [ 1183.505404] ? inode_security+0x107/0x140 [ 1183.505884] ? avc_policy_seqno+0x9/0x70 [ 1183.506375] ? selinux_file_permission+0x92/0x520 [ 1183.506960] ? security_file_permission+0x24e/0x570 [ 1183.507571] sg_write+0x87/0x120 [ 1183.507953] do_iter_write+0x482/0x670 [ 1183.508427] ? import_iovec+0x83/0xb0 [ 1183.508879] vfs_writev+0x1ae/0x620 [ 1183.509308] ? vfs_iter_write+0xa0/0xa0 [ 1183.509813] ? __fget_files+0x26d/0x4c0 [ 1183.510281] ? lock_downgrade+0x6d0/0x6d0 [ 1183.510814] ? find_held_lock+0x2c/0x110 [ 1183.511263] ? __fget_files+0x296/0x4c0 [ 1183.511658] ? __fget_light+0xea/0x290 [ 1183.512040] do_writev+0x139/0x300 [ 1183.512392] ? vfs_writev+0x620/0x620 [ 1183.512773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.513281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.513789] do_syscall_64+0x33/0x40 [ 1183.514149] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1183.514645] RIP: 0033:0x7f8812842b19 [ 1183.515006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1183.516772] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1183.517507] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1183.518195] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1183.518878] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.519564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1183.520246] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1183.535341] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1183.537006] FAULT_INJECTION: forcing a failure. [ 1183.537006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.538208] CPU: 1 PID: 9837 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 1183.538876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1183.539695] Call Trace: [ 1183.539961] dump_stack+0x107/0x167 [ 1183.540319] should_fail.cold+0x5/0xa [ 1183.540717] _copy_to_user+0x2e/0x180 [ 1183.541105] simple_read_from_buffer+0xcc/0x160 [ 1183.541567] proc_fail_nth_read+0x198/0x230 [ 1183.541999] ? proc_sessionid_read+0x230/0x230 [ 1183.542449] ? security_file_permission+0x24e/0x570 [ 1183.542937] ? perf_trace_initcall_start+0x101/0x380 [ 1183.543450] ? proc_sessionid_read+0x230/0x230 [ 1183.543909] vfs_read+0x228/0x580 [ 1183.544265] ksys_read+0x12d/0x260 [ 1183.544622] ? vfs_write+0xa70/0xa70 [ 1183.544999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1183.545506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1183.546017] do_syscall_64+0x33/0x40 [ 1183.546376] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1183.546877] RIP: 0033:0x7fe9dba0569c [ 1183.547233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1183.549016] RSP: 002b:00007fe9d8fc8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1183.549754] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe9dba0569c [ 1183.550445] RDX: 000000000000000f RSI: 00007fe9d8fc81e0 RDI: 0000000000000003 [ 1183.551132] RBP: 00007fe9d8fc81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1183.551831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.552526] R13: 00007ffd75c0b64f R14: 00007fe9d8fc8300 R15: 0000000000022000 19:21:59 executing program 5: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee00) 19:21:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0xc0000031, &(0x7f0000000040)="8de91b5b22d1b450d7f11edb2ec1476a53b12e26b82d1d24c92f45baecab8d9281e06fcc4f9e1134a92e1d016e1bbb1ec4a04348f8bd6cad5070c2a41d5a448f897fc89dab0c0ee6acb3b04ffde1f3315f06e76d86fa11930b1da3c273d06a68f2f2c5e124536e18549335389d39c108fd19e4789df864a1a9f47f4306f3f72a57a48f2a67af9c1c3b412979a8dad4305bbbd3639dab56") ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x3}, 0x6) 19:22:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x44, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2036, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xf7, &(0x7f0000000000)) 19:22:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x20900, 0x0) write$bt_hci(r1, &(0x7f0000000100)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}}}, 0xe) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) close(r2) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:12 executing program 4: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x7bf9, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x2c, 0x12002, 0x0) 19:22:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa2}}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x80, 0x4) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 63) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) 19:22:12 executing program 5: r0 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r2, 0x10, 0x101, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000300)=0x101) chroot(&(0x7f0000000280)='./file2\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r3, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x20a700, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002e00)={0x0, "d7885b01064cde863ef84a335a261f1b"}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2321202c2f66696c65312052856165e7f02e136c00207b202d3a10212020235c2d282123400a81f680545bad56b21f769d028cd8440148bf793621325d928f7706e39a73552a006cd61ee69812f1f868dd8eb7a81a8e1c080651069633dfb16ea4511d69fd4335f0f9fe021f09f8818a400de6eef9"], 0x76) sendfile(r3, r4, 0x0, 0x100000001) 19:22:12 executing program 7: ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001200)=ANY=[@ANYBLOB="01009c00a800cfd34f3ca50d06a8ec8555b475a92784720fe53f13cb18b93b26ea7d53b758cffd2329dedaec80cd815f90ab180ee5c742995607163f98cc4569c7f146a53b3ce257940876b0ea599f9841a4c11a37cd296daf81cdcd506226f07ff73ba9f43f0315ad75483225c8e29b7ffd583c201a3255556e98d6214e391a3eb971542c1deeafbb36fbc3f234845af2202eb22d42357f1bc6b1c83d10967e"]) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x224100, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) clone3(&(0x7f0000003940)={0x10200, &(0x7f0000003780)=0xffffffffffffffff, &(0x7f00000037c0), &(0x7f0000003800), {0x20}, &(0x7f0000003840)=""/92, 0x5c, &(0x7f00000038c0)=""/44, &(0x7f0000003900)=[r3], 0x1, {r4}}, 0x58) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000e, 0x10, r4, 0x214) sendfile(r1, r2, 0x0, 0x10000000c) fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {0x0}], 0x0, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005e700)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={r7, r9, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e900)={0xc6e0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0x0, "a41504786c9fb5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001140)={{r10, 0x1a5, 0x6, 0x7, 0x9, 0x1, 0x4, 0x8, 0xb0, 0x1ff, 0x6, 0x100000000, 0x1, 0x6, 0x7}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005f900)={0x80000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x0, "6b65fad3a2e74e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) [ 1196.925262] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1196.929340] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1196.929340] program syz-executor.6 not setting count and/or reply_len properly [ 1196.958284] FAULT_INJECTION: forcing a failure. [ 1196.958284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.959387] CPU: 0 PID: 9877 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1196.959994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.960712] Call Trace: [ 1196.960957] dump_stack+0x107/0x167 [ 1196.961287] should_fail.cold+0x5/0xa [ 1196.961636] copy_page_from_iter+0x40a/0x900 [ 1196.962040] blk_rq_map_user_iov+0x138b/0x1a60 [ 1196.962457] ? perf_trace_lock+0xac/0x490 [ 1196.962829] ? __lockdep_reset_lock+0x180/0x180 [ 1196.963248] ? __lockdep_reset_lock+0x180/0x180 [ 1196.963663] ? blk_rq_unmap_user+0x750/0x750 [ 1196.964056] ? find_held_lock+0x2c/0x110 [ 1196.964413] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1196.964899] ? lock_downgrade+0x6d0/0x6d0 [ 1196.965268] ? import_single_range+0x24d/0x2e0 [ 1196.965679] blk_rq_map_user+0x103/0x170 [ 1196.966046] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1196.966472] ? alloc_pages_current+0x18f/0x280 [ 1196.966873] ? sg_build_indirect.isra.0+0x448/0x710 [ 1196.967326] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1196.967789] ? sg_build_indirect.isra.0+0x710/0x710 [ 1196.968241] ? vprintk_func+0x93/0x140 [ 1196.968583] ? printk+0xbf/0xf1 [ 1196.968904] ? record_print_text.cold+0x16/0x16 [ 1196.969325] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1196.969767] ? trace_hardirqs_on+0x5b/0x180 [ 1196.970164] sg_write.part.0+0x69e/0xaa0 [ 1196.970520] ? sg_new_write.isra.0+0x770/0x770 [ 1196.970936] ? find_held_lock+0x2c/0x110 [ 1196.971302] ? __might_fault+0xd3/0x180 [ 1196.971658] ? lock_downgrade+0x6d0/0x6d0 [ 1196.972047] ? _cond_resched+0x12/0x80 [ 1196.972387] ? inode_security+0x107/0x140 [ 1196.972761] ? avc_policy_seqno+0x9/0x70 [ 1196.973122] ? selinux_file_permission+0x92/0x520 [ 1196.973558] ? security_file_permission+0x24e/0x570 [ 1196.974009] sg_write+0x87/0x120 [ 1196.974310] do_iter_write+0x482/0x670 [ 1196.974667] ? import_iovec+0x83/0xb0 [ 1196.975013] vfs_writev+0x1ae/0x620 [ 1196.975348] ? vfs_iter_write+0xa0/0xa0 [ 1196.975695] ? __fget_files+0x26d/0x4c0 [ 1196.976049] ? lock_downgrade+0x6d0/0x6d0 [ 1196.976423] ? find_held_lock+0x2c/0x110 [ 1196.976786] ? __fget_files+0x296/0x4c0 [ 1196.977154] ? __fget_light+0xea/0x290 [ 1196.977508] do_writev+0x139/0x300 [ 1196.977825] ? vfs_writev+0x620/0x620 [ 1196.978168] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 19:22:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept4(r0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000240)=0x80, 0x800) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0x8001, "ae11ed", 0x80, 0x4}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f00000000c0)=""/132, 0x84}], 0x2, 0xf0a, 0x8) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1196.978635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.979216] do_syscall_64+0x33/0x40 [ 1196.979550] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1196.980008] RIP: 0033:0x7f8812842b19 [ 1196.980338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.981956] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1196.982613] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1196.983246] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1196.983870] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.984494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.985133] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:22:12 executing program 2: r0 = epoll_create(0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r0, 0x7fb82000) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create(0x80005) r3 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)={0x14}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) 19:22:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x2, &(0x7f0000000880)) 19:22:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000040)="646ab1906e71669b0577e8cfd0906581a9daf336fa75332bf7dee81c48e4b45e64ea1e3ad4f641847468d04baf435cc938899d7c27d8b337f026b3e893f014ec6bdd01ba4670f383e2f7b4426e318fdc96b4eef1b3879733bbd8984d782f9d4d62876a05d8f7225ea29db32db6430fceb8510ce0a8de3d2d3382c54f0f36cdd123f46f8e0b264cc140095d5708bd38c13051f4d22022871b549d9a01fa3968d16a37958380b56bf59ca40e065613c068efd78c8abf2b25d2f7cf871b0acbd5d5c1485b80df4c9f8bb8e9b34fca4c062e") bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:12 executing program 0: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8841}, 0x387254f0d33e89d8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000200)) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000440)=""/80, 0x50, &(0x7f0000000280)=""/98, &(0x7f0000000300), 0x0, {r1}}, 0x58) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f00000000c0)="4841a27d2221a621bc8d3fbc2b423b13800300007ed57cda00bd820a9104e43457362892618b5f09f93e938e12ac45ce127e1852a3da7d910cb49d9cc91d21f24561a46be5324e9d6c72b6dc01534fdff43d4bcefc0000000080000001d9bcd6cd52f4c3695f7cb4937444156000dd2d0963a97104e4d6d8d24c") 19:22:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x12, 0x4) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x4b47, &(0x7f0000000880)) [ 1197.135434] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 19:22:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 64) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000480)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000000c0)={0x8, 0x8f, 0x400}) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r2) openat(0xffffffffffffffff, &(0x7f0000004440)='./file0\x00', 0x101000, 0x10) keyctl$chown(0x4, r5, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {r0, 0x8109}, {0xffffffffffffffff, 0x4}, {r0, 0x90}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) 19:22:13 executing program 2: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001880)={&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="240000000000000000000000071e3680259c6bc3fc00000000000000ac1e000100000000000017008043a9a7069a175d252c5679e35739bdb3e82f904236f04212ad8ecf3081436aaa92f2b86c07a5cd07db0cfbbde2176f5ec2f7f321e8a9aca74df163e34a55020000000b7fb72d835b0826fdde24311e8851d6d9b0ae5c36124c02ebcd3da9f614d9cb76442b6db5ac86597b6ad7ada039c48dc9bc98c6e157dd752d3b6e7dd8d62e4042bce5be8166cb44597280e4845e5a8cf890b3f8c74273eea1574e2b5e454481ccc0544bb3315b3edde8f7d55add6a3e77de3818a8ad5607f08761c1c5a2781290e5ec9230e6a0870000000000"], 0x28}, 0x0) stat(&(0x7f0000001500)='./file1\x00', &(0x7f0000001540)) r3 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000000)) rename(&(0x7f0000001600)='./file1\x00', &(0x7f0000001640)='./file0\x00') clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r5}}, 0x58) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000015c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000001240)=[{&(0x7f0000000080)="e66826bb952eaa6f4434b53ee8438d6403b0274b500811c8eed2a5f6195bf616b89680b63aafb8338378a6a92357db7104ed2b5ffd20ee4de445b5081c22f9dc84156cf2ebe175376d908ea86aca4461b477d3c2ff303d7a0a", 0x59, 0x8}, {&(0x7f0000000100)="cc22e01d89bdef5b486ea79abb248cb8abf53844fa1daee92304aa462a72d52d367f29f481b87d5fdb01c74b9b7d5fa8c984b7a908df235c244af5ebaf5bccf7c8cd09733a", 0x45, 0x3}, {&(0x7f00000001c0)="8f804e2c49fc048e821c5a83c19176a571d90c88bbf152d6135d207504648ce2175316fb9f86fe4e3996ca8c69bae74819", 0x31, 0x6}, {&(0x7f0000000200)="05bf3522c3c4d693d22f9cc9636fbb360526d07b694896", 0x17, 0xfffffffffffffffa}, {&(0x7f0000000240)="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", 0x1000, 0xdaf7}, {&(0x7f0000001d00)="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", 0x1000, 0x5}], 0x4, &(0x7f00000013c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x36, 0x37]}}}}, {@size={'size', 0x3d, [0x78, 0x38, 0x74, 0x30, 0x37]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x37, 0x39, 0x0, 0x31]}}, {@mode={'mode', 0x3d, 0xc910}}, {@mode={'mode', 0x3d, 0x8}}, {@gid={'gid', 0x3d, r1}}, {@gid={'gid', 0x3d, r4}}], [{@appraise}, {@appraise_type}, {@pcr={'pcr', 0x3d, 0xe}}, {@subj_role={'subj_role', 0x3d, '-'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r7}}, {@fowner_gt={'fowner>', r0}}]}) [ 1197.265225] tmpfs: Bad value for 'mpol' [ 1197.267924] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 1197.279184] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1197.279184] program syz-executor.6 not setting count and/or reply_len properly [ 1197.283241] FAULT_INJECTION: forcing a failure. [ 1197.283241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.285793] CPU: 1 PID: 9919 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1197.286922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.288398] Call Trace: [ 1197.288920] dump_stack+0x107/0x167 [ 1197.289577] should_fail.cold+0x5/0xa [ 1197.290206] copy_page_from_iter+0x40a/0x900 [ 1197.291034] blk_rq_map_user_iov+0x138b/0x1a60 [ 1197.291789] ? perf_trace_lock+0xac/0x490 [ 1197.292468] ? __lockdep_reset_lock+0x180/0x180 [ 1197.293227] ? __lockdep_reset_lock+0x180/0x180 [ 1197.294041] ? blk_rq_unmap_user+0x750/0x750 [ 1197.294850] ? find_held_lock+0x2c/0x110 [ 1197.295585] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1197.296518] ? lock_downgrade+0x6d0/0x6d0 [ 1197.297386] ? import_single_range+0x24d/0x2e0 [ 1197.298214] blk_rq_map_user+0x103/0x170 [ 1197.298860] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1197.299644] ? alloc_pages_current+0x18f/0x280 [ 1197.300535] ? sg_build_indirect.isra.0+0x448/0x710 [ 1197.301463] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1197.302394] ? sg_build_indirect.isra.0+0x710/0x710 [ 1197.303204] ? vprintk_func+0x93/0x140 [ 1197.303823] ? record_print_text.cold+0x16/0x16 [ 1197.304583] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1197.305386] ? trace_hardirqs_on+0x5b/0x180 [ 1197.306098] sg_write.part.0+0x69e/0xaa0 [ 1197.306745] ? sg_new_write.isra.0+0x770/0x770 [ 1197.307493] ? find_held_lock+0x2c/0x110 [ 1197.308142] ? __might_fault+0xd3/0x180 [ 1197.308786] ? lock_downgrade+0x6d0/0x6d0 [ 1197.309459] ? _cond_resched+0x12/0x80 [ 1197.310088] ? inode_security+0x107/0x140 [ 1197.310756] ? avc_policy_seqno+0x9/0x70 [ 1197.311409] ? selinux_file_permission+0x92/0x520 [ 1197.312192] ? security_file_permission+0x24e/0x570 [ 1197.313009] sg_write+0x87/0x120 [ 1197.313563] do_iter_write+0x482/0x670 [ 1197.314198] ? import_iovec+0x83/0xb0 [ 1197.314819] vfs_writev+0x1ae/0x620 [ 1197.315410] ? vfs_iter_write+0xa0/0xa0 [ 1197.316049] ? __fget_files+0x26d/0x4c0 [ 1197.316694] ? lock_downgrade+0x6d0/0x6d0 [ 1197.317363] ? find_held_lock+0x2c/0x110 [ 1197.318033] ? __fget_files+0x296/0x4c0 [ 1197.318688] ? __fget_light+0xea/0x290 [ 1197.319325] do_writev+0x139/0x300 [ 1197.319902] ? vfs_writev+0x620/0x620 [ 1197.320525] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1197.321373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1197.322175] do_syscall_64+0x33/0x40 [ 1197.322776] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1197.323579] RIP: 0033:0x7f8812842b19 [ 1197.324180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.327030] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1197.328253] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1197.329404] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1197.330545] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.331686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1197.332834] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:22:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 65) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x4b49, &(0x7f0000000880)) [ 1211.826736] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.5'. 19:22:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xa0, 0x10, 0x1, 0x4, 0x0, {}, [@typed={0x4, 0x0, 0x0, 0x0, @str}, @nested={0x85, 0x0, 0x0, 0x1, [@generic="e88b0a7d62836491c9745c9c367f55c2cc60e95760649921cbce1f5e2585e06ca5d96efcbd4874ce326f7553ef3d68e0f500fb7617364357806e5b8a4576ad0ac374f54c18523c71288d4f76484c117ffe87c35fccb893d5c5187b22380ff1f9ebe22cda2719cc3a5845272f907475300c9859b72967c127fbfc68b303fc9c1817"]}]}, 0xa0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000120011cd00000000000000008000e9"], 0x20}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)="395b7c2d57add1f9df2a7c193237630b7718e13aaee3e67a658f79186e20bb3906f11f399d13f0cccb1e91fd141b643cf5faee0243beccef6b5c06f7ea5c54c65afbeed79d37e36a5bc6ce09f03d58182963e5c6a4927f2f730eae298dae0e00"/110, 0x6e}], 0x1}, 0x24000855) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000880)={{r3}, "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"}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000e1", @ANYRES16=0x0, @ANYRES16=r2], 0x14}}, 0x20004004) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) unshare(0x48020200) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x8400, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {r6}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "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", "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"}) 19:22:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:27 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0/file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) 19:22:27 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000480)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f00000000c0)={0x8, 0x8f, 0x400}) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a4c1be26133a48d389342f53cbb88cc2f96518c9ca6fb689bb56a2824f0f6fc853011e3c529931bbfdcfad732e9f6c146e67b6220c"}, 0x48, r2) openat(0xffffffffffffffff, &(0x7f0000004440)='./file0\x00', 0x101000, 0x10) keyctl$chown(0x4, r5, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x82}, {r0, 0x8109}, {0xffffffffffffffff, 0x4}, {r0, 0x90}], 0x4, &(0x7f00000002c0), &(0x7f0000000440)={[0xb9]}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10}) 19:22:27 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x100000000, 0x0) ftruncate(0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x103) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x1000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r2, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f0000001640)=""/256, 0x100}, {&(0x7f0000003640)=""/128, 0x80}], 0x4) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000180)=r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f00000000c0)=""/183, &(0x7f0000000040)=0xb7) [ 1211.850266] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1211.889697] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1211.913999] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1211.913999] program syz-executor.6 not setting count and/or reply_len properly 19:22:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x82, 0x4, "15045e", 0x80, 0xc1}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1211.932203] FAULT_INJECTION: forcing a failure. [ 1211.932203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1211.934199] CPU: 1 PID: 9941 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1211.935263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.936540] Call Trace: [ 1211.936954] dump_stack+0x107/0x167 [ 1211.937532] should_fail.cold+0x5/0xa [ 1211.938125] copy_page_from_iter+0x40a/0x900 [ 1211.938816] blk_rq_map_user_iov+0x138b/0x1a60 [ 1211.939538] ? perf_trace_lock+0xac/0x490 [ 1211.940183] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1211.941022] ? __lockdep_reset_lock+0x180/0x180 [ 1211.941733] ? blk_rq_unmap_user+0x750/0x750 [ 1211.942427] ? find_held_lock+0x2c/0x110 [ 1211.943070] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1211.943889] ? lock_downgrade+0x6d0/0x6d0 [ 1211.944534] ? import_single_range+0x24d/0x2e0 [ 1211.945237] blk_rq_map_user+0x103/0x170 [ 1211.945830] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1211.946526] ? alloc_pages_current+0x18f/0x280 [ 1211.947203] ? sg_build_indirect.isra.0+0x448/0x710 [ 1211.947945] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1211.948717] ? sg_build_indirect.isra.0+0x710/0x710 [ 1211.949461] ? vprintk_func+0x93/0x140 [ 1211.950045] ? record_print_text.cold+0x16/0x16 [ 1211.950742] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1211.951502] ? trace_hardirqs_on+0x5b/0x180 [ 1211.952165] sg_write.part.0+0x69e/0xaa0 [ 1211.952783] ? sg_new_write.isra.0+0x770/0x770 [ 1211.953474] ? find_held_lock+0x2c/0x110 [ 1211.954082] ? __might_fault+0xd3/0x180 [ 1211.954663] ? lock_downgrade+0x6d0/0x6d0 [ 1211.955271] ? mark_held_locks+0x9e/0xe0 [ 1211.955874] ? _cond_resched+0x12/0x80 [ 1211.956441] ? inode_security+0x107/0x140 [ 1211.957064] ? avc_policy_seqno+0x9/0x70 [ 1211.957655] ? selinux_file_permission+0x92/0x520 [ 1211.958362] ? security_file_permission+0x24e/0x570 [ 1211.959097] sg_write+0x87/0x120 [ 1211.959599] do_iter_write+0x482/0x670 [ 1211.960185] ? import_iovec+0x83/0xb0 [ 1211.960761] vfs_writev+0x1ae/0x620 [ 1211.961319] ? vfs_iter_write+0xa0/0xa0 [ 1211.961899] ? __fget_files+0x26d/0x4c0 [ 1211.962490] ? lock_downgrade+0x6d0/0x6d0 [ 1211.963097] ? find_held_lock+0x2c/0x110 [ 1211.963708] ? __fget_files+0x296/0x4c0 [ 1211.964300] ? __fget_light+0xea/0x290 [ 1211.964880] do_writev+0x139/0x300 [ 1211.965458] ? vfs_writev+0x620/0x620 [ 1211.966026] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1211.966789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.967563] do_syscall_64+0x33/0x40 [ 1211.968110] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1211.968855] RIP: 0033:0x7f8812842b19 [ 1211.969338] EXT4-fs warning (device sda): verify_group_input:170: Bad blocks count 0 [ 1211.969425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.969436] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1211.969456] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1211.969481] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1211.976476] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.977534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1211.978569] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:22:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x541b, &(0x7f0000000880)) 19:22:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfff, 0x220002) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x74}}, './file0\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000080)={'dummy0\x00', {0x2, 0x0, @remote}}) mkdir(&(0x7f00000001c0)='./file0\x00', 0x20) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x48883) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x3, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1, 0xb7d, 0x7fff, 0x1}) 19:22:27 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(r0, &(0x7f0000000180)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000300), &(0x7f0000000340)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000400)=0xe8) chdir(&(0x7f0000000380)='./file1/../file0\x00') write$binfmt_script(r0, &(0x7f0000000740)={'#! ', './file1', [{0x20, 'system.posix_acl_default\x00'}, {}, {}, {0x20, 'system.posix_acl_default\x00'}], 0xa, "a9d0760dbac567db75a3b2cc83f9698fbe6c6313c0454c2ed248037fdd1a1f91aa19c84bfb681a97ab424cf1ce682cecf3cc49d62e6ccddcb846d46a9967a700391728061e35e198ddef22abd1d41cec07bb67529ed5e101dac6236f02103476c0b80d224ecb9147941bb21120d8df02210a126ddf1ab21a566ab4d4935949aac5196f73329c67665e8d7e953f952f1509669a1a6da8c1404ab3a3c4ac3778e2453dfdaade65e99f3b94b8c3e8d67b3caff706763523170484821dfeae2e4f93983bd6bb6e967d2208e452ed3b6285607808f2f31551a2e1d8135c1c7fed0051f6f42988d70ee4"}, 0x128) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [{0x2, 0x1, r4}, {0x2, 0x0, r1}, {0x2, 0x4, r5}], {0x4, 0xa}, [{0x8, 0x1, r2}], {0x10, 0x5}}, 0x44, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000440)={@loopback, r3}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$VT_ACTIVATE(r6, 0x5606, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 19:22:27 executing program 4: memfd_create(&(0x7f00000003c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\x82\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\xb5\xc6#w\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87\x8d\x8d\x82|\x94\x10\xdaU', 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r1, 0x2) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) sendfile(r0, r1, &(0x7f0000000180)=0x9, 0x1) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0)="74d6b2c29263edddda9c8c5617b38ff5d23f4b97a26b66189da49085612fb86633aa074df6b9d779849a8f5a7853cccef2734ff70af38717462cf00d8c", 0x3d, 0x80000001}, {&(0x7f0000000480)="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", 0x1000, 0xffffffff}, {&(0x7f0000000100)="e4801a0905e15c697f49c56cd97bbca3eb8d04f0a7cdea749effd72f4bd9475101f74bc31630fdaf1624352d14cb12c980e387c49c72073445476a65488cf71f52c54720adfba3ea3a6bd915b8c46f769672bfa40a5ae60e4af6d07a1bee2863f51744f9b2", 0x65, 0x3}, {&(0x7f0000000180), 0x0, 0xb7}], 0x14087, &(0x7f0000000300)={[{@sbsector={'sbsector', 0x3d, 0x3}}, {@cruft}, {}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@check_relaxed}, {@unhide}, {@check_strict}, {@map_off}], [{@dont_measure}, {@appraise}, {@fsmagic={'fsmagic', 0x3d, 0x8a8}}]}) recvmsg$unix(r1, &(0x7f0000001b00)={&(0x7f0000001480), 0x6e, &(0x7f0000001940)=[{&(0x7f0000001500)=""/161, 0xa1}, {&(0x7f00000015c0)=""/2, 0x2}, {&(0x7f0000001600)=""/195, 0xc3}, {&(0x7f0000001700)=""/220, 0xdc}, {&(0x7f0000001800)=""/194, 0xc2}, {&(0x7f0000001900)=""/46, 0x2e}], 0x6, &(0x7f00000019c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x1) unlinkat(r2, &(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdirat(r3, &(0x7f0000001b80)='./file0\x00', 0x30) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) recvfrom(r4, &(0x7f0000001bc0)=""/229, 0xe5, 0x3c6c2b9caef7cb46, &(0x7f0000001cc0)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r5, &(0x7f0000000000), 0x1b4000) 19:22:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 66) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x5421, &(0x7f0000000880)) 19:22:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="5576068805cdedbc07aa9f4dcc195b5a4284499ccf47132725f579c366e43814a986ef8fb312d5d907c0dc3d8869cc422502e3d81b02542b27ebf9251db15e7bf3d33f0e185e2c7f272a51998a451ba51081a0382d17d2bcbbc850c5ca7c8fa9292e7fd16d304e20264c1ece036dc6ae8f2a2953b000b516be64fe80f6ddec302a4e1a80f4b39120f5f2d080f6c9c9a063ab087235a4a90bd3a83dd108c4580c8e7f01") 19:22:28 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0}, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x400, 0x4, 0x1, 'queue0\x00'}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0xf) ioctl$TIOCSCTTY(r4, 0x540e, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r4, r1], 0x3) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0xf) ioctl$TIOCSCTTY(r6, 0x540e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x6) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x20, 0x9, 0xa9, 0x2, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x40204, 0x8, 0x4, 0x0, 0x8, 0x0, 0x5, 0x0, 0x1, 0x0, 0x4}, r2, 0x7, r5, 0xa) unshare(0x48020200) 19:22:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='statm\x00') r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0xcc, 0x0, 0x7f, 0x0, 0xff, 0x40, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2a, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x1800, 0x9, 0x6, 0x3, 0xffffffff, 0x4, 0xffc0, 0x0, 0x101, 0x0, 0x6}, r2, 0x9, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file0\x00'}) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000080)=0x1000, 0x2) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1212.259410] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1212.259410] program syz-executor.6 not setting count and/or reply_len properly [ 1212.274179] FAULT_INJECTION: forcing a failure. [ 1212.274179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1212.276114] CPU: 1 PID: 9979 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1212.277126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1212.278329] Call Trace: [ 1212.278723] dump_stack+0x107/0x167 [ 1212.279268] should_fail.cold+0x5/0xa [ 1212.279835] copy_page_from_iter+0x40a/0x900 [ 1212.280491] blk_rq_map_user_iov+0x138b/0x1a60 [ 1212.281177] ? perf_trace_lock+0xac/0x490 [ 1212.281785] ? __lockdep_reset_lock+0x180/0x180 [ 1212.282627] ? __lockdep_reset_lock+0x180/0x180 [ 1212.283399] ? blk_rq_unmap_user+0x750/0x750 [ 1212.284033] ? find_held_lock+0x2c/0x110 [ 1212.284629] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1212.285408] ? lock_downgrade+0x6d0/0x6d0 [ 1212.286009] ? import_single_range+0x24d/0x2e0 [ 1212.286672] blk_rq_map_user+0x103/0x170 [ 1212.287269] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1212.287960] ? alloc_pages_current+0x18f/0x280 [ 1212.288628] ? sg_build_indirect.isra.0+0x448/0x710 [ 1212.289379] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1212.290160] ? sg_build_indirect.isra.0+0x710/0x710 [ 1212.290888] ? vprintk_func+0x93/0x140 [ 1212.291461] ? record_print_text.cold+0x16/0x16 [ 1212.292148] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1212.292877] ? trace_hardirqs_on+0x5b/0x180 [ 1212.293528] sg_write.part.0+0x69e/0xaa0 [ 1212.294121] ? sg_new_write.isra.0+0x770/0x770 [ 1212.294790] ? find_held_lock+0x2c/0x110 [ 1212.295387] ? __might_fault+0xd3/0x180 [ 1212.295971] ? lock_downgrade+0x6d0/0x6d0 [ 1212.296587] ? _cond_resched+0x12/0x80 [ 1212.297163] ? inode_security+0x107/0x140 [ 1212.297766] ? avc_policy_seqno+0x9/0x70 [ 1212.298349] ? selinux_file_permission+0x92/0x520 [ 1212.299084] ? security_file_permission+0x24e/0x570 [ 1212.299938] sg_write+0x87/0x120 [ 1212.300540] do_iter_write+0x482/0x670 [ 1212.301224] ? import_iovec+0x83/0xb0 [ 1212.301861] vfs_writev+0x1ae/0x620 [ 1212.302384] ? vfs_iter_write+0xa0/0xa0 [ 1212.302953] ? __fget_files+0x26d/0x4c0 [ 1212.303525] ? lock_downgrade+0x6d0/0x6d0 [ 1212.304115] ? find_held_lock+0x2c/0x110 [ 1212.304719] ? __fget_files+0x296/0x4c0 [ 1212.305305] ? __fget_light+0xea/0x290 [ 1212.305866] do_writev+0x139/0x300 [ 1212.306382] ? vfs_writev+0x620/0x620 [ 1212.306935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1212.307692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1212.308443] do_syscall_64+0x33/0x40 [ 1212.308984] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1212.309724] RIP: 0033:0x7f8812842b19 [ 1212.310262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1212.312861] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1212.313961] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1212.314985] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1212.315989] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.317012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1212.318024] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:22:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d9fc599966bdea27c486e4a27ecf089c49568fd145c8ac0937e91e65f04d7a604655", 0x22}, {&(0x7f0000000080)="e48edd2536265a4995ab795628ee4caa92207fdedf3c6e849461404275267f2a6683e2b005fc2b2efd1dc04dc2a3dc980da30e8f851b65a55b41c46c45ddf8ebb47c3ed27d4ef051ad104880220b084d4745b324978f15ead91f8c6d0bc549358d3b9816c33abfd4f03b8c85646f7b876fad1a46e1fd4417ce5dec616d3d4425df3dc65f65f2782d9784cd8a5a8fa8413aea94556526a4fd529efd04d2ed0fbf95ba", 0xa2}, {&(0x7f0000000140)="62677c1a18e8c5737391a488ddd1d69082f228468d79fefc80f39707d7d294337322cb56ab54f2fbaa691c", 0x2b}], 0x3, &(0x7f00000001c0)=[{0x78, 0x683a1438ff417e80, 0x7, "33c65b2613f6bd4e1b0ce19ae1001137348dcddbeeef5a22fcaefb4e0113e83a967cf857a08d39722841708eba218cde6d366dba5adfcbbd5824c46aff4e10916e3d187c490d4d74ff14a55cc217ba5647d35ac4e089c187da6178434f247a3606c77c4c4239"}, {0x60, 0x102, 0x3, "a38f59ad0c924c572542871959f1fb1f93c44ac5141a5d261fd1e7378053d54e72dc5de1a782f2ea640fca02b3fdfd16cf0412d1fe76361f14cfb94cc26eaab87bc99787a928d996a7"}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="346e93a452c72a7a48673affacbd2fdc866d9f2f35c2799331c2808d8f67143e0677d1ee8477c8ebe934bd021a539727034418260318a710ffab0530dd94a6711e6f8a53924aa6", 0x47}, {&(0x7f0000000340)="872e80d83c8fa5d3f975ea503d", 0xd}, {&(0x7f0000000380)="d1229ffee081081521bdf829096f4fd68ecef140d193df035f1c5b03a8ff6f16d14d4337f8f394a3c542fb3a5be111cf1aeae768ace564291438825c931a0d05e95f6002e4f1b6afe03a18af074d", 0x4e}, {&(0x7f0000000400)="df474beb6dd1c5d80c45f84b705159590550e6f2dda9c678313e3ceab8827d7f8b1dc5d247240ddf6fdde593f93d638d567b98c1954a75f206c3658932f7e6903ec720734abfb9ac9c20740c05bc3a7a74148d86daef9673b54c04e8fa57e497cac7ae6b92693f77e1ec977b4e11d77d25d9cb499ce84bb6d4bd705a", 0x7c}, {&(0x7f0000000480)="81547ecbf39aa375f3595e32920ecce778d5d1773ff99540883e0541df0776f22432c8626131ccae17cb8d7ddffbe250b284801fd6406192e3b90aa566fd75cfb64d3db8e7a6f47ba6c546d5fbdf00d2c8b6147eb9cf9060f7f72333d63d32e2399da3ef8ceaee3f0de169", 0x6b}, {&(0x7f0000000500)="1a1f29a708a70a12182a853a4b7819e1351ae6834161141c25447dbb2908092949f667cae05b3426044dbe30add232bd9893cae8c07273d1", 0x38}, {&(0x7f0000000540)="338c1d07a811a742e98b6bd564b661265cb8ea3308f85109e918935318dc1ed0b7e74d26110d585ed38deb9aa9518636f8df59", 0x33}, {&(0x7f0000000580)="d13ee506ace1cf7e7fef21c1de503f209a6cb123b9aa8a262e8a3df606f4a16de3beb4a52ca1980fc5a8987b3f6245f3663684077cc80a69a787c457d569b2229ba0c5974021f7745ed810e72d1b75aeef0cc355daaa969f5f526993b8f727631c505e42affc5cae00c2187c833898bff65d46b452f7ed1dc66a2b3c0ec0e514bed5e209aca6bd13a986fb10cb43d5e9381316314a60ab5a78929f2c0f242146a14daa804436b0e6119f6f8b89c28630063c868121e21d31460276e5327859ffd8c4580bb2ef1429646a1a3356d2a1d46ae10d1fb865087410222f6de8ff19772c92295238513a8eca99a8b94c04410ee1b169ecfd8409c7bc", 0xf9}, {&(0x7f0000000680)="ef9b6e7d8938a61e79596c6f29937bf12ac92ea152d78fccf8898b95f7b12e5dab97d3bc9f268976f500ce98059e67238aff3205fa3a3a4c66c2ec0e02cb6cfd05725a2b83a4fda47bc788c31544a73864db25ed9c10b5521d1b118ee8132515d028735a46b9", 0x66}], 0x9, &(0x7f00000007c0)=[{0xf0, 0x84, 0x81, "42292a8c4ce4a865d48089d7128f04414adc11a8ec9a621020c95ecf1d8dcc8d93a65949a53bfe9ce78b3defd2bac80d6bdb79937b2c597144201d0c0b0671f826cdca56859743cacbaa14f2863856e7547a3e69c8d799d80b484be112782bc88ed8d7c4817f74215c8e4d099305840d0785fcaca3534781f18cd665211a38a1d39ad15d4b69651305e521d22d3a5bf464f2ca011aa94e457881f17019e565e5541901529f5eba2d5a404e24e862c16b3a98013fcad46bc92a3d4c6553a87bff89b2f54c5ab72fbe6257515693f7840ee452cd9f7e9e0bdeb9b3ba24167fb38a"}, {0x38, 0x115, 0x3, "0014abd4f72b82176134ed99907e09d504650f480dc6f7dd8c1b4c92425f553744f5b0"}, {0x68, 0x111, 0xfffffff8, "fd4fbfec1c06f53ac65258dab25642ead4789ec78140296c522ae77b411a99d7adcfb9586581a9d4d1c1b623291b8cabdbd7d815336f23c156687dc6b3339805e2472d4d8a462eb32d08cc3656e59e0404"}, {0xa8, 0x108, 0x359, "29fa1c5c5a91df7d3d982439cf5d57fdcbd9211e9cfb8667bc854b54de080d327b0483916ee4595d41987ae614ad1e4bf050bc5eb469c918bd293e5fcbf066c9c325488d9620c6bdcca2795a5066473ee48ef998264b7ecbd40d29dcea4686e882c9671ba35698a1d93577d15052a9465b64c720a255939409ec3075ac43ac9442a275004eca424d27ceba4e10ebbf829142ac6780"}, {0xf8, 0x10e, 0x611, "c678c14327b56e27f8e24e18b8335f75befb553147488999386ace2062766c86920ddc79ed6edc3a22a548028ccf02adfcc29fe1ccbfc763a842822237ff32cde9dbe5df1f335065eb80f5caab5c986c856c1e40dc8e8779903fb1b9d1b9f6becd6217749992b4cba704e12ab980311086595c2d4ca88ba8749dcc4a8ab06f10fa3f2aa801f85fe25316aa63a050fc46af9883f41cb0449513b94fdc84b724fb98073fc7e2f5e14b0216234d70dbea20b396972a264acad4277606f4ba8ec0d61acffd4766b76ca8a7fa3936b0ebfb88ae88eed091f3953e2842d26afcf88cd4e6"}, {0xd8, 0x10e, 0x3, "4ca266c19de3c325372c04b86266bc8edabf2b4cbb80f8cdd444b4cc71e646ba2d4519a3fb3818cf543bacc4537ac682cdb7c3111828781f6bb1fad2e0cc22aaf23971707aaa9221884ee4995f5183d9359c1d4d0b820027af29d986be40355eceb57a5e87042ed196520cf1e54d424c1a2655ad96bc45583a46d1c94dcce919630f13a4cb366c2a99b4c3ff07f68e8022445357dfdf3fb2c1aef57c5c692ac1f665175b4ae7d3545e1825bab54bd0dd5e963856de8ddde50e3a4b64729edff0a6c222bb2843f013"}], 0x408}}, {{&(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fff, 0x3}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c80)="ae223cb8fc850246682bf07f191c6c482ed28b10253df0f1b5ec4848329a2359d4f721b8bcd1222f15668b0a2a7ae4ebf4f9a732bdb723d519a4b94553a6444ba019c1f54dd08c4115c8e30b16db6e67f514e13c24ca182b141327d938cbcdb200bae60356786656867c14e57bf95d64d576b354ad626e99b82d60fa73039b607c120dd6", 0x84}, {&(0x7f0000000d40)}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00010000000000000701000006000000c79c5a054d85ca6b9111779f83d06b01b89a097cda7b9a36d813e5170791fd21ac3e900df2470053a17f207f817558259eec4df9f598e44526cdb27491688ba536419b88ba2fa5db4bac1dc19dc2c4f4b14f99c160b8e1898b5b64ad99a2e59d90c6b24e2614a95c61e93b741f320c568dd9415e0d619663211e60cd7c0d058fcfa7e9a3976472a0179d1189f873689eca741a75a8dae7e1507261064eb54324cee01e920a00863fa0c2a40a36bfcdcfa8c3acdd64d97ad41551eeaa030dc168f087073d2d1150919305acff5b8b520a7ff7341524a0e70d92c98708aa7917ec341ec408bd4819f8a9a000000000000040000000000000000301000001000000c404e8e0f340d7df154883f31de74008625749943ed01aaca51014afb0496912c95e9ef3e4b07d289a55b13823000000b8000000000000000301000015040000f04ea586742d2b3f528254c92e4a580733995afdbb0273531fe973f7630581824ed8e8835bc1dd68c56121a3e76393661091ddcbb3a8d4048418f5b5f4197098a9db2c11e9f7a17df3899b14aae9699c8e76814ecfa77569ac7d36767c78f237c35060ac0680dbed43ff7dfcab4bd45ce6067eba1bdc9764022bd164785020444128ab6286012ce007134dc8394c6e19afdac67c219e63cdbc6f8be0d69ccd3fc600000000000000c0000000000000000501000000000000004edbd2e79b77476fe8ea016ce91aa8b5235bffcc31d4bd574ed96f485244728e8c26830fc095d1341256d27e493c87378c78f8d63dd1c4aa2856d145636070ac370fc1864c3879c9757d25f138d7bfb2637de2815807b08ab914bf0230723e265e71aaaff69eb113202c5a8b3ac686ef2aaa5d66de60ac1e456f51cf7920afe5f0afc6b56d16744289a847a8d3567398436a34ff68c82be7478d246e3a5c2bdbccfcaa6eba561abd1edb3ea2d1000010100000000000000b01000008000000ce47c53f5aafd24be8ea0ee07dddfa91fc34c1af80c98eac9abd480e99519755177b7b9579ed8d87361212f206e2d2ee5eb0ad15d63c68fc893c587f7b703cb408da2f00f930dd8eecad52aad2cf9565d79666d4dabea707bf89464e3a8665ec62e490c4e94e3a8d0abb711143f000b5dcea58daf588f3061799c2e551df69597e12762f4d525f8d75e28f85ba3e2d59cbe7566822d6f6661cac939a1391cb30aede9a1e0cfecaa046ba0ef7fa6d8d267592765dd9fbda136fb1c70083c907daed41e431426b2d065dcf3ff2e159fb48ed27a7c69a63b7f0c99195c0da651d60de545207e69cb807f0c1debfe5378b2cb92a36d81bb30357c70fc89d9bbd5fdc8eea491b9125255d3707eb33925c1c2a1dd1bb185f4322caaeed6b912f56c57dedbe122975e2eb3293fe51af1e2a2e6309c04f7f1991e2427c5082ab9ce20ee4d755522b095fd77ca672a6f40df1f18b84af5099ac7766540a64a08a6d2330416c57715318da3ba4b20b5ea335400420083e7cf5c615209e055adcb6536b9c623cdd1639e108d6bb3f6308dc942ca5e57b1d7543ecbcde3f6411b0cf4b782d20273a4f74f98c85f7b4f77e7a368bd93b1898e0070827a77fc3a1b9da29cf2be4744e02bfb01d6d699f9534d7c1189b3cec4413637b7ff36593d6c81530b31ea57044f8ed2afbd46428d9531c0c13dee7d65c7a433fbd5b6a6a6da45f18ede815e5cde939088df12ab539ba7794396e73fcbb44d45557ab1588e1645212f3083a708c228a927ff207ba5eb421fe45cb07069605bbfdcb558376fe325017e75615ab97e4beba75bcbe0f78fbf165f2fccb02b393f4fc9d689410d2d168b63b54bfd24aeeab487fc24f3f18441d6767b52c762d07f11da687d662fb19f7f4cd961c9b83d3f5e2549d57b0174de2992659fa13e9f3ec754a055ff797e2834cd1e1adc0aa1d6f73c94acaedb6bc829ee0de04b68d0f2a32a1934481fa46b9009c783b1fa95dc95542b4b13b35b3fcca298407cfcd29f748a3238402627b86b62a72194e637360b5da0d6848225b82545d0ce98dc7ac1ac32161f011bb7366aed8438dc6707a86420a5ea12479659ecda5145da85c2ac234e3a061db7d393d419b145cb4e1ec8740835e08e5c7d445ab0e3bf6611853bcee4a6fbc994f1e8e861ba5a95c599dec57b5d3454454bd1888a2130f40e16fff71bdcc83cdd71696aec5cf8bb54cce251922fb9f9bfb0663c4d26671908d624dee6a49713daaa974742ce5a2ea89567cd308d91ad4b3aa382223309fdceb03ec86c59619a733c3e9c4a80a314f6514fc4c4dc7acd29d8cf0753d5c665c1044cae7da1e552e8d402aa6cf214a5c28e127056d454650df9e7bfa04bc807a9c9e23df76e0ba0c17ec0668668bc1e5e5070a001e5e63e80b3f10b25c0fed36c3a65f1d941a717af8f2a7fb817e3424dd3ba5a6491815e89035aaf287135c25a67783aee9892142de538e6ef98a88acaa1cdae0a14c40f71055fa56dcd801a0c844670633e8f1dfaddc04f8cab4ac3a5a057db8c2ae9895ec6c2aa265037b06d69cddaab21f3eb3e9b3d60570b8f9dd2a1a788d63e782bc874faad01c39cb47fa21247cc4378381004d1956cd0dd6feb218f5cce17204cff1cca7b94034ec39f0445348298c4f180703c1207938dc37c1aabd624383a692a22428dcc1730de4e359119ab4e2d77fa306422cc9fd2fb04bbb8c4aa9295d6d73aba8925cfb98776419ffce8c43a7426ad79248912157044d9180787ccd91d259f9852dc1619faad8d27c55057d55fbca8e8be1930acf9854331a29675f0828367b9087d98534c233076d463a8d99102f4935466ac333058270ccc5629bc557f6db1eb7f3015956d5a2647d03264ea373960c24c8f626641429fa41139c31143a30316205b34173e675c99e19b3bf5309531a03e6f2c9eb805ddfe8085344b71888817c1acd615607ec4f5b2ec5c300f6c59146e578edad338162a7dbcd1c4b5546f92792c36fef526f073f3c9d0b54ed7f52c35fea9046d7dc9b091c6ed1a3d61f8c64338879bda6c11b7b2fc7517da839d2eeab4d2959b208723395537dd38507cb15923a8ede4862c23e2f85e2d30b28510bbc1398aaf7941b660817e820d477fee621cee0ed08a7a7185aeda2fab57930fe43083a18460f9575c49542be2d37f2b004bfd41eca1db250f387bb03c93ef966e0dc1f1af448bc8e9568602160a924e25ca45a0ddb8b81de79aeab433a02ea3dcfa3a64f43a61da8dc43fd438543b4e63f5de0a382dc660e59e283486833b52dea0b74468f5c84162906e22bb2e039d71eae8c1b12b72f9c4f89b345a21642187062040cc9712a96220ba7f67a07a2790c72e2cdf1a76ebdd355f01b6e1ee618b6f29a879590ccacca285a3ec3db3efec9f4d027caeed433f8c01822b8c7daf067e2b4864e285a22ba57ac25fc1d2d66a3d81e4e7f63b284d9cd530aee277794247ad685366b19d57e219e5e9922693940d508658c6998ea58d4bfa160086437d76521291694f7bf1f5eaec273ee5568c0edc69c5cc9b52718e8be1f7fa144d6945ed06ed2acf431f4f9c9e7ccc76da9b19b6869c41ea52a024111f37d5c429c4676a328991f33c3485141f4d45c5aef8a61241ecb1137ef01d5c92a04e6e25ebe11da35a9003161d9e86d65dc72034e821d259eadee64ac4da5976a053815fb0b261cd356a0513fcb99bef9b06549479be02fc96f6537818cfe295fe97b61f94eafd760d017f61130696215e364454a2cdfecdc9b32c1e1e7fa59bc43771db1e53ebe6e417eae283c4bdb1b08aa90c671c5c29c8fa16d123b42d8293fc97f836e90277a7c4526b27a9e5e9aef671524c8a5dd7e600488652bc41bc6f05d92588bb0dd48a22a75ecd8d72783004a99aa0fb4012a4585659b963fea13f6fc67130e810941cc231a33d052bbaccacdcb9e899cd00404262ac8b6fbc4df7907552abd4a465ffde085ae42ea61e56b7c42636a2764acd040388db0eb4bf76d055a9ef7c57a6a2d6186fb854494f761f797e71e932fa4535b5124e994ec37a3d5d9e32aa1381ae66a7cfa15aec6f7142a1b719f6633f85ed87ecaee76ddf9fc9aa219ea412f73708c0d13c58a41aea29e61a0572f525a3c372550f4b4b1cb4999922f55a0267c392048eae8c9260c9c7d4f3b5f715ad026701afdb1ef917d324ac3002975d18b0eb9388f1de2395230e2438cf6505d1822eb02fa086bb9ccb9d580cc16632d730e2db0528d8503dfa22e5b5b4d5bd8a836775d6eadf1fadf4adb3a018dc33b4f53a0a720f24365e73023620bec2dd089a57ea7f400235caad44161ef196022076f1efba8e9555a5d01e3419500c5b0d2c996cadd82018bc2edcfb419c88b517b40c70058ec5faebfe6c36d1a8bbd62d634e3899fe443631498a6ce2b45ee020251478c451eb37bb9fe117f8b7f930bfd388c947f3b26a1445356c661e8438ecd17929cc71c306ab15556892d7a0f60fb84a77c0fe98eb4469585fd20b23165fc5b6e99fe39621a8d3d4ce8154d7b3ed36a9dcd958f7f332c44b1795a627b44b17177b0e69670e941e27c915ee0593f40f1463ac58e464122cd91dc923bceb12d3019fd33636a809d31fe20adab033fc8a5cf0e974de6414756c0df409a0cca1926e49f9ab9880c028adba2acc64f60caf1c0b2e362cb6ca5b0b0a7d09b14a84dcecc3022925fbe4b11e9652995f6de820bf883266d041c4aba933ccc46dd0e52fc3f82a3b5a9858c0c877ac3cec9b69701a6629797d772a5bb4ed67c9c95fe2ef94f1659f19ff02de1644458c815f206297b104340e392f5c0533b3cd6c5f309ddbd3ad7699d0c0cc196b930894def5f0e501f4db36827d8b7b0f581f2f4798e5d0ba301537d86153e2c6c1bb3e2d6b857ac9382932599be63172f12b68595253ee798e243567748565f2318c19673a389f0429f5c736ae5dc85967ca010ccafcdfe59004fcff5e4c12f3133c18e28ed655669f1e81535c937c42e754ed17f79e8edbaf76174f2dec4a6fb3fb2f5ddf08a41e251894a053f4c4ddbcb2198db6f832a50d0c59c1e9c88f43c9d21f82dca38d1c6388d4c2c772092b57c8cc269edafbb4b10ac70e3bf7916ef89281e8645c95aad2f94af89cf684788078709190a37a8c755dafdbea3c81e59c2a96c1ea4aca143167d4d49c46f42535db8ea1d62252424f9999b4094d801e93b028698bd9fa89bbcd9f45ffadc76b082bcdac830260fa80cac61270d9b25cb803e55cbad71e6aa8745b7911fbc0c58b109b6e62700e3f1b1350ede98cfe3a3aea6c283cdb1d267d309e49bcb9e1cc10c5c50638b3525b75ecfc725c03c66b2108b010c5156490d438f03168a69be4fe465268a845bfe54a35302a373161fd97bf18ca5ea17b5834a7795a037903d015ebbf6a74e683a2779c1738ce8bbdeabbc2560d8ccb5beefde1707beeb2e6486776cd2265de3350529a30ee95e76403f617fcc8b0ebdbe5398f7eeb73a7f59568a96f338ad2969f467b8a0b113ab0af34e57e8d30acaea8c2a2147a26f5370eef4d652b9ed70ddc3d5763b985baed56ce853976d295aa84b92feb6e6fb2814ce301910d994fc224b50665e816b8156397e4c7271c9d789a63fe31f07e25b72a267163d83c4fd883f9b2735e57283006420c7fcbc0da310273294c7049fec0a20797499cb608bebaad07015f15c62574c4a594caf71db55726ac7f69fdd7031e7a505048f695cf94b61c0151954b7d5d903c63bdee130ee81e8c8ecc0068b4531900186b2e3d2af98c6a1eeddf696b456c2f42f9a303eaad984ed2b59686d515a4bcdf20fa6cb0fbe3fae0deb7f1a5f98470694c08bb34d26ed3fd9d82023a4b68d33ff4573fc77b5b40ce9cc7ce07b98088073e4c2ee0cba7eb2bde0fe6186d615e6335857341bbb51c63fe42a638f0e0fed031cf2bf37165121a3b3b9ed6351f9abbd841ce5a5b9f802e1755f11189ef74e9f55a3efaa51dfffef2eeab3095ec187657ca9729edf813ca1c3d000b5354cd435e13066409ebde871fa54b5d75d1d0be45ee232c809c0ced55cdca0d54523000c576b0826a883c5d010cdd212d90925217dd68083611fccee043b033bb225fad1b2014f068191195234d5610f87e3b9aa63dec522a0b6f6a6858fea2ef4d853845463b63982a2ab3cba7b1358c0b31257bacf56f609a84b13eb95ce1f62e54cda4366efd9524e43c597543e6a43fd6d90181b8a08f17aefe24cee40fc20a71ad8ea5c297fc22c4aad205db9e1d954ff27c24cfc16867cf13ea59cdc0c43fc76bf000e1524f9d259852a128fe9077ae213610028c460b9600b0129fa2cc5d1c536cb42db383eb0e6ba1cf4b968a234ea864c7f0ce3110a80b103d9f4a758b6aa5b704793fec800c8df101640efa90b9e8e23520d291615f880cca82a22c0b1b4780db88a7e5a0876b4d184f16f055e33d9a0538d53770ee1463c91240c91257b96eb546027c3453fd3d160ada5a3c9627e95af898fa1a8c6fec5b8d6c6304edf76b807efed55347efa45719a0ba868721fe5e04f6009f3b89d991cd360a319ffc1c99625c960d09febf15cc7b5c568eadc439f603b3b13635d194f2a176d09394c72490a0bf0b966afe9d833718d222eccbcbc0cc246631b27a4b71110a3cd83995801f7d69a73a84aa612ee375811ee8665cc1dd463a8df4404457227300e0fa29f144e4fb19f93382c24ceb0baf8d10baac7b990ed4b99b236fc6f527123a8ce493a8cc762c3c760af6460cbbc3eea02b2a5624f508e40ac0a74a64eff96"], 0x12c8}}, {{&(0x7f00000020c0)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000d40)="6b6e3995f35e43765deaec14e39c906654fe897c90fddf3376fe10", 0x1b}, {&(0x7f0000002180)="82ce198bf83f5df33fa800e702a3d215e2f177fe44affbf0284c8919c0537b8f34e33b333d58ead0f8ad230adad7e646e02ea874c98aee07f7e3cfc3c86a6b2fac69c83b7c974a1a86e92dbfa426f49879dac03a9dde93a6e1cc546598327b5eb1fa27b49c2b386cabc2e760eb3fd306284ae0a7833073f68e65f2a0d5a2b710d1c3b5253e69aef7017fe58794e07532511ca5eb31ec55a56f22", 0x9a}, {&(0x7f0000002240)="9943b0b6249e9e28be2a1d3fc9a182df266c21ef58d4d1bb68d4467cbd37f8ba0ff0dd48a6704a6a1b4650124353026dfc8c71a4c732feea10c7c95c21a9146bbf995daec8e2aa70bba9a7e9dddb43bad633e7d14ee0a13a7b702b9cf35c1806e0cd4b3ec550db4a0989740fe9b32702e92597f2397874", 0x77}, {&(0x7f00000022c0)="5cbb4070dff719e3c1bfee8f062196bc25063e450ae6697d9d4fe698b441f6e3682a0124d7db5ec8564c3e6281151c18417e06c515ff598f78c1d2e55e26d1f771ddcc28009004d4993b423d3ecf4d6823478a93522a5009418e00d99d6ca41a25c1e040e2a65cd9deae90bcff8c637fd300821d8f39f27617b3ebc377efd48e7857d21ed078f0a72af7ba07822ed14c91e082860487c6c45a1dc05eeb1171c9350df930506bb75adeaf1187a08d7774968cdfd85e9c72200081162a09a26b121cea86eb9ea880ebc3c9b5b5b864b62e9c2d04", 0xd3}, {&(0x7f00000023c0)="b031c08ebcd8844a850af85889701370dfa5e4a1c91fec4b", 0x18}, {&(0x7f0000002400)="19", 0x1}, {&(0x7f0000002440)="4e025020bc626d1f24849550d6d2b113d7664af15331237a27a0a223ac4a801de96bc032c155fe4a86041fe0a13ef6f244a175f9b8bb54d249345426de88eb11ecbefa58bca13cebfea51af774f505d646eff41146da5ddd9e83c43719ddb32ba4621ab78ab34181edcb3d9170d1a354a6a5e03d25ca3317f6577413d2e5ea1bb98da3b90d5705858a7a6a77b7cf45e6faa52222807b26400e39ee14618591c3f76c892105b8f4a561c2782e5d35e81e37022575554574fb1649dd74f7f5591c903fbe82288fb80ad1006e03fb7f80ae015483f2c4373c68735163149bd00e807e1db23cdf6fa0e7a5b95c9dbed47278885c61e7e52d5b004374a249c1f90c503adc00943d769bda542048b2be50e0481e3fe098c62dacd83a6ad5a8932ad41e1063d8eeb8862f0d8bef6afe44565eecdc82c96efba3006f062fab09be7c82b1c878884647995d8e4eba60f11a3ba0f1f1ba0a391d0d7c87f5871929e1281d08bf6c86e74bbe4f591d72df80788abdab448724d9a61ab96317aaf144cfb6dc8abd23423023be7e750dd9bf9f14f7bdc67982e3f0f86fd91aa2a2bce97e7de5453f891de3f566da4c1106abcce18a8522c7cb06c56442f7c4f2c9e5bfb8f188136f4044b3762ee2e19f306e9f5438d7ff786a1e6d13e58f456d50d46e85190eb9a1776b36dd87ae2b3c01cabbe6baa186702648aaf6e7f1cfb9f24b3d2044d9f93f4cb67fa743186c710ca9b043f14a770894bbafa5c4162852c9b6d59297af7dbb3f4062aff0374f444d87c02f7fc87d9ffc26a1a46e3f94c4b98b98034545779c0d43572ad3274af4102804932e90f2906d5d2a106785a99084bb79d9a84aeff441dac79b8b2ca10c8bd7f0fc933cf46f0a5dda186e3977fac0958ccaf9a7a71604bae52fa4644068368b9282c6a8212b321dfbec7891c7a961009e28ff08a98474db9f91355bd7c0bc9a31de84532b34349b64be534379cfd53ec4aa94b52985e2839178a5c4e58f305b56915c452eb9507e6a7daa45d938144341843e53908c1c242bc5186a19bfd8c88c3dcbff085ec39aecb203c7bd642b162b40787d98f3f9474d62eb8c52913120a972096310fc64c20bc41c3e2eb54f80a1a59c0ddbb7c717e33f5ecee829c0ccb2541246b1d13e320499eb59aaa0a76122903dff479b513806104456e54e21574a6d76becdd3fdf5288586d36abe975ae9fe9f7fcacf91029aa0ab41dac9d8367acabaf1682ed4daa1f44863670ce1336b1ad1b24d5747f91661487cc46665bfdae229e58429e073b58930146a70143f490f04787199b47865944907df810a531bd9c8f0fa638faef8ad0ebd505fdae67c59fb8c1398bb1be6220dad61ecaf55b74f673ffab1a9bb29ab3209db8f81742a0c6ee60252fc81a229fb1f53b2f8b357394104cc12700c1d9a9e330cbb7bc1460922113f927ba690528c4fd9c40ff8f7b6c69a4564fabfac905aaf7e1c77f1d99afa1cd2504117383aa7fddd5f23eed5d97c9c8645d5342ac9cea33c38fe2f52cb62cbe7293d750f8c471796ab6a6248dc31c3706de3fc2fed02140fd7995e778f4670fd1a8a7c9d6b9df2457768479ddb4816885f8a41a85fb7d494a47faec9127a37ada86f368a922c97a8b493a262ebe24e51497ee99d84a0dc407df2fec32027a182926d389e88b17a097b9818d3789ff708dff6de88cc1af298643d832cc324b8e43c3e564a84d9b0c9db37cae20f95effb1df59534545b85a721813b20b0f70f56fe6b8febce107271121b13f7f1b48f123570f76d1abac3c9b5b297dc5742ea8941ee0f9e53f576f3c956ac9fcb5d4e46732de064e496061fae02d4a28b6bef1f27e88b3752543f3faf77cd8335df29d523cfac95e2808036f2a36573142c0d28a36900f94333e76214018a6c1dcb6b29aac42a271354057cc2c196a2c059cab76ab5305f1a7955a641f842d180f2576d61dc9641b9aacca794f70aed39e923cd4f776e80062d9ffd55703202db582b09ecda74d076ebd6384f15b532a0eb29e9a28284fae2da862b62d43c6b39def575808795bd245c1c39a0d5821672f86ac699e1917f340ef4bb719bb84de6b58ce7b916df4b92e840bcaa0fa2e4b4c1e24743170bf67cd020eb0ce05c1e4a967b38367121181be37be385526423fc692629c6aed58cb6229a45d308cd70a5473c4e19efe7bdac1045d5ceafd2069b5770e6018f13027291f7f2cf04ba230aca66a1c9e311376a5b2fcfc024a2daf11ce27bd1a471d59102d3322ea6fb9eb419f92099b0879b987640a3ded647948f2e0afda550547cb4632dc98bbab84d685b9f2fb12961c1b9c9f8711e32d2ddcc9dc5a8ae7915d0e8b7882ccb83cde369d67069a384a2374eaa6ad8fc84c3fd65a63f554761ea00188d8182a3b25e9264645b97cd9eb171fcf7ea5ec4c14ccbb2aadc0ffffd25015a16a193a2e8725e5f8980ca50da89f03608a3983a1f64cac71e633556f0a172772a90f54f4c728ec702122bc52cb5909759119dde0ba37c46ec190da66e0fa9c996ecf67c9e25dcc2f372051fa536a2a6a8bafe82563491955d2c788c6f396b965dd9210c9892e19b8b538edc96c3685ef73819740b256b1a1920640d58cee047ddcd42ead41b938e812e17ebc8118c9054cb88e5c58252e09fa23b0ea84eda910e6a09fa8b7612f1dd757e2b85b53913ba82dccc605d44b9587bc6173d61b315f809a8e8ecb607bdf572e8775b0ff85068ed7acf31f6e11077ff13d3a47de56a360d7fd987f1e0c8d1d0e9197189fd551d0943433a551eec2f1bc64cfefecceb519d2b560792cdbe09173eeb953edfab27be358bacd5ac478357cf41bf5b901ed606f8096d223f22f3274f10cac1175d4d63e00b057f1279f1ecb5ad4a26976a1d8473711b76dd5b3b6199953b2b3405e5cf8ccbfeb597d42dba0be6b1246bb19b632b9a3aa41b472244e68f6bbacc53d7198430af7d46a37dd296a5e88d3f387ee345f9d0297001965257d62e71e9c3c2c053944ef718fdb4aaf5c5c154c7ae2a9a9f90b336279a1dedbb2bf565fbead7e438b9cc91116a61c4760d3e8828ca0bac52e18684680e1ffa44a92974cb0f45c7c9cc8bc6a7249f71448ce830a0fa239b1c20cacfabfa0a9798c35a3f165cabdaeb55211b800fd3ce763a6eee3d6082e695fefc87be7a8b5ecdefadbfb796e4c3bb5d28e45f6a83b2c6b70066269633538ab8588f3f82b7ecfa53e3f6aa3a88ae027ccc6a87e662496fb1facbd9a5dfcf06926998e476d588b9545fbc238e557b4934bee72987374a6196bb3d864aa67871753e5d142055f70be670a15b7354349e4bfe056c3aaa579bd731de32f6e4cd69d1a23d4549b6a998c25a7824994a1cc2509d4d705c1aa4f8c5e6d73a7fafb93cf1ba2bba0b6fbaca9afc64fb7069291df5c544cb84c7967a2b6560fc58c4f8f1d14cae2d9cbdf0a10dd0a7e71f0224215d06f19f822f84079d7809bca8dc87b29ee71e552853b75c0d9d75c0f5c5ac80e1a31daf4a9d45a5411134d025c6b5d477cb330c5e8451f9fcf0a701f7e35eb2f65b404017f552750a5160d4af9f8caca71430a155dd6b2921c7f8b78f84ae22bbaf39a0b682cac09ed1c961e0470787896dad3358b74b62e03af820f6ae231341e8888513929bd4b8522ba8752c80d250c78ba5339e7636f6d59ae9ad09dc041d4aeba498782438ca4100c031794d3d0b6d3e276062fa676598483b7f59c4d86f50b5b736366c57e3e9f2e3421dbe8eddc77ba8abbdb43934f11bdd204f3c853ba65100e7c67ba07bbe671596d394c3589ae18cedc9ae25e6e631b4d4724829a14f9352aa6f5495899a10e06603481ef28776f336d4865b350e62cd7f692f1c0096ff1c0ad3487d1e626523eb8f643c3418cab7cd3859719aa70d1fa809ff6ea109dd9e6e22fb5e388518720ca4353f397ac44f5f1139fb9f7e1d7019776958376ebb5541c621f8125267f3db2ba0cfed8a5a34ab4e1a8e1adee7250cbb335da9a5eebd06272d86d1ce7759a2dc442110c8a60210725f8b827709c28c38e8defb3427f529e5652d365dfc311c0093955cad8a6e5c8472781cc1eb3b48e07cc90a76f4258aa9d1ab623171ed1b4f60574108352b8cbfefc0b69f0d8138be66f34cc4f102e0f51e4bf57177658499c1b1c399bb7255dfd161101c19db6aca72e0c25d061b3745648557c4182899a1db19ccde95dd08540817f002bfa92a82c598bc3ff7d30edacd4c420c49e27d38a621d62c500b8bc49de27a825dd58d14ad5a0278e34f7f63b284d6fba365e3a0fad1bb4f367a5b5ec3082ee06c377430c693462b1a467ee318d774a83ac64ca129074055c3e4a8f9232e9687135db987ab82720a3aa4d1f0f35ba04faf0cecc18fab29dcb14c4257212a7679d06f3d018f3a7d5109bdf762e869dce34cb96218e490f22cd67cd2950f86f42f148cb5cb234f44964e41f027441049e622cc8250680637b8a94ddcd60cb1e55a51679c3e63a140c98d49be2894a813e24782adb990b7bad76a24a1562b15208f5a256f619ddefcaf3e53ea7a189ca311dc4b55b7087d4d0185677d31acca1e9fff98825e794b6a8196cc1374abeb00e2e501c7e810a36037e8a290c214023d5dea6931b9bde2c8282d38d1066418a1e298f4a922d805f5e305d1182d89986b07b078d82cca9b204fa2e1e9b0f44da23fc0d23bbc4fb81abd1e501b053e4de5d676b92f7cbd2a9d4071cdb7f0764190fcabfeed1dc4df9a3cc207dc2a618e02ad6e5716ec3031b4067b206e3db65aaf8eebdc147241c9b542a169ce315e87e8fa536631cb711bfeae811743f48d21d95c22efb7569a10da9fcaf98f0ab55fef310b2f87b6ad11ab2576b0740a5cdd805db4f444e060746ae6cb9ebb1db316201da4d4ba95978cebe2cd930a068462721cc0772502f6f98c871d9ad85df2345d8f4c252bd18113f442260f104fdd0ffb908d1be8e2b5bb53a0ad238b0235618b0d631ebf2edc5d685139c998af0d0974b5c26f02f26b817b849b8317a3687535babd02be1b029b62fcff3c167db3e05c8430491ab346967ab62caa35f2c7e44f62e9ea5401550bf811902c2ae951805a2eb8f3f2d69e9357ee4bfd9155d3f1c4eed138139a78c6587e8c416a8faf3889a61352f711bdec81eb80d67e3246e53a1cc6600dda0687f4cf88204de608d33023c0a0075ad3b171c1922a10672224a9ecb9db7663d90c1b14449bea826555ae9e3ef8f11761d6ee5d72b8089535d35750ccf1f5d41adec573a4c301a38790fa6cd606ec9f2589b8c25ea028198d799287a9754349523b90dac80ec21d6e3b1b805ccf7693d7b8cc9e8f02e51c00c26a4df729594c84f684e0e96b4b20ab4844d38f11d750e69734d275db20c4c52d98cfda32d0a0d16830b9d886fd2f400c87120613bac7994f9ce8637d6dc347d1805c1cb2a794feb11811823f1fe1dec7c73563b0d365a4b542e1b421ee3eeb8fde4498eaadafb867bc84261d04f66d74d35ce27b5aeb9f6ea95d4fa46ff4271b40391eeb7fc2adde3b23cd69867380e924faee021d5c922044121fa3258c34eda9a6ddef1cc58570f2e38f4a1b87a9b32054eaa6f93a437449dd1c21c64c1168031df554e4224916dd697de1f6bef0e461432ce164369dcf2066dd72f45f2b708a4dd307d25eba23373ad9a294b63b66d6b57660ccdd592cdb5ad45819787c5d6d27b0e38624a583de424e040d42fa80201e413c0abac0efdc507ea589ff37cb65e9a74aa66edcd279026680e2a52638", 0x1000}, {&(0x7f0000003440)="0035c79a5eef4e54b0e3f0649d9bd43831e43bda8e91c2f773cc4ad243610d7705955d4f5251c5340d42554369d52b5423dfb0c20d077caa4cd1fc485f44a0b39bdd193034eb", 0x46}, {&(0x7f00000034c0)="c16d6ca32f915ea1975d87026aa89a662222d4839f7082399fc558289467ce035c4e57cf4b0de5430373688b32d53f4a8d770d8e1c629acfc6ba59dc5f3d", 0x3e}], 0x9, &(0x7f00000035c0)=[{0x10, 0x107, 0x8}], 0x10}}, {{&(0x7f0000003600)=@rc={0x1f, @none, 0x8}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003680)="a20eca025d40fc133da42a0028a33abb6abe919fa9872a59fd335b934aeddb62a5102be5ca65ea09b6dae4529090ecc3a5ea74411ff6bedb7fcd2bfbab1fa1fbe8fb93e050fb569a421551d1ed1037112499866280148049119031383cf094e9ccf89494d7", 0x65}], 0x1, &(0x7f0000003740)=[{0x50, 0x113, 0x200, "b85c16cd512c7f1ef7a4aec5bcf4a62c21c5dd90cd0d3d905937d1511953d4333b317f2eed9d873c653c2b74c547f7e07c58cb109629e02e1f"}, {0x18, 0xff, 0x0, "6e0179f4b535"}, {0x18, 0x113, 0x5, "296af354dfbb23"}, {0x1010, 0x29, 0xfffffe01, "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"}], 0x1090}}, {{&(0x7f0000004800)=@l2tp6={0xa, 0x0, 0x100, @local, 0x2, 0x3}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000004880)="9db1bd9277a0a2bdff7ad39ae4dd9c30cc4c", 0x12}, {&(0x7f00000048c0)="33796f2e4363dbb46993aaddcff3e965fd27752fb61611510456e4fe6240574d3f02414274145c1def29e67ade0a2ca420127ca0c8522eecd3cf1b606d7330023fe21731df6a76da83de9be559e91f7fc78eb7694a0c295f7a410ee0fd885c4db5bc0bede74fa51c7fe574e35540b74642e5280d9b9910d8ff0483569af80532ea9e94b1a414d7af700e0b", 0x8b}, {&(0x7f0000004980)="c9266e0c01e80dc9a2b9917b621cbe6c158f4baa713ecedc465bf0256494a7e1fbcc76a020ba2cfe457d0c52ec9617cbcdc190ea0a422fa9cbd4ef557b728b2200dae2dd2baa245d9cd6effac2f8ef19e20fc43976a9fc659178627321f5d08d5a474d73c064b9f7a2e806047f42383dae7b7ef50c7bf67958210635e3c820b0f59781e31bf5394509d7bba3329931747662b11258c3c509778c422fbfff797a76f1eed0290c5d4698cbed070656007c2f1cc19f30104cca339c3c50", 0xbc}, {&(0x7f0000004a40)="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", 0x1000}, {&(0x7f0000005a40)="8f4431eb751bc5d19061eab8afb9bc4f1c73af0ce3d6df02e082178ad13b76cdee6e1bc898bb5ac22c6b97d8a5f0469eb79ea0ecf024f4eea7ae8d34f6590b5e7d9fef97321801b57fded1dfa8927b994af260340cf7cceba7932b13d193c8a2b877f22465fb1a778910efb10202b93b7363808e98d32b38cde53d952b022b94be2e0aeba7add8aed528283530ddf7dcaa30e539ba3716", 0x97}], 0x5}}, {{&(0x7f0000005b80)=@nfc_llcp={0x27, 0x1, 0x0, 0x4, 0x3, 0x96, "0fc54f4798719da9f85c6a5effc3b699ea3d25d371b583acff0010bdb7131b954cfd3a97da20fc39f78a42ff064a52feec66514d875996a07baa7238dce717", 0x1e}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000005c00)="d5263e4436c73e282a14706ff043d0fc43530c3ad1db9d1bc382eb78", 0x1c}, {&(0x7f0000005c40)="debecd9cf8cc9844a3f472473c3d64e3bf051094c8faa362a986486788ea1602a7445c56a3296498020a3de5c64c117d6d6091401e3dc0ddc47e0c82e0b2672c70f61abdd724ef646002ec97ed0d305a1fe872511183ea75423b4586", 0x5c}, {&(0x7f0000005cc0)="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", 0x1000}, {&(0x7f0000006cc0)="cf77a73352ae556c9cd972e77c0fb0e46cd356cda9c4e08c0de8a36436307dbdc43cc45c709cdf2f50675548fa858b53efd91a73e7eda52d33ace2331b9661896016d4d5b2b63d2a7f59eeec574250cc3edf9f30d2edadddae1ca492722e02a634ee7746e525848b5d0599a9", 0x6c}, {&(0x7f0000006d40)="c8c9c4036bce84224dc1f80616adf4d8b1f03ea44cccc900a6d52c349f40f0c5482039384250a53727bbc18642c99ffca601f25f71e398a8a0a05a59fd552268d2ac978f8e8df1d7efda5b082504e3abcb4a788af03882e6c01b1da781d6623cbbf1dd5ac6a3e33f816da0396a04f59ab455afc9847f0849a9b1589fd0bb92588e20b00f9bef5830533bb7303969c46c6f9b35b44031011f2c4612504e265382c32726d9a13bfc484848727849af28a5802feaaa087886527a0c95d43003fd80e81af0cb7e67ad6e37437aed05d8608cd3b170a75e79e1d0ccd8b1", 0xdb}], 0x5}}], 0x7, 0xc000) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 67) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x5450, &(0x7f0000000880)) 19:22:42 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x8, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @mlv2_report}}}}}, 0x0) syz_emit_ethernet(0xaf, &(0x7f0000000000)={@empty, @multicast, @val={@val={0x9100, 0x2, 0x1}, {0x8100, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0xe, 0x8e, "b51e", "2eb4590d4be136b63aa3ff3dc8db1ec11c8d409ff47fd4aac8302a84013a7a4e1a71f2828e4d479a011f26eac653ef92eeb4174d0ced288d435756ec965b607aee9b7a2565911915174b1dd77b83608b16fe120728cc572e7b05a16f902e81ca28fcaa62c9c3f66b4ba40c64e7591a399dfa6ff3eebac50db472cd1bf12b1e238437a00cff1881bb6e72041f9b8316b378e5ee4182"}}}}}, &(0x7f00000000c0)={0x1, 0x3, [0x649, 0xf37, 0x77d, 0x192]}) lseek(r0, 0x30000000000, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x28804, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@version_9p2000}, {@version_L}, {@loose}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}]}}) 19:22:42 executing program 5: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x1000}, 0x4) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000280)) fallocate(r1, 0x1, 0x4, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bind$packet(r2, &(0x7f0000000000)={0x11, 0x1, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x3f, 0x0, 0xffff8000, 0x1, 0x652}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x1) socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) 19:22:42 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000140)={0x2, 0x100}) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r5, &(0x7f0000001380)) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x80800, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@aname}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@cache_none}, {@version_L}, {@msize={'msize', 0x3d, 0x9}}], [{@appraise_type}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@uid_lt={'uid<', r5}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '$'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}}) finit_module(r1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r6, 0x6) r7 = getpid() connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) fcntl$lock(r6, 0x24, &(0x7f0000000100)={0x2, 0x4, 0xee84, 0xf9ab, r7}) 19:22:42 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) 19:22:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2c403, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffff, 0xfffffffe}}, './file0\x00'}) fsetxattr$security_selinux(r2, &(0x7f00000010c0), &(0x7f0000001100)='system_u:object_r:lost_found_t:s0\x00', 0x22, 0x2) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x40c00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001900)=ANY=[], 0x128}, 0x0) splice(r1, 0x0, r0, 0x0, 0x0, 0x0) r2 = getpid() pidfd_open(r2, 0x0) syz_open_procfs(r2, &(0x7f0000000080)='coredump_filter\x00') [ 1226.947787] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1226.979102] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:22:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfffffff7, 0x4) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:42 executing program 7: acct(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1e300, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000063c0), &(0x7f0000006400)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r0, r1, 0x0, 0x20d315) r5 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r5], 0xfdef) getpgid(0x0) socket$packet(0x11, 0x3, 0x300) [ 1227.001773] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1227.002985] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1227.002985] program syz-executor.6 not setting count and/or reply_len properly [ 1227.012964] FAULT_INJECTION: forcing a failure. [ 1227.012964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.013954] CPU: 1 PID: 10024 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1227.014509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.015167] Call Trace: [ 1227.015389] dump_stack+0x107/0x167 [ 1227.015685] should_fail.cold+0x5/0xa [ 1227.015996] copy_page_from_iter+0x40a/0x900 [ 1227.016357] blk_rq_map_user_iov+0x138b/0x1a60 [ 1227.016732] ? perf_trace_lock+0xac/0x490 [ 1227.017064] ? __lockdep_reset_lock+0x180/0x180 [ 1227.017445] ? __lockdep_reset_lock+0x180/0x180 [ 1227.017814] ? blk_rq_unmap_user+0x750/0x750 [ 1227.018162] ? mark_held_locks+0x9e/0xe0 [ 1227.018488] ? find_held_lock+0x2c/0x110 [ 1227.018843] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1227.019326] ? lock_downgrade+0x6d0/0x6d0 [ 1227.019655] ? import_single_range+0x24d/0x2e0 [ 1227.020017] blk_rq_map_user+0x103/0x170 [ 1227.020342] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1227.020719] ? alloc_pages_current+0x18f/0x280 [ 1227.021086] ? sg_build_indirect.isra.0+0x448/0x710 [ 1227.021494] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1227.021918] ? sg_build_indirect.isra.0+0x710/0x710 [ 1227.022315] ? vprintk_func+0x93/0x140 [ 1227.022629] ? record_print_text.cold+0x16/0x16 [ 1227.023003] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1227.023409] ? trace_hardirqs_on+0x5b/0x180 [ 1227.023761] sg_write.part.0+0x69e/0xaa0 [ 1227.024087] ? sg_new_write.isra.0+0x770/0x770 [ 1227.024454] ? find_held_lock+0x2c/0x110 [ 1227.024783] ? __might_fault+0xd3/0x180 [ 1227.025103] ? lock_downgrade+0x6d0/0x6d0 [ 1227.025452] ? _cond_resched+0x12/0x80 [ 1227.025760] ? inode_security+0x107/0x140 [ 1227.026090] ? avc_policy_seqno+0x9/0x70 [ 1227.026419] ? selinux_file_permission+0x92/0x520 [ 1227.026807] ? security_file_permission+0x24e/0x570 [ 1227.027206] sg_write+0x87/0x120 [ 1227.027481] do_iter_write+0x482/0x670 [ 1227.027794] ? import_iovec+0x83/0xb0 [ 1227.028107] vfs_writev+0x1ae/0x620 [ 1227.028401] ? vfs_iter_write+0xa0/0xa0 [ 1227.028715] ? __fget_files+0x26d/0x4c0 [ 1227.029038] ? lock_downgrade+0x6d0/0x6d0 [ 1227.029375] ? find_held_lock+0x2c/0x110 [ 1227.029706] ? __fget_files+0x296/0x4c0 [ 1227.030028] ? __fget_light+0xea/0x290 [ 1227.030346] do_writev+0x139/0x300 [ 1227.030633] ? vfs_writev+0x620/0x620 [ 1227.030938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1227.031357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1227.031768] do_syscall_64+0x33/0x40 [ 1227.032065] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1227.032471] RIP: 0033:0x7f8812842b19 [ 1227.032768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.034204] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1227.034807] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1227.035367] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1227.035929] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.036490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.037049] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:22:42 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x5451, &(0x7f0000000880)) [ 1227.052181] Module has invalid ELF structures [ 1227.052976] kauditd_printk_skb: 39 callbacks suppressed [ 1227.052987] audit: type=1400 audit(1707506562.907:177): avc: denied { module_load } for pid=10021 comm="syz-executor.4" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=205 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 1227.056889] Module has invalid ELF structures [ 1227.061755] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:22:42 executing program 4: socket$packet(0x11, 0x82f7a124ec92df24, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3}, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt(r0, 0xffffff36, 0x477, &(0x7f0000000200)=""/220, &(0x7f0000000300)=0xdc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfc, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x10) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[{0x1, 0x9, 0x0, 0xfff}, {0xa84, 0x8, 0x4, 0x8001}, {0x6, 0x8a, 0xff, 0x2}, {0x3, 0xa3, 0x9, 0xffff}, {0x81, 0x80, 0xf8, 0x7}, {0x0, 0x1f, 0x6, 0x81}, {0x5, 0x20, 0x7e, 0x8001}]}, 0x10) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000140)) lseek(r2, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x200f5ef, 0x0) [ 1227.106348] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:22:42 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xffff, 0x240400) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="122ebef7f420ffd9de5a6f6994faa24879d46b232391c274f365f970f5069b820b90d5f6786b11e8f600027f2eaa5526e9194eca3145c3d60b98031f4c5164da6d92d2a837350000e1507985befec6c377c3311f3d125d6ef068ca884066e166f3a43d665f368de746d76ceec4a3efbce71d3c455c2c668c5eb4c541bef200"/151) [ 1227.162116] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 19:22:43 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x321400, 0xf58763693b62e4b6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x301, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="502d6d6d69743d30783034303030303030383030e4303031302c00"]) 19:22:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 68) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x2}, 0x8) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) dup2(r1, r0) [ 1227.267024] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1227.282317] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1227.282317] program syz-executor.6 not setting count and/or reply_len properly [ 1227.315145] FAULT_INJECTION: forcing a failure. [ 1227.315145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.317753] CPU: 0 PID: 10057 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1227.318932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1227.320343] Call Trace: [ 1227.320797] dump_stack+0x107/0x167 [ 1227.321436] should_fail.cold+0x5/0xa [ 1227.322096] copy_page_from_iter+0x40a/0x900 [ 1227.322863] blk_rq_map_user_iov+0x138b/0x1a60 [ 1227.323657] ? perf_trace_lock+0xac/0x490 [ 1227.324368] ? __lockdep_reset_lock+0x180/0x180 [ 1227.325163] ? __lockdep_reset_lock+0x180/0x180 [ 1227.325968] ? blk_rq_unmap_user+0x750/0x750 [ 1227.326729] ? find_held_lock+0x2c/0x110 [ 1227.327435] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1227.328343] ? lock_downgrade+0x6d0/0x6d0 [ 1227.329055] ? import_single_range+0x24d/0x2e0 [ 1227.329855] blk_rq_map_user+0x103/0x170 [ 1227.330556] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1227.331364] ? alloc_pages_current+0x18f/0x280 [ 1227.332151] ? sg_build_indirect.isra.0+0x448/0x710 [ 1227.333012] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1227.333934] ? sg_build_indirect.isra.0+0x710/0x710 [ 1227.334789] ? vprintk_func+0x93/0x140 [ 1227.335462] ? record_print_text.cold+0x16/0x16 [ 1227.336265] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1227.337149] ? trace_hardirqs_on+0x5b/0x180 [ 1227.337914] sg_write.part.0+0x69e/0xaa0 [ 1227.338615] ? sg_new_write.isra.0+0x770/0x770 [ 1227.339401] ? find_held_lock+0x2c/0x110 [ 1227.340109] ? __might_fault+0xd3/0x180 [ 1227.340787] ? lock_downgrade+0x6d0/0x6d0 [ 1227.341519] ? _cond_resched+0x12/0x80 [ 1227.342182] ? inode_security+0x107/0x140 [ 1227.342891] ? avc_policy_seqno+0x9/0x70 [ 1227.343585] ? selinux_file_permission+0x92/0x520 [ 1227.344414] ? security_file_permission+0x24e/0x570 [ 1227.345280] sg_write+0x87/0x120 [ 1227.345869] do_iter_write+0x482/0x670 [ 1227.346538] ? import_iovec+0x83/0xb0 [ 1227.347194] vfs_writev+0x1ae/0x620 [ 1227.347820] ? vfs_iter_write+0xa0/0xa0 [ 1227.348495] ? __fget_files+0x26d/0x4c0 [ 1227.349161] ? lock_downgrade+0x6d0/0x6d0 [ 1227.349874] ? find_held_lock+0x2c/0x110 [ 1227.350580] ? __fget_files+0x296/0x4c0 [ 1227.351274] ? __fget_light+0xea/0x290 [ 1227.351929] do_writev+0x139/0x300 [ 1227.352537] ? vfs_writev+0x620/0x620 [ 1227.353198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1227.354069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1227.354953] do_syscall_64+0x33/0x40 [ 1227.355588] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1227.356466] RIP: 0033:0x7f8812842b19 [ 1227.357100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1227.360214] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1227.361509] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1227.362717] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1227.363927] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1227.365136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1227.366322] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1227.384509] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 19:22:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0x63, 0x1, 0xfffffffffffffe00}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x9, 0xff, 0x6, 0x6f, 0x0, 0x7, 0x70610, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xb62}, 0x200, 0x800, 0x7, 0x9, 0x1000, 0x9, 0x631, 0x0, 0xffffffff, 0x0, 0xe5b}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000040)="ceb74c3d531517c27e75abf147b1fc66afdb", 0x12}, {&(0x7f0000000180)="d9a16129a06a0c5b77fb3ccb2568a9bb76601d1a9a71d69ff5ba5aca9d56e8b89f0c29b0", 0x24}], 0x2, 0x1, 0x1}, 0xf1f80003) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 19:22:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x5452, &(0x7f0000000880)) 19:22:58 executing program 2: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x4000, 0x8, &(0x7f00000001c0)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, @out_args}, './file1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x400300) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x1) r3 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3f, 0x101800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) open(&(0x7f0000000440)='./file1\x00', 0x4040, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r5, r5, 0xffffffffffffffff], 0x4}, 0x9) kcmp(0xffffffffffffffff, 0x0, 0x1, r4, r5) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) fallocate(r1, 0x44, 0x7, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 19:22:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 69) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:22:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5808}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x10000000) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000073) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r5 = syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffff, 0x200000) getdents64(r5, &(0x7f0000000500)=""/192, 0xc0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r4) writev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)="4a53b184776310813b26a2419f577d7964400f9ef0702e1e4a137b1012c213ac0edfb67afab81c36d697f8e1b72d06928b67886349ef7bc859531f084238d7dbb4cf96b73c259c53d8ff00b8cf40d20b9a556718d4c0748bbf4cb7807a160bdd94afe54edcda0b914f6f9a2849c5c5e3c6dd448ddf121b9319526758e9b52773e7e429cebd5c25f85b96d4b2388c97937e7fdc14775b1f1cfdf6b9fd8ab00d1f0bc8b2e9cb59118d3c4868cc790bd50113232ddbc4656f1a394db52f64c11d160497549114f1ce07be22dd8ea4da0379d71b998677d5b45f5e96cd6cfde9ff5f404b95c082", 0xe5}, {&(0x7f00000006c0)="fccb5e1d6633a42fe9c88b3113b50f256fbc42867a3e0d088c1bdad74aac73bffe2df4ff47e33c473318bac71a5755bf223e51ee4fbe90b425a89da6472a36c435fece11d24619afbfd464289c6fd9ebd173d533d7c4a15183e3283f9853d8db9293d0e88f05d1692843075534eec1d3c6fbea51c41ec216c9bef0a8899f8b5a2fff2af7a8cb4b657fecdedb8e832f4f4b52e6ac1f976049b2ec4db4b3531d357fd5e0105e0c173d5257ef048b34a0f1178585dbb4f48bb0272e82c8ceeebcca5c4f", 0xc2}, {&(0x7f00000007c0)="838759bae89517a73d1c4ca10c4dafbbcc833ddc3284894b5578130bd452ee460e83c5ae44b5cff4fc497c6802b697d266c0d1726655279199862c96e5af8375d7b128300ddcdf673f7cfb42d0ff4941b5d7b437982db384339afa259c2147ccb08c722f0c3a5dc23da2b673a3b10d895a2e282f80f23da33c4decfb102ca4ded3e6fdfc9ca7499f694c6125fe92b09e8b962f79dadc1220dc473192637e64d5e45a74c79d57aea9458877679374a168bbea1cbdd9c87fb84470fcf9693c89a842982656", 0xc4}, {&(0x7f00000008c0)="19b8bed66eab0f3dbabc7859453567d893abba06e744349dd92529ecb13a4f96a32f1b77899edd234835e8cb0de80f2c2a288878f0183e551c86ff26058f475689427a7c1714cfca4ecf601c099f3672f1b3cf6cbb3c34967581af4a1b21bf639b67e89166732d3ba46d816aa9d713722c19f4a4133db4ee2469fa3f514e7bcd82b0b583224fe23a3483f6bcf0e3f6a83978ccb843aa9c795516b7ead76474f118f34ed447dacb8509e9c7910a849d4f4f904461d8503255e78dd30643c9076913589cab83c87c298ede332749915c2a683b2c482d831bf8e443ba80f8050cf0", 0xe0}], 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop1', 0x400240, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) getpid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 0x7, 0x1}, 0xe) 19:22:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) readv(0xffffffffffffffff, &(0x7f0000001540), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x922c0, 0x100) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1910c1, 0x8) readv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r2) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x143, 0x2) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000700)="8f4d5e460bdb81b16786afe6b2ef15fc87e7c5ae914fba8ad8245d2c1117cf378d3e76d36f5a6f3a2540178290ad6a32645c21b0563fbb87688e016fa6d115753f895133590470aef2d95c4ee6ff661ae59f", 0x52}, {&(0x7f0000000200)="cd354c6c1f254b8a357a843d", 0xc}], 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000100)={0x0, 0x2}) pwritev(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"300a53c0d72e8eff97a87777ea169ba3", r4, r3, {0x0, 0x4}, {0xf408, 0x7}, 0x2, [0x2, 0x3, 0xfffffffffffffff9, 0x4, 0x2, 0x5, 0x100000001, 0x8, 0xffffffff, 0x1, 0x5, 0xfff, 0x1, 0x7, 0x1, 0xfffffffffffffffd]}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x240, 0xfffffffffffffffd}) getpid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 19:22:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000880)) 19:22:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x27) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1243.038851] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1243.038851] program syz-executor.6 not setting count and/or reply_len properly 19:22:58 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/keycreate\x00', 0x2, 0x0) tee(0xffffffffffffffff, r0, 0x100, 0x12) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="fd"], 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x2, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000880)) 19:22:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r1, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:22:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x5460, &(0x7f0000000880)) [ 1243.076373] FAULT_INJECTION: forcing a failure. [ 1243.076373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1243.078067] CPU: 0 PID: 10076 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1243.078800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1243.079671] Call Trace: [ 1243.079955] dump_stack+0x107/0x167 [ 1243.080345] should_fail.cold+0x5/0xa [ 1243.080759] copy_page_from_iter+0x40a/0x900 [ 1243.081243] blk_rq_map_user_iov+0x138b/0x1a60 [ 1243.081751] ? perf_trace_lock+0xac/0x490 [ 1243.082200] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1243.082778] ? __lockdep_reset_lock+0x180/0x180 [ 1243.083320] ? blk_rq_unmap_user+0x750/0x750 [ 1243.083805] ? find_held_lock+0x2c/0x110 [ 1243.084274] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1243.084834] ? lock_downgrade+0x6d0/0x6d0 [ 1243.085269] ? import_single_range+0x24d/0x2e0 [ 1243.085774] blk_rq_map_user+0x103/0x170 [ 1243.086202] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1243.086696] ? alloc_pages_current+0x18f/0x280 [ 1243.087179] ? sg_build_indirect.isra.0+0x448/0x710 [ 1243.087712] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1243.088269] ? sg_build_indirect.isra.0+0x710/0x710 [ 1243.088800] ? vprintk_func+0x93/0x140 [ 1243.089214] ? record_print_text.cold+0x16/0x16 [ 1243.089720] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1243.090252] ? trace_hardirqs_on+0x5b/0x180 [ 1243.090720] sg_write.part.0+0x69e/0xaa0 [ 1243.091207] ? sg_new_write.isra.0+0x770/0x770 [ 1243.091780] ? find_held_lock+0x2c/0x110 [ 1243.092228] ? __might_fault+0xd3/0x180 [ 1243.092650] ? lock_downgrade+0x6d0/0x6d0 [ 1243.093085] ? __lock_acquire+0x1657/0x5b00 [ 1243.093566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1243.094113] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1243.094681] ? trace_hardirqs_on+0x5b/0x180 [ 1243.095130] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1243.095712] sg_write+0x87/0x120 [ 1243.096081] do_iter_write+0x482/0x670 [ 1243.096495] ? import_iovec+0x83/0xb0 [ 1243.096901] vfs_writev+0x1ae/0x620 [ 1243.097284] ? vfs_iter_write+0xa0/0xa0 [ 1243.097708] ? __fget_files+0x26d/0x4c0 [ 1243.098137] ? __fget_files+0x8f/0x4c0 [ 1243.098552] ? __fget_files+0x296/0x4c0 [ 1243.098985] ? __fget_light+0xea/0x290 [ 1243.099401] do_writev+0x139/0x300 [ 1243.099777] ? vfs_writev+0x620/0x620 [ 1243.100189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1243.100737] do_syscall_64+0x33/0x40 [ 1243.100750] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1243.100759] RIP: 0033:0x7f8812842b19 [ 1243.100784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1243.104234] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1243.105032] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1243.105783] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1243.106526] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1243.107275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1243.108026] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:22:59 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000240), 0x60, &(0x7f0000000280)=""/186, 0xba}, 0x0, 0x40000202, 0x1, {0x1}}, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) r4 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xf01befeb9eaba0ff, 0x194, 0xb}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="751b465f136f683a2e30fb00", @ANYRES32=r0, @ANYBLOB="020000000000cc9dca0966696c653000"]) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) [ 1243.177960] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:22:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="f0000000100001000000000000000000ff020000000000000000000034ba000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) [ 1243.234838] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:22:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup2(r0, r1) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x10c) accept4$unix(r3, &(0x7f00000011c0)=@abs, 0x0, 0x80800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x21e000, 0x88) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000240)=ANY=[@ANYBLOB="010008f30000000018000000", @ANYRES32=r2, @ANYBLOB="00000000000000002e2f66696c6530001ce720861242e2a1bb4552a0f0e683beda633daabc1f6daaa53fb532f6a192157605babbe6bc17c46e59feca3e918b87c5621e5ae7aedd684e9e742c9370793d2be76fbd63f521cf8737c38c4bb7e32fb1caf39382771b09031bf4b433758ada6a7400518f024c186b9de73fb00f6c905e77484bb4bb34498a0236d2b87287103bac82c802f7078973861f7fea00283397495b00f9f5ce16e3f36cd7dee0a1ed61b36e8a"]) mq_timedreceive(r5, &(0x7f0000000140)=""/106, 0x6a, 0x2, &(0x7f00000000c0)={0x77359400}) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x20010, r4, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000000)={0x24, @long}, 0x11) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd=r7, 0x1, 0x0, 0x2, 0x1, 0x1, {0x0, r8}}, 0x80) 19:23:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8901, &(0x7f0000000880)) 19:23:16 executing program 4: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7572b6b99d676747838b532dd66d61736b3d3030303030303030303030303f"]) 19:23:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 70) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:23:16 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x43, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472566e733d66642c7266646e6f3d5ca705c15f8e995ffa5a23b6137db168e38f1b7983f4750fa46ff43076272565dd5d41ed76f0dd0259357ba1fc0000be168c6b65374604de1db71012bc3b4b93171da1dc903470195eb0df0778edf069ee924a3301a4ac93dce2b13cfee764a5fead4a43e47cde8c770081c1158d03ac358fe95d8b019095d4f07e092fdb7a0682a7eceb48c0f54ec09a3e29548681fbddea283c44ede87dfae5ecf6a6", @ANYRESHEX, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB=',privport,\x00']) 19:23:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 19:23:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x800, 0x7fffffff) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000680)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x630a, 0xce52, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x1, 0x1, 0x8, 0x2c0, r2}) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)=ANY=[@ANYBLOB="99bccc826cddca", @ANYRES32, @ANYBLOB="08000000c75c7396200b000000194b002e00000000000000c7aac517d09057361ca01ac8c18c25c70d56c322caad44d82eda616622f70fad206e28a469e712dee7c5cc2f38c10950a5c0f2129f6e1c3b18b7efb13f44d5bcc50cbaa1cac748aded51a61ab5fc475e0d4ef872fe106270cc36d81cb37653f26917dab605a5c824a575e8128c21091f14ee37965f146d9b6a8ab21fbbdf8f165d3ffc97032ab9e7842e11cafb3ffe3d75b3ab16f462991bcd1f292d66abc36585c68f9a9e58e8fffc18100000003968943c3df265348449c69bfa344292f3ac80b5a26a23f13cc426e55c81ab7636f56669b562286983da72c58277243916a209642135b0a610d8844b05ca8215e686d1e2ae549082a13b499b6547064725078ee31f5a47d5467a660291f0c6f60fe1ae4862ea902ae7800abd58cd9198d068091762364b14e7bf27dd913ad94995e7cb127a57f981d89c91c1a952cadb74850f653d4f696556899ecec00f0cd7db05e39e1851a5ca027b88c0027466a055ea1fba43b0f771a179fdec4838793e3fe285298cb37bbab91278449cab6220a52f878505bed98862e2d5143cc83a13babc507ce8d4e2c7cd599d079e995ae09298cc9a1739b6b0aee58cc88cbbdd572e39ef5ea9c44af4c69285c4b6f16dd1e21d596dbdd108406750c8f16056f6fd11f7102b9ac96caf4e325e51bb"]) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x4e230000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000280)={[{@journal_path={'journal_path', 0x3d, './file1'}}]}) 19:23:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="017f00000000000000010000", @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00', @ANYRES32]) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000880)) 19:23:16 executing program 7: syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @link_local, @val={@void}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) [ 1260.264599] FAT-fs (loop4): Unrecognized mount option "ur¶¹ggGƒ‹S-Ömask=000000000000?" or missing value [ 1260.270710] EXT4-fs (loop5): error: journal path ./file1 is not a block device [ 1260.276728] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1260.276728] program syz-executor.6 not setting count and/or reply_len properly [ 1260.279156] FAULT_INJECTION: forcing a failure. [ 1260.279156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.280728] CPU: 0 PID: 10129 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1260.281452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.282340] Call Trace: [ 1260.282628] dump_stack+0x107/0x167 [ 1260.283024] should_fail.cold+0x5/0xa [ 1260.283436] copy_page_from_iter+0x40a/0x900 [ 1260.283913] blk_rq_map_user_iov+0x138b/0x1a60 [ 1260.284411] ? perf_trace_lock+0xac/0x490 [ 1260.284851] ? __lockdep_reset_lock+0x180/0x180 [ 1260.285342] ? __lockdep_reset_lock+0x180/0x180 [ 1260.285842] ? blk_rq_unmap_user+0x750/0x750 [ 1260.286313] ? find_held_lock+0x2c/0x110 [ 1260.286753] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1260.287318] ? lock_downgrade+0x6d0/0x6d0 [ 1260.287756] ? import_single_range+0x24d/0x2e0 [ 1260.288240] blk_rq_map_user+0x103/0x170 [ 1260.288675] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1260.289177] ? alloc_pages_current+0x18f/0x280 [ 1260.289854] ? sg_build_indirect.isra.0+0x448/0x710 [ 1260.290677] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1260.291528] ? sg_build_indirect.isra.0+0x710/0x710 [ 1260.292329] ? vprintk_func+0x93/0x140 [ 1260.292960] ? record_print_text.cold+0x16/0x16 [ 1260.293722] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1260.294526] ? trace_hardirqs_on+0x5b/0x180 [ 1260.295232] sg_write.part.0+0x69e/0xaa0 [ 1260.295886] ? sg_new_write.isra.0+0x770/0x770 [ 1260.296627] ? find_held_lock+0x2c/0x110 [ 1260.297291] ? __might_fault+0xd3/0x180 [ 1260.297933] ? lock_downgrade+0x6d0/0x6d0 [ 1260.298616] ? _cond_resched+0x12/0x80 [ 1260.299241] ? inode_security+0x107/0x140 [ 1260.299905] ? avc_policy_seqno+0x9/0x70 [ 1260.300555] ? selinux_file_permission+0x92/0x520 [ 1260.301329] ? security_file_permission+0x24e/0x570 [ 1260.302132] sg_write+0x87/0x120 [ 1260.302681] do_iter_write+0x482/0x670 [ 1260.303315] ? import_iovec+0x83/0xb0 [ 1260.303933] vfs_writev+0x1ae/0x620 [ 1260.304523] ? vfs_iter_write+0xa0/0xa0 [ 1260.305157] ? __fget_files+0x26d/0x4c0 [ 1260.305799] ? lock_downgrade+0x6d0/0x6d0 [ 1260.306466] ? find_held_lock+0x2c/0x110 [ 1260.307130] ? __fget_files+0x296/0x4c0 [ 1260.307782] ? __fget_light+0xea/0x290 [ 1260.308414] do_writev+0x139/0x300 [ 1260.308986] ? vfs_writev+0x620/0x620 [ 1260.309611] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.310451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.311277] do_syscall_64+0x33/0x40 [ 1260.311873] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1260.312694] RIP: 0033:0x7f8812842b19 [ 1260.313293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.316225] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 19:23:16 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000280)='./file1/file0\x00', 0x2) r2 = dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) flock(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r5 = openat(r2, &(0x7f0000000300)='./file0\x00', 0x101000, 0x4) accept4$unix(r4, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) getpeername$unix(r5, &(0x7f0000000400), &(0x7f0000000480)=0x6e) timerfd_create(0x8, 0x0) timerfd_gettime(r3, &(0x7f0000000340)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) [ 1260.317436] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1260.318744] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1260.319872] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.320996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.322129] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:23:16 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1000) r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="fd8fa8f3cfd6f856d9ac315138b375061649d21aaf58a0cd7c2475a250c6df0ca3d26d299deecd9ba001568b22c4930e56b02128e67c942cf49e7b09a03cf0cd2a0ffd367557a10cf670c4b1d6ce125ca7636391f1c31df034a65772ff9c8ca5784651628dc2ee70684f8ac6ab9489dd273c0e0091671cdf1ec88ad0fc9c8e96e834199a04c86a4a4741a1d6b4894c0cd4c2bebf49635163f18dae0bf005f9118d07a3f3c1c515d0dbcbe226d60fdf8d64bfd402a2e99fc437c5455c736440beb6f6cc31cd46ea31e48de9b34181c68e94694f88486b204f0df4d2c8632c2e991f9e74e7dd259cc8f65cfa1773de3ccc308912", 0xf3, 0x2}], 0x40, &(0x7f00000002c0)={[{@huge_within_size}], [{@hash}, {@obj_role={'obj_role', 0x3d, '}]\x00'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':&\a\',:#/'}}]}) execveat(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000380)='.^\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='/.&}\x00', &(0x7f0000000440)='$\'-\'#\x00'], &(0x7f00000005c0)=[&(0x7f00000004c0)='*#\xf5/*,^\\!&.,\x00', &(0x7f0000000500)='--\'\x00', &(0x7f0000000540)='{-[\x00', &(0x7f0000000580)='\x00'], 0x800) [ 1260.370373] FAT-fs (loop4): Unrecognized mount option "ur¶¹ggGƒ‹S-Ömask=000000000000?" or missing value [ 1260.375583] EXT4-fs (loop5): error: journal path ./file1 is not a block device 19:23:16 executing program 0: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x5, 0x0, 0x0, {0xc}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x4840) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x14, 0x848, 0x70bd29, 0x25dfdbfe, {0xf}, [@typed={0x55, 0x29, 0x0, 0x0, @binary="d3dc606879415df33df2eecca2ebc9a57f9c0f5610a9fac1468a9f5a92101f3261c045dae728565f7df6f20c58bb101daac943d823c04c7683f14157c762e037c68d0cd432537ab8fafe4e37430cc67745"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22004840}, 0x0) [ 1260.431273] tmpfs: Unsupported parameter 'huge' 19:23:16 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) r1 = getpid() r2 = pidfd_open(r1, 0x0) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, r1, 0xffffffffffffffff], 0x4, {r0}}, 0x58) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6fe67c266f7b64e343ebf65ccefdce98df0dca6a3b565d388514722a7e53ce18beadcdb4bf25c638a76e34a920154f362527d821e6cb41ce2e94fa6621091a4f05a1f53c4a44905179", @ANYRES16=0x0, @ANYBLOB="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"], 0x670}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000048c0)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) getsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000004900)={@multicast2, @loopback}, &(0x7f0000004940)=0xc) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, @in_args={0x2}}, './file0\x00'}) recvmmsg$unix(r6, &(0x7f0000004740)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000180)=""/25, 0x19}, {&(0x7f00000003c0)=""/26, 0x1a}, {&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000000440)=""/138, 0x8a}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)=""/63, 0x3f}, {&(0x7f0000000640)=""/52, 0x34}], 0x7, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000fc0)=""/203, 0xcb}, {&(0x7f00000010c0)=""/129, 0x81}], 0x2, &(0x7f0000001180)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000001280), 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)=""/80, 0x50}, {&(0x7f0000001380)=""/157, 0x9d}], 0x2}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000001480)=""/115, 0x73}, {&(0x7f0000001500)=""/131, 0x83}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/90, 0x5a}, {&(0x7f0000003640)=""/1, 0x1}, {&(0x7f0000003680)=""/152, 0x98}, {&(0x7f0000003740)=""/251, 0xfb}, {&(0x7f0000003840)=""/249, 0xf9}], 0x9, &(0x7f0000003a00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000003a80), 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003b00)=""/115, 0x73}, {&(0x7f0000003b80)=""/239, 0xef}, {&(0x7f0000003c80)=""/17, 0x11}, {&(0x7f0000003cc0)=""/63, 0x3f}, {&(0x7f0000003d00)=""/125, 0x7d}], 0x5, &(0x7f0000003e00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003f00), 0x6e, &(0x7f0000004640)=[{&(0x7f0000003f80)=""/140, 0x8c}, {&(0x7f0000004040)=""/196, 0xc4}, {&(0x7f0000004140)=""/180, 0xb4}, {&(0x7f0000004200)=""/239, 0xef}, {&(0x7f0000004300)=""/116, 0x74}, {&(0x7f0000004380)=""/214, 0xd6}, {&(0x7f0000004480)=""/160, 0xa0}, {&(0x7f0000004540)=""/216, 0xd8}], 0x8, &(0x7f00000046c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x6, 0x21, 0x0) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000000880)) 19:23:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 71) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:23:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8902, &(0x7f0000000880)) 19:23:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040)="c5079f7920a9975e1bdee6baf7b6e76782ab1de9e80c35274bb37b48b47e07a101221c707b742e21ead4d7f2ed08f1abe5c06c5bf40c049211691d732e65ca9a7d4eec0da835f2a29dc37b100e67d9e8f8d487dce23204ea83e2acd4f71563789b2d121bda09a3acd707066e45a5446d53068a19cbf7dece2a1503b7621de9787ba9a7bae35d36d43ac6314bc5c7ca514f74a61792b357af947b48eb14e20a0bef395636cdaaa551cce03b3b441b35e6e81ce7b608316934a2899988c9b4f1eaee92c9394526eb89e56570584201310ff24c99f97a1efe671016f437995daaabac138626d911fe73affe43bba33f8da0") bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:23:16 executing program 4: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x248803, 0x0) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x86) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42, 0x11b) close(r2) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff810013a0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200600, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000400000027530f1db6a92f551cf3c9ff37defcd3782b56681b16b3ce329e27b5441f24fbffa267f0365f2e37f35a763d1f0d57b1a2f266ed5c6d1a03e5120bbc7ee18f9e29f0f8204defbbef3f4a2688232d72f472427ffaef0000000000008000888ae8f5b7b16413450c04f4a242d65088b5ea0b568b7fc6", @ANYRES32=r3, @ANYBLOB="00100600800000000000631211f8f2117277a1ecba3c9400000000000000000007000000000000000000000000000000000000000000000000b8d8a43200"/72]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/29, 0x1d}], 0x4, 0x20, 0x1000) close(r1) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 19:23:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x38) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 19:23:16 executing program 1: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) fallocate(r0, 0x10, 0x3f, 0x2) [ 1260.573129] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) [ 1260.582764] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1260.582764] program syz-executor.6 not setting count and/or reply_len properly 19:23:16 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000800}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1178, 0x21, 0x200, 0x70bd28, 0x25dfdbfe, {0xf}, [@typed={0x8, 0x7b, 0x0, 0x0, @u32=0x13530f54}, @nested={0x4, 0x94}, @generic="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", @generic="5a10926c19003d65c48a3a0a8fe6912c51a3a8ece53df232172329b26eceb2abbac3bd99c53b0617e10af1812662a48bef08f6c4e1ccb9d909b3639c61f00ea4142bf4bac735cc4910bc5cdd20fca6fa34713dc861419352bbcbc84d31a8febe3916a6cc1a21d88b00e2c072541ef3357cf8f3e016dcedf9efd924b18d7793ed59456331b367ee557c29c9a144", @typed={0xc, 0x22, 0x0, 0x0, @str=':m(,!(*\x00'}, @generic="3b6b861a4be10e41151ef25752d5175dba4ae2ba6b9576eb8ad579568d7e9a31143815b759d5f335b9f21b3503c9150b827d196bb5d1a5ec2ebb9d8424684e126a2783893dcb192dc45ea4ca11ffbe75fc52234b51bd7b9096c7d0f9ff482eee91504d21de22bbdddfc1a82811ca5f27383d54334bb82caca0398491f67a7a78ec60d3d3e6ff3ec7417667cfaf1a5a4b61db7c1f9d671473377470bd42a2b9ce2f7a92250cbcb7a52b7a46cfa4aec590e263a13dc7cc9f103c10c75e"]}, 0x1178}, 0x1, 0x0, 0x0, 0x4}, 0x8008000) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001600210c00000000000000000a0000009f00000096d31ee9806c346abfb5fd8e54eb7b5c5fe358dd718e9f06d59d2c00b3f48b557e3125c91d73773941780af8399a4e73da7b7e08c71463e85af1e83627bc384f81b1118d53f5c7c1b19da4ff8bd1e14ba04a018556492b15b3c22ae5a149b3031ae4"], 0x18}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4089c0, 0x1) [ 1260.597191] FAULT_INJECTION: forcing a failure. [ 1260.597191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.599927] CPU: 1 PID: 10168 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1260.601198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.602539] Call Trace: [ 1260.602951] dump_stack+0x107/0x167 [ 1260.603520] should_fail.cold+0x5/0xa [ 1260.604104] copy_page_from_iter+0x40a/0x900 [ 1260.604782] blk_rq_map_user_iov+0x138b/0x1a60 [ 1260.605551] ? perf_trace_lock+0xac/0x490 [ 1260.606292] ? __lockdep_reset_lock+0x180/0x180 [ 1260.607024] ? __lockdep_reset_lock+0x180/0x180 [ 1260.607741] ? blk_rq_unmap_user+0x750/0x750 [ 1260.608414] ? mark_held_locks+0x9e/0xe0 [ 1260.609041] ? find_held_lock+0x2c/0x110 [ 1260.609682] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1260.610502] ? lock_downgrade+0x6d0/0x6d0 [ 1260.611142] ? import_single_range+0x24d/0x2e0 [ 1260.611878] blk_rq_map_user+0x103/0x170 [ 1260.612602] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1260.613338] ? alloc_pages_current+0x18f/0x280 [ 1260.614089] ? sg_build_indirect.isra.0+0x448/0x710 [ 1260.614954] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1260.615903] ? sg_build_indirect.isra.0+0x710/0x710 [ 1260.616873] ? vprintk_func+0x93/0x140 [ 1260.617484] ? record_print_text.cold+0x16/0x16 [ 1260.618367] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1260.619133] ? trace_hardirqs_on+0x5b/0x180 [ 1260.619817] sg_write.part.0+0x69e/0xaa0 [ 1260.620619] ? sg_new_write.isra.0+0x770/0x770 [ 1260.621346] ? find_held_lock+0x2c/0x110 [ 1260.622124] ? __might_fault+0xd3/0x180 [ 1260.622730] ? lock_downgrade+0x6d0/0x6d0 [ 1260.623386] ? _cond_resched+0x12/0x80 [ 1260.623987] ? inode_security+0x107/0x140 [ 1260.624627] ? avc_policy_seqno+0x9/0x70 [ 1260.625251] ? selinux_file_permission+0x92/0x520 [ 1260.626009] ? security_file_permission+0x24e/0x570 [ 1260.626771] sg_write+0x87/0x120 [ 1260.627304] do_iter_write+0x482/0x670 [ 1260.627914] ? import_iovec+0x83/0xb0 [ 1260.628635] vfs_writev+0x1ae/0x620 [ 1260.629414] ? vfs_iter_write+0xa0/0xa0 [ 1260.630158] ? __fget_files+0x26d/0x4c0 [ 1260.630919] ? lock_downgrade+0x6d0/0x6d0 [ 1260.631615] ? find_held_lock+0x2c/0x110 [ 1260.632345] ? __fget_files+0x296/0x4c0 [ 1260.633166] ? __fget_light+0xea/0x290 [ 1260.633998] do_writev+0x139/0x300 [ 1260.634602] ? vfs_writev+0x620/0x620 [ 1260.635293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1260.636340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.637312] do_syscall_64+0x33/0x40 [ 1260.638045] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1260.639072] RIP: 0033:0x7f8812842b19 [ 1260.639739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.643243] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1260.644820] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1260.646132] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1260.647511] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.648819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.650163] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1260.669591] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 19:23:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8903, &(0x7f0000000880)) [ 1260.775727] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:23:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffe, 0x3}, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x30000, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:23:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x51}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x4) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) openat(r1, &(0x7f0000000080)='./file1\x00', 0x100, 0x140) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000200483600"/32], 0x0) [ 1260.818280] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 536870976 (only 16 groups) 19:23:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000180)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) execveat(r3, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)=[&(0x7f0000000240)='syz_tun\x00', &(0x7f0000000280)='syz_tun\x00', &(0x7f00000002c0)='&p&\\(]\x00', &(0x7f0000000300)='veth0_to_bridge\x00', &(0x7f0000000340)='&\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)=':\x00', &(0x7f0000000400)='syz_tun\x00', &(0x7f0000000440)='veth0_to_bridge\x00'], 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) 19:23:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8904, &(0x7f0000000880)) [ 1260.876820] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:23:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0xffffffe7) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0xef43, 0x99}}}, 0xa) [ 1260.920847] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:23:30 executing program 5: madvise(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0xf) fork() 19:23:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 72) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:23:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000600)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x10}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x33fe0}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_CAPABILITY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x8000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000880)) 19:23:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/176, 0xb0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000200)={0x0, 0x80, @status={[0x4, 0xb6, 0x4, 0x0, 0x0, 0x101]}, [0x7, 0x0, 0x9, 0x7, 0x40, 0x2, 0xa6, 0x3, 0x40, 0x45e5edfd, 0x8, 0x0, 0x0, 0x91, 0x6, 0x6, 0x7, 0x10001, 0x1000, 0x2, 0x3, 0x699, 0x80000001, 0x8, 0x1, 0x6aa164d, 0x8, 0x7, 0xf79, 0x1ff, 0x8, 0xcbc0, 0x66a, 0x7, 0x5, 0x4, 0x9, 0x8, 0xfffffffffffffffd, 0x4, 0x1, 0x0, 0x4, 0x7, 0x7, 0x9, 0x20, 0x7, 0x3, 0x2, 0xfffffffffffffffe, 0x1ff, 0xfffffffffffffff9, 0x9, 0x1f, 0x42d, 0x1, 0x7, 0xad6, 0x53ce, 0x40, 0xfffffffffffffff9, 0x800, 0x2]}) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1f]}, 0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="f0000000150001000000000000400000fc02ff01000000000000000000006500ac1414ba000000000031813c780000000000007ed4604400000000000000000000004000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00"/168], 0xf0}}, 0x0) 19:23:30 executing program 2: unshare(0x2a040600) r0 = syz_mount_image$nfs4(&(0x7f0000000240), &(0x7f0000000000)='./file0/file0\x00', 0x20df, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="63fc94507fafd8d3d4a3fa1ce4b1a80a9f5adbf62c60910e5466e512c111cf080dde1bafb818a1015627c33afedb221c69f15fb3361693e28bcbec83faeabca878e87b27afad51d8826c942093e1b72011671a6f1823e5ac79070b08ce3792400145986341ceeac55df9ebd0c67bc87dff00000000000000196d36c89269faf2f7d1b57d32a20a6dadcffd607c037f2ef0ec70d5873d2024361af62346e79ea666effe5f834d71b59fa28b85005fd29359603bece27f9e0e516523eb2d06d9dd6ab983c31ceb992dee116f7dc9332310254c99d95b4c7876ecbe1ca38c65b02bbde957", 0xe3, 0x2}, {&(0x7f00000001c0)="781218c444e4f0f34e1b73ab4276c2b9ba901e015d9937dd7b5302bbba47f194520f8ffabed815a5", 0x28, 0x800000000000002}], 0x280000, &(0x7f0000000280)={[{':(:/:\xc4\xa2G\xcb\xc0\xc7vH\xa9\x1e\xcc\xc8\xe2\x17\xb4\xe4\xc3\xf1\x9d\xea\xf7\xc0\xcd\x1c\xda\x04\xef\xc9C\r\n\x00M~\x96\x02\x9b\xfc\x90=6}j#\xf6+\xb5d\xd7 \xafi\x9f\xef\\\xa1\xcc\xa8\x0fq\x81\xad_T\xa9d\xc5\xf2sE\xa2\x00\xf0\xa4\x901\xee@\xb0\x04\xb26\f\x87\xe0\xb3\xf6\xd9\x82\xd9M\xde\xa3*\xe1-K5N\x12H>\x99\xa0\x1d\x95\xbe\x8b\xe6\xa71\xe6\x1d,\x01\xb2\xc5\xfa\f!\\D\xb5\xfbEG\x1a\x87-7\v\xe8$\xd9=bYl\xaa\x97\x15\x06\x95\xafL\xd4\x93\xcd\xe1y\x06\xdd.\v\xc5\xcf\r:\xdbY\xa2\x9c\x04\x06\x9bJ\xe9nG\x98\x9bL\xdf'}, {'^#/'}, {'\x00'}, {'(\xab@(\'#['}, {'.'}, {'$:.*/[,-!#!('}, {','}, {':$/\xa4\x1fu,'}, {'%#&'}, {'\vf\tz\xfb\x0fh\xfa\x83\x8b\x14\xc7\xff\x99\x00>\x02'}]}) unshare(0x8000800) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mq_getsetattr(r1, 0x0, 0x0) 19:23:30 executing program 7: statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r0, r1, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x303242, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xbdc6, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa674}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x80000000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001d00210c0000856da21138ad9a53020056f8871fe270855559eccb3247ff13db00"/49], 0x14}}, 0x0) 19:23:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x420800, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01082020c07a3b8ea626a07a8ec6d791b9262383e94aa2c61b53e03188d5abe5e7eed0aaf4ce71168fe0cbfad64d3374f5e3653e6ec21e8f6df96a20345f5b0fe6bed5c80e846e999d798cb92fe8548b57ece455edb50ef74d8c19d77e9b2068f203771e44d6c290ddb0f69aed69fd76e75edf02377b3c85d7edd955393db60ef7c08c81a06589a5c43c"], 0x24) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01feffffff00"], 0x6) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x3}, 0x6) 19:23:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8906, &(0x7f0000000880)) [ 1274.831365] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1274.831365] program syz-executor.6 not setting count and/or reply_len properly [ 1274.834945] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1274.835358] FAULT_INJECTION: forcing a failure. [ 1274.835358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.838091] CPU: 0 PID: 10231 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1274.838848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1274.839761] Call Trace: [ 1274.840058] dump_stack+0x107/0x167 [ 1274.840471] should_fail.cold+0x5/0xa [ 1274.840895] copy_page_from_iter+0x40a/0x900 [ 1274.841384] blk_rq_map_user_iov+0x138b/0x1a60 [ 1274.841906] ? perf_trace_lock+0xac/0x490 [ 1274.842359] ? __lockdep_reset_lock+0x180/0x180 [ 1274.842872] ? __lockdep_reset_lock+0x180/0x180 [ 1274.843381] ? blk_rq_unmap_user+0x750/0x750 [ 1274.843860] ? mark_held_locks+0x9e/0xe0 [ 1274.844309] ? find_held_lock+0x2c/0x110 [ 1274.844760] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1274.845340] ? lock_downgrade+0x6d0/0x6d0 [ 1274.845806] ? import_single_range+0x24d/0x2e0 [ 1274.846311] blk_rq_map_user+0x103/0x170 [ 1274.846759] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1274.847279] ? alloc_pages_current+0x18f/0x280 [ 1274.847784] ? sg_build_indirect.isra.0+0x448/0x710 [ 1274.848339] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1274.848924] ? sg_build_indirect.isra.0+0x710/0x710 [ 1274.849481] ? vprintk_func+0x93/0x140 [ 1274.849923] ? record_print_text.cold+0x16/0x16 [ 1274.850447] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1274.850997] ? trace_hardirqs_on+0x5b/0x180 [ 1274.851477] sg_write.part.0+0x69e/0xaa0 [ 1274.851926] ? sg_new_write.isra.0+0x770/0x770 [ 1274.852439] ? find_held_lock+0x2c/0x110 [ 1274.852895] ? __might_fault+0xd3/0x180 [ 1274.853338] ? lock_downgrade+0x6d0/0x6d0 [ 1274.853822] ? _cond_resched+0x12/0x80 [ 1274.854249] ? inode_security+0x107/0x140 [ 1274.854700] ? avc_policy_seqno+0x9/0x70 [ 1274.855136] ? selinux_file_permission+0x92/0x520 [ 1274.855667] ? security_file_permission+0x24e/0x570 [ 1274.856215] sg_write+0x87/0x120 [ 1274.856596] do_iter_write+0x482/0x670 [ 1274.857024] ? import_iovec+0x83/0xb0 [ 1274.857445] vfs_writev+0x1ae/0x620 [ 1274.857859] ? vfs_iter_write+0xa0/0xa0 [ 1274.858291] ? __fget_files+0x26d/0x4c0 [ 1274.858726] ? lock_downgrade+0x6d0/0x6d0 [ 1274.859174] ? find_held_lock+0x2c/0x110 [ 1274.859640] ? __fget_files+0x296/0x4c0 [ 1274.860087] ? __fget_light+0xea/0x290 [ 1274.860527] do_writev+0x139/0x300 [ 1274.860912] ? vfs_writev+0x620/0x620 [ 1274.861328] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1274.861900] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1274.862468] do_syscall_64+0x33/0x40 [ 1274.862876] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1274.863432] RIP: 0033:0x7f8812842b19 [ 1274.863843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1274.865822] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1274.866088] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1274.866642] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1274.866650] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1274.866657] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1274.866664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1274.866681] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1274.917003] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:23:30 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000880)) 19:23:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8907, &(0x7f0000000880)) 19:23:43 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000001340)=ANY=[@ANYRES64, @ANYRESHEX]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x5e7270a966ef3db7) creat(&(0x7f0000000280)='./file0/file0/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001380)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000}, 0x1402, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000015c0)="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", 0x11f) r3 = openat(0xffffffffffffffff, 0x0, 0x404100, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x120) getdents(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0xfef) fstatfs(0xffffffffffffffff, &(0x7f00000000c0)=""/65) sendfile(r0, r1, 0x0, 0x20d315) r5 = dup(r3) write$P9_RREADLINK(r5, &(0x7f0000001580)=ANY=[@ANYRESDEC=r4], 0x1c) futimesat(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {0x77359400}}) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000140)) 19:23:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8940, &(0x7f0000000880)) 19:23:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_map}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = syz_io_uring_complete(0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @link_key_reply={{0x40b, 0x16}, {@any, "dbfd10cc0a352f4f88eed317b663e8cc"}}}, 0x1a) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @disconnect={{0x406, 0x3}, {0xc8, 0x2}}}, 0x7) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x80010, r1, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x7}, 0x1}, 0x7ff) 19:23:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:23:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 73) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:23:43 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x71}) dup2(r0, r1) 19:23:43 executing program 2: r0 = socket$inet(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000280)="f8dfef5402746c30adc962258104de2e8bfca2030a4813069af541bf1675433b", 0x20}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3f}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x50}}], 0x2, 0x40) [ 1287.486249] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1287.486249] program syz-executor.6 not setting count and/or reply_len properly [ 1287.497678] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1287.500858] FAULT_INJECTION: forcing a failure. [ 1287.500858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.502354] CPU: 1 PID: 10275 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1287.503155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.504112] Call Trace: [ 1287.504443] dump_stack+0x107/0x167 [ 1287.504893] should_fail.cold+0x5/0xa [ 1287.505364] copy_page_from_iter+0x40a/0x900 [ 1287.505906] blk_rq_map_user_iov+0x138b/0x1a60 [ 1287.506486] ? perf_trace_lock+0xac/0x490 [ 1287.506993] ? __lockdep_reset_lock+0x180/0x180 [ 1287.507558] ? __lockdep_reset_lock+0x180/0x180 [ 1287.508123] ? blk_rq_unmap_user+0x750/0x750 [ 1287.508661] ? mark_held_locks+0x9e/0xe0 [ 1287.509160] ? find_held_lock+0x2c/0x110 [ 1287.509667] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1287.510298] ? lock_downgrade+0x6d0/0x6d0 19:23:43 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000000340)="53595a4b414c4c45522020080000e680325132510000e680325101000000ddff40660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff50490c45302020202020201000ace603325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531", 0x85, 0x600}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x810, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x731, &(0x7f0000000080)={0x0, 0x1e84, 0x1, 0x0, 0x3b8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r1, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd=r4, 0x70, &(0x7f00000001c0)=[{&(0x7f0000000240)="055079d0eb71448c9a6c36b4b1d01a287a79ecdcd5778366d5e272a9679993e8ad9b2ec47668f56fe904fc345f2a1f4e33f066cd155a90b2d85d6b501efd61a8de7b5e8e6254e27aa01e5786727f20038a1d7b58485f24cafdadb94760f3c40a6474d951eaf207a3ed2a792c7a420e7120032cc1aa58c303dcd20f1dd0823f672e6f14447053a66dae6bdae775c9c7", 0x8f}, {&(0x7f0000000400)="27176e5328c2de01780b6b5435e1cc92c74e207754b74a0b915151e0469387913745c3c2632430fa8b93996cdd5df33ba79d3bb736745705525511dc03c69985406f0673939a254c7f44582b91158ab441508ff02fd633eec39b052d8ce9e2541208b1ab0210b81e02e9851f559c6667b07e497274a3b9673c29f5f30dc7a236e6ca738f0fb7de97132eef3ae8299d9012bd1b36648688ed3c759b497a56847bc982e4bf89931b122eede7773e", 0xad}], 0x2, 0x0, 0x0, {0x1}}, 0x2) syz_io_uring_setup(0x562b, &(0x7f00000004c0)={0x0, 0x883b, 0x8, 0x0, 0x221, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000580)) syz_io_uring_setup(0x39e0, &(0x7f00000005c0)={0x0, 0xe2e6, 0x8, 0x1, 0x1af, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000640), &(0x7f0000000680)=0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r7, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000700)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f00000006c0)="7f38f2004111679b2df1fc9cc75e90a47fab00dceaeaa9f2f8c4085dff71a0000913923147037f95e5ad66fd40", 0x2d, 0x20040000, 0x0, {0x0, r9}}, 0x81) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 1287.510967] ? import_single_range+0x24d/0x2e0 [ 1287.511557] blk_rq_map_user+0x103/0x170 [ 1287.512029] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1287.512605] ? alloc_pages_current+0x18f/0x280 [ 1287.513149] ? get_order+0x1/0x30 [ 1287.513578] ? sg_build_indirect.isra.0+0x448/0x710 [ 1287.514178] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1287.514826] ? sg_build_indirect.isra.0+0x710/0x710 [ 1287.515403] ? vprintk_func+0x93/0x140 [ 1287.515884] ? record_print_text.cold+0x16/0x16 [ 1287.516447] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1287.517025] ? trace_hardirqs_on+0x5b/0x180 [ 1287.517557] sg_write.part.0+0x69e/0xaa0 [ 1287.518041] ? sg_new_write.isra.0+0x770/0x770 [ 1287.518598] ? find_held_lock+0x2c/0x110 [ 1287.519081] ? __might_fault+0xd3/0x180 [ 1287.519560] ? lock_downgrade+0x6d0/0x6d0 [ 1287.520054] ? _cond_resched+0x12/0x80 [ 1287.520506] ? inode_security+0x107/0x140 [ 1287.520990] ? avc_policy_seqno+0x9/0x70 [ 1287.521459] ? selinux_file_permission+0x92/0x520 [ 1287.522039] ? security_file_permission+0x24e/0x570 [ 1287.522614] sg_write+0x87/0x120 [ 1287.523010] do_iter_write+0x482/0x670 [ 1287.523461] ? import_iovec+0x83/0xb0 [ 1287.523911] vfs_writev+0x1ae/0x620 [ 1287.524335] ? vfs_iter_write+0xa0/0xa0 [ 1287.524798] ? __fget_files+0x26d/0x4c0 [ 1287.525260] ? lock_downgrade+0x6d0/0x6d0 [ 1287.525741] ? find_held_lock+0x2c/0x110 [ 1287.526251] ? __fget_files+0x296/0x4c0 [ 1287.526663] ? __fget_light+0xea/0x290 [ 1287.527053] do_writev+0x139/0x300 [ 1287.527409] ? vfs_writev+0x620/0x620 [ 1287.527789] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.528302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.528822] do_syscall_64+0x33/0x40 [ 1287.529185] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1287.529686] RIP: 0033:0x7f8812842b19 [ 1287.530060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.531854] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1287.532606] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1287.533296] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1287.533992] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.534683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.535371] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1287.576467] FAT-fs (loop4): Directory bread(block 6) failed 19:23:43 executing program 7: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x249e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = inotify_init1(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80) r6 = inotify_add_watch(r5, &(0x7f0000000040)='.\x00', 0x2000003) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x59f5ee0a7c70a1ba, 0x0, @fd_index, 0x3, 0x0, 0x1, 0x0, 0x1, {0x0, r7}}, 0x8000) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x10) inotify_rm_watch(r5, r6) pwrite64(r8, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) dup3(r8, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r8, 0x8000000) syz_io_uring_submit(r9, r3, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd=r0, 0x2, 0x1ee, 0x5, 0x4, 0x0, {0x0, r4}}, 0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x48a201, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 19:23:43 executing program 1: r0 = syz_io_uring_setup(0x1d46, &(0x7f0000000080)={0x0, 0x452c, 0x4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4004, @fd_index=0x9, 0x2, 0x3, 0x1, 0x18, 0x1, {0x2}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x3d}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000018c0)={0xa, 0x4e20, 0xb9d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, 0x1c, &(0x7f0000001b80)=[{&(0x7f0000001900)="5601422a43e404c7202607238d1caea3891d112bdb381642fb14f3e43c8460f0e582d5598d54190d6bd9a76c17082596ba49a69d54406a902ca2420d0fb2a3632c656bf04755ab87ea9f24a5423085af49e8f060a97992a40fe45bc75d5cb3b652656506ea48fe32d6fdb24e283c3512a2a5c44bd9d2faf6ce0701818a4ec72ec98e6bbbf3bf19c76e5ab6483117687d5d94de2d0f8ebca63110c666abfcd3c65ef01ad09fe1c30e", 0xa8}, {&(0x7f00000019c0)="d6cab9fcee9e7a9958", 0x9}, {&(0x7f0000001a00)="13637df679845229651bd616ff71dfe7a0d2871217d824645c593287a303353279767c9dfc8b383e4d4b4cf8cf7964a948a2214ab02afe1911d21a69747fd6ddc97cb9fd9192f151deccd08c9d371a08cb38ff67e665526852ce7ba3e6fd5f67d1f0d8a027bb100606d326362fb8e0775428bf12c566e60ebef4d8463fa15ec2e68639fc41fbe6ed20fbe719e5a54554c98aacf43c86f8e5e73efae661d5c76e9c3f0504d3098a3e9e071527da920d0048375ce0839040f26ac1d700b5b11ecf70c42b9d51e2925170a0c5ac21442193b9eaa6af24d1f7ae51ce7f7d528ecceb7703404838fd7ee84724e39c80f8c25266bd116f", 0xf4}, {&(0x7f0000001b00)="8727218d6abd9fc4735170ab8b6e564065db00a7b153c97ec61fc5356e2d54cfd26c79dbbbf39c8a9fdfb964f80ba9bef3fee63141d3cdcbb96b4a3ae15206ce6e34a87861177cad211086022caa10f7434049d2c54e4a", 0x57}], 0x4, &(0x7f0000001bc0)=[@rthdrdstopts={{0x108, 0x29, 0x37, {0x4, 0x1d, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0x7, [0x5, 0x400, 0xf05, 0x7f1, 0x401]}}, @generic={0x5, 0xa1, "af237dedb3d7b56fd1195cc0b4a5a03be980252a45da8e8ec2462992efb72dc8bc18410313a84ffc5c2b411c07f131d8ec97308e09ca2c3a4a6c98b55908280bba47630161afb1c05c2cb4bfd7755adab63970c5a83954d61628e58a68822d3130154346f98b67614b18d9cd682b0dd98d879355069ef74a4f23f9b3aa8c520880c5f28b25c3749526c7b6f97b1bfd9cfbe597aeb2b6510e3a6fad2a23113c5092"}, @jumbo, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @hopopts_2292={{0xf8, 0x29, 0x36, {0x87, 0x1c, '\x00', [@pad1, @generic={0x80, 0xd, "e6e2bbe32a05203e901e9e1d63"}, @jumbo={0xc2, 0x4, 0xfffffffe}, @generic={0x8, 0xc3, "c90c41657e91a9de5bbdb2cbb1fafbabca1961ac56c31061b0ee3a98ff8ddc783de22b37993d2384d415f75972a0c1d8a65f6121a41bbf2a713bc0b408bca3ed6f3800c1121cf86fb68d67228aadab7f66636de5a2f6bd00eef248f9e38bfd78bc6ff0a80315b025b033d6d2edcbb0b27346ae949c462824f2d32d0847b5793c6c51693ab7bc5c99d59d9a468c16d693dc1afbee15a721354757efd653fad49fbe2b9c690e5a95cfb18e3c4473d50ebc76ed74dc46fbfdf3ce2de637acb97d5e3bd6eb"}, @enc_lim={0x4, 0x1, 0x4}]}}}, @rthdrdstopts={{0x120, 0x29, 0x37, {0x73, 0x20, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x3f, 0x1c93, [0x780b8dfa, 0x7, 0x6, 0x9, 0x0, 0x2255, 0x5]}}, @calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0xd4, [0x7, 0x5, 0x3, 0x1000, 0x1]}}, @generic={0x2, 0x6d, "56996441d72ec1e9c2fe02986f5b67e0ac2b9e28a1f9fe9d17fb932d0f97452e7e7e0a2fa4bffa27e48780f3a9b85ab46b0d8e2c8db9a794f2c90a14bab5cf5ba88acf99ca49b9128202f97874f9e7d74870c1e0e0fc254a55c9121de058f7461afac8e0201ba599da06aceba6"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0x6, [0x6, 0x9]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x3a, 0xe, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x401}, @enc_lim={0x4, 0x1, 0x8}, @jumbo, @calipso={0x7, 0x28, {0x3, 0x8, 0x5, 0x5, [0x4, 0x8, 0x3, 0x8000]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x80, 0x6, [0xe850, 0x4fe, 0x8, 0x100000000, 0x3]}}]}}}], 0x3f8}, 0x10) r4 = syz_io_uring_setup(0x4e53, &(0x7f0000000240)={0x0, 0x348b, 0x1, 0x0, 0x20b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000040)=0x4, 0x4) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) connect$inet6(r5, &(0x7f0000002a40)={0xa, 0x4e22, 0x40, @mcast1, 0x7fffffff}, 0x1c) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x110, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000000380)={0x14b4, 0x22, 0x4f96e956de47f863, 0x70bd2c, 0x25dfdbff, {0x7}, [@nested={0x1120, 0x72, 0x0, 0x1, [@typed={0x6b, 0x5b, 0x0, 0x0, @binary="aa0fc68161792ba969cb02d46ecbb5077dad02d0a9047a21361f535d7ad2d616cf53451fea3ffea3e297653745af5aa97559e2286db45ec7c700108ce705fcf418b0dcff0ed2b0b395c2d6d4c0ff18d0e8fed9b5b181c7be6b7afa69c1232d8f0f6f8fe0dad144"}, @typed={0x8, 0x14, 0x0, 0x0, @pid}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@remote}, @generic="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", @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="e474", @typed={0x3e, 0x1a, 0x0, 0x0, @binary="e29389513fc9220db375c82fa4838633d2efc0047175f7c87e993fabe5a482c194c0c17011cfcfb25ae2781e7e778cec9106da2b1df689711f9d"}, @generic="a46499ccce86f0177d79844884afe2a9bb62ab9f28f077fdc430019a308be6915e5a832f96194ead1dd48b262acaa98bebbc30c8d769504effa49d2e417a"]}, @generic="42e635153db2b9a1d6c07a6ece26b45f21bd1802", @generic="2c3ce44ced5d70ef3e6551d1d575b3a7d9a4af4e69b43940aa6e4adcb7c3850d748d6600e43d765995ade2af45d18f587b0dd42015652e67f05a084fa071e9692dc6f7a2f89e74dd695f9ee8ba8378577b693a88c1258ca330eeb1136fab4282a1f0e301a72baa26aa17095c22c790f36047f45235a157c2b0eea201c1e3e2e67d1600be8944d3c2e1418410304e857e3d85f12b42aab7a4a8363affccd2a1d2499ebc6ca390d6c949e08e238ae4fd8cb1090ef70d4e75b281173732874f7065438ad70580e42b9ccf788790529709b75243f1aee25718a7090c9d54b79ece65d2be6a6a08085190b7da2d97", @generic="989e7c15b09ca8c61027e7dd23cdc281ff791615e7261776b2bd71ceb28d5801f0ce6cd0f93b68ee7f64eaeaee10225d7f8b32495ecbd8541391fe9427a893ee32accfaf1927363cb1ba61dd4a90023e6f847498685b4b954df064046c89898d2921228e890e911a0d2c", @generic="8893ef55a7ce94c16805902a7e07a79430797ca6bf24bd675cc2ee1f4707344f08296d4a5b7b04b95f9d4ee3de745e6097405b970c4fcbcad3f3046dd9e46816167769912ba50e187b4de370496ce24e35669053f7ccdaca3a596ed9aebe41e7d354add162790949daa1d7c7f14b3a44e6fd18a00ac7110bd770a5300d446f500fecd7b59cf6c5b242a31889b8d8dc4fae9917ece3494b57fb0fe27daead639eb6c01ed6988efa5455004292dfadd7f5a14647c98329f9bea389c216daaee9cc76be599c215953625895ec1e157d39980c", @generic="a955dbd44a88091debfb4ee3274c301d742672a363b75c51f4a097f28843bbdf4545ee073681fff46ead7d075edc76ba66066e7ce67e8159737e8d82473c3bc8f9561dfd75a1453a99c9e45f57b586f1332624a2a4d21b83cc29b77a209882e9572f9c191e8d043f3ee6c3fed181aa895d04f2c36948d06ecd78cd22998fcfe5fa652dcf", @typed={0xb, 0x8b, 0x0, 0x0, @str='*\'+*/\x19\x00'}, @generic="934dfb28c9e395b60a859a4fab33867191559f9e946a153b8e22075cf947c0bff3d7a822506c608aa0b5eee7d2d92c5d3cd1ed82b44cd0dfa78608a2cbb3c4aa16e05f4412ac8b545a2e7aa3ce25918e623f3c648076acdf120836b9713df52bb2d2f136da4a804314c0e4dc9c18c0f7189271f991e5cf9989d70e4c29c78338d1c464b5094235f65b2c151fad33bd663d5f0b5f5fcd44273700aae5d5fde5445e6d9ea5a4bbc6fa42b5e9d5cab5d7392ef08cf346"]}, 0x14b4}, 0x1, 0x0, 0x0, 0x90}, 0x2000) syz_io_uring_submit(0x0, r6, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd_index=0x3, 0x7, 0x1, 0x7, 0xe, 0x1, {0x2, r7}}, 0x4) write$binfmt_elf64(r4, &(0x7f0000002000)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x40, 0x3f, 0x3f, 0x7ff, 0x2, 0x3, 0x80000001, 0x375, 0x40, 0x1fd, 0x50a5, 0x0, 0x38, 0x2, 0x0, 0x6b, 0x8}, [{0x70000000, 0x5, 0xffffffffffffff7f, 0x1, 0x6, 0xff, 0x1, 0x1ff000}], "e5d9c2a1d3caf73663515e782323b84e0b84e1654eca37b61ad366e43fc6dfdbc1611d7a31585c94792dcfc40fe6a4b97da19792b4a3153457b85a0992f7ef407582404b6c087c015c3fed5e7f954756c0f65297c502a4f839", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9d1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r8, 0x800448d7, &(0x7f0000000880)) creat(&(0x7f0000002a00)='./file0\x00', 0xf4) 19:23:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 74) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:23:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}], 0x2020001, &(0x7f0000000040)=ANY=[@ANYRES16]) [ 1287.753435] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 19:23:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xfc, 0x5a, 0xc9, 0x0, 0x0, 0x6, 0x98112, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x10001}, 0x8712, 0x3, 0xbee3, 0xb8ca5a9802bf672b, 0x9d, 0x101, 0x7, 0x0, 0x8, 0x0, 0x41}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) pread64(r1, &(0x7f0000000080)=""/40, 0x28, 0x8) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x7, 0x1) 19:23:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8941, &(0x7f0000000880)) [ 1287.795277] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1287.795277] program syz-executor.6 not setting count and/or reply_len properly 19:23:43 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000080)=0x1000, 0x4) syz_emit_ethernet(0x12a7, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x0) 19:23:43 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x802, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) fcntl$dupfd(r0, 0x406, r0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x8, 0x4) [ 1287.842949] FAULT_INJECTION: forcing a failure. [ 1287.842949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.845824] CPU: 0 PID: 10307 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1287.847016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1287.848458] Call Trace: [ 1287.848926] dump_stack+0x107/0x167 [ 1287.849572] should_fail.cold+0x5/0xa [ 1287.850254] copy_page_from_iter+0x40a/0x900 [ 1287.851042] blk_rq_map_user_iov+0x138b/0x1a60 [ 1287.851852] ? perf_trace_lock+0xac/0x490 [ 1287.852579] ? __lockdep_reset_lock+0x180/0x180 [ 1287.853400] ? __lockdep_reset_lock+0x180/0x180 [ 1287.854232] ? blk_rq_unmap_user+0x750/0x750 [ 1287.855010] ? find_held_lock+0x2c/0x110 [ 1287.855730] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1287.856659] ? lock_downgrade+0x6d0/0x6d0 [ 1287.857381] ? import_single_range+0x24d/0x2e0 [ 1287.858201] blk_rq_map_user+0x103/0x170 [ 1287.858905] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1287.859739] ? alloc_pages_current+0x18f/0x280 [ 1287.860542] ? sg_build_indirect.isra.0+0x448/0x710 [ 1287.861408] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1287.862342] ? sg_build_indirect.isra.0+0x710/0x710 [ 1287.863203] ? vprintk_func+0x93/0x140 [ 1287.863890] ? record_print_text.cold+0x16/0x16 [ 1287.864691] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1287.865572] ? trace_hardirqs_on+0x5b/0x180 [ 1287.866332] sg_write.part.0+0x69e/0xaa0 [ 1287.867053] ? sg_new_write.isra.0+0x770/0x770 [ 1287.867863] ? find_held_lock+0x2c/0x110 [ 1287.868583] ? __might_fault+0xd3/0x180 [ 1287.869281] ? lock_downgrade+0x6d0/0x6d0 [ 1287.870033] ? _cond_resched+0x12/0x80 [ 1287.870714] ? inode_security+0x107/0x140 [ 1287.871439] ? avc_policy_seqno+0x9/0x70 [ 1287.872148] ? selinux_file_permission+0x92/0x520 [ 1287.873000] ? security_file_permission+0x24e/0x570 [ 1287.873876] sg_write+0x87/0x120 [ 1287.874470] do_iter_write+0x482/0x670 [ 1287.875158] ? import_iovec+0x83/0xb0 [ 1287.875817] vfs_writev+0x1ae/0x620 [ 1287.876460] ? vfs_iter_write+0xa0/0xa0 [ 1287.877137] ? __fget_files+0x26d/0x4c0 [ 1287.877834] ? lock_downgrade+0x6d0/0x6d0 [ 1287.878552] ? find_held_lock+0x2c/0x110 [ 1287.879281] ? __fget_files+0x296/0x4c0 [ 1287.879991] ? __fget_light+0xea/0x290 [ 1287.880679] do_writev+0x139/0x300 [ 1287.881303] ? vfs_writev+0x620/0x620 [ 1287.881982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1287.882896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1287.883804] do_syscall_64+0x33/0x40 [ 1287.884455] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1287.885347] RIP: 0033:0x7f8812842b19 [ 1287.886010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1287.889181] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1287.890514] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1287.891752] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1287.892988] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1287.894234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1287.895472] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:23:43 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(0x0, 0x0) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x5) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x3}, 0x4) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@remote, @multicast2, 0x0}, &(0x7f0000000140)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={r6, 0x1, 0x6, @multicast}, 0x10) 19:23:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:23:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000050}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x8010) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="bc00000000000c00000aa00008800c00078008000640040000011c0007801800143e14000240fc010000000000000000000000000001100007800c001b4000000000000004e50c0007800500150005000000100007800900130073797a3000000000000007801800148014000240fe8000000080ff01000000000000000000311c7ef80f817d74a10007801800018014000240fc02000000000000000000000000000105"], 0xbc}, 0x1, 0x0, 0x0, 0x40040}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000240)="6dfa477ee03112f1e998edca1d08dd0f0c9b91ef66d3579d7c09874620018a8065d8e1eafba7ea7dec439bee13485e37ef4a32e6a0f9b2ecf0415b430230c034bd7860cb98dc43702932e9730b4ebbdb1b369193d120f2180c517427ee0466c611ca14a4951b27d786b30863eb6d2a47b80bf0b7635cfe3bdee3df6597a293e70b5a7ea06713995c9d2b5d7ff839d2c72372b43b04fd042a70ed6ef6ec8d37947365665ec6a08255ae8e006e32fa1b75", 0xb0, 0xff}, {&(0x7f0000000300)="29f8df215b2023bf0e66d1594bbca501905a5dddf205ef884bea7626e0ac495529493b1f81f93c52ae14a77147c864a3c1063279344af83fc938c0a379ea79ee0e053349ae3c25ddd47f5b616ab4f7f4a7887d277fe5db73fe5535e6c6c28b1813c7dc42ae1c7aad4201389db5c2dcf6043f36679a7a873da809c00240a5cbd921ee78e9108d9e511cf92f0df698d26512e08d8afc059f55480facb35f5f4d05746900406550888d4d6f81224fdee485c6497472b66c4227d446746533bdf71070f9be83055cc1e98490ea225dd989de981475ba116fc3c7203a0fde7ac5c3310dccf2af52b275037463efc176f3", 0xee, 0xbd2}, {&(0x7f0000000400)="02747816cd64efee03ff1ae1d8df8dd4a985e1b87558e10a84fac18a26363d42f3956f1d07b076374252ae89cd909329fff1116386c9b29fc3cce69f08fbd658c970a37e53426f3111f6527cc59d26e70af262b6a9f8e2896f8c7ad408a147a591fb87cc", 0x64, 0x100}, {&(0x7f0000000480)="9adf616755d32678f119cb2f7c8640", 0xf, 0x8105}], 0x1000040, &(0x7f0000000540)={[{@init_itable}, {@dioread_nolock}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, ')\\]$'}}]}) [ 1288.021921] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1288.037545] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1288.067706] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1288.076061] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:23:58 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'batadv0\x00', {0x2, 0x0, @dev}}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0), 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000140)=@dstopts={0xff, 0x4, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x20, 0x9, [0x6a9]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x8, {0x2, 0x0, 0x3}}]}, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", ""]}, 0x14}}, 0x0) dup2(r2, r3) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000101010200000000000000000a00000008000c400000000360000e8014000180080001000a010101080002007f00000106000340000300000c00028005000100060000000c000280000280050001003a0000000c00028005000100210000000600034000020000060003400001000010000580090001007070747000000000140005800f000100746674702d32303030300000"], 0xa0}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) recvfrom$inet6(r1, &(0x7f0000001700)=""/4099, 0xffffffc9, 0xcd08, 0x0, 0xfffffffffffffe77) 19:23:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:23:58 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000003780), 0xe, 0x200000) mq_timedsend(0xffffffffffffffff, &(0x7f0000001240)="d994d7b006d8cce452c8cc1318b04de264525e9616d73c1ee350a0c1cdbd44042d0a15a593f54996903c2fe05560d857cd304c9f90561788f36e32aee78e5730e08b0010594baf3eee44eda9324b5c285f4ca2fb139709e8a335eef59d2a1e38cfe341b3a3fff0e0d3e969cba944b5daa4eaafbb7c33a9066895ef30a835037e68b2e3b0b55103adf00e2c3c764350c1890480b036035449b231c5e61d1a2f60339b6dc02af7644a031748759f826af0288acd1326789d56", 0xb8, 0x4, &(0x7f0000001300)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) r2 = socket(0x9, 0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001340)={'veth0_macvtap\x00'}) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)="393db114c52bfa76be142737c4d14dbaf1b59c296905f9bb6e3810066a4e4a05f7a95ba49a3aca0cc6453274d4209592a0e36d1201cb3a274163df1d0cb7595a4c0a1fe78954c33bc7076932de7b469f39ec858cdc9bd6303e554fad1e3ac6d4aef1c052ce22061c9efc5c7c755a4c4e34333a9572cc40121ec61bc78b90e2c9f4a5321eee3cd8cc3b2f67095ef0bac370831b30a26fb9839b96aedae649a62eaed7b31e1c80a847b494d2e0bec4a6eef31359bca3be468e263fcf9e09edb7abbffb8c88aafde39d87fbbbc5c6fdede2cec21e6785780d0a140b02280ba077", 0xdf}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000100)="7eafa46ac0f43eab1177ea0232d0b0a74b2e29c9d9c167d90a77636a1cb6039be5e7d9ba7d05a23d1bd48f85e6aab05abc96c8a89509008bc4d91d089e93675efda129556826e1d630e17117e838be794d962250a960c0978ea963c8676067a4a547f5bcbbbab1dc3b8a038e1ee8d6009889a8f390fadf8fc617e47ba238b7511dbb59eb3771068684785f9f00323213", 0x90}], 0x3, &(0x7f00000037c0)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r2, r3]}}], 0x20, 0x20004004}, 0x400c005) 19:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2f47000000000000804201807400"], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r3, 0x609, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cf7f3d37", @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf25120000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="05001300010000000500130000000000050013000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="050013000000000008000300", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8420, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r8, 0x609, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xf8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8805) 19:23:58 executing program 2: ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000380)={{0x3, 0x7}, 0x100, './file0/file0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000000070000002e2f66696c65302e05000000ca3100"/40], 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x5) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {}, [], {0x4, 0x4}, [{}], {0x10, 0x4}}, 0x2c, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x220002, 0x18) 19:23:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x894c, &(0x7f0000000880)) 19:23:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 75) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:23:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) write$bt_hci(r0, &(0x7f0000000140)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x9}}}, 0x9) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/42, 0x2a}, 0x2000) [ 1302.326059] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1302.326059] program syz-executor.6 not setting count and/or reply_len properly [ 1302.328213] FAULT_INJECTION: forcing a failure. [ 1302.328213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.329569] CPU: 0 PID: 10361 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1302.330183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1302.330914] Call Trace: [ 1302.331149] dump_stack+0x107/0x167 [ 1302.331475] should_fail.cold+0x5/0xa [ 1302.331814] copy_page_from_iter+0x40a/0x900 [ 1302.332205] blk_rq_map_user_iov+0x138b/0x1a60 [ 1302.332611] ? perf_trace_lock+0xac/0x490 [ 1302.332982] ? __lockdep_reset_lock+0x180/0x180 [ 1302.333391] ? blk_rq_unmap_user+0x750/0x750 [ 1302.333777] ? find_held_lock+0x2c/0x110 [ 1302.334141] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1302.334602] ? lock_downgrade+0x6d0/0x6d0 [ 1302.334961] ? import_single_range+0x24d/0x2e0 [ 1302.335359] blk_rq_map_user+0x103/0x170 [ 1302.335714] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1302.336125] ? alloc_pages_current+0x18f/0x280 [ 1302.336524] ? sg_build_indirect.isra.0+0x448/0x710 [ 1302.336967] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1302.337436] ? sg_build_indirect.isra.0+0x710/0x710 [ 1302.337871] ? vprintk_func+0x93/0x140 [ 1302.338223] ? record_print_text.cold+0x16/0x16 [ 1302.338632] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1302.339073] ? trace_hardirqs_on+0x5b/0x180 [ 1302.339452] sg_write.part.0+0x69e/0xaa0 [ 1302.339811] ? sg_new_write.isra.0+0x770/0x770 [ 1302.340209] ? find_held_lock+0x2c/0x110 [ 1302.340566] ? __might_fault+0xd3/0x180 [ 1302.340913] ? lock_downgrade+0x6d0/0x6d0 [ 1302.341287] ? _cond_resched+0x12/0x80 [ 1302.341615] ? inode_security+0x107/0x140 [ 1302.341971] ? avc_policy_seqno+0x9/0x70 [ 1302.342330] ? selinux_file_permission+0x92/0x520 [ 1302.342760] ? security_file_permission+0x24e/0x570 [ 1302.343193] sg_write+0x87/0x120 [ 1302.343492] do_iter_write+0x482/0x670 [ 1302.343832] ? import_iovec+0x83/0xb0 [ 1302.344173] vfs_writev+0x1ae/0x620 [ 1302.344492] ? vfs_iter_write+0xa0/0xa0 [ 1302.344832] ? __fget_files+0x26d/0x4c0 [ 1302.345182] ? lock_downgrade+0x6d0/0x6d0 [ 1302.345542] ? find_held_lock+0x2c/0x110 [ 1302.345899] ? __fget_files+0x296/0x4c0 [ 1302.346259] ? __fget_light+0xea/0x290 [ 1302.346602] do_writev+0x139/0x300 [ 1302.346914] ? vfs_writev+0x620/0x620 [ 1302.347250] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1302.347705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1302.348157] do_syscall_64+0x33/0x40 [ 1302.348479] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1302.348922] RIP: 0033:0x7f8812842b19 [ 1302.349247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1302.350843] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1302.351508] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1302.352127] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1302.352744] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1302.353369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1302.353984] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1304.354430] Bluetooth: hci0: command 0x140a tx timeout [ 1306.401439] Bluetooth: hci0: command 0x140a tx timeout 19:24:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x4f9, [0xffffffff, 0xffffff79], 0x4}, 0x10) 19:24:11 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xaa1, 0x3, &(0x7f0000001400)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000208e1ff0370008400f8", 0x16}, {0x0, 0x0, 0x3}, {&(0x7f0000000080)="3a7701117ce20cf0e53e976ddb1dc242eecd516084ba4393ead49df70cc2ff38914748e4091e0b031b51cb3b0e489e134457c7b9e31f72fc151126e0", 0x3c, 0x400000080000001}], 0xc41, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x31298e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r0, 0x10, 0x101, 0x8000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000014c0)={0x0, 'team_slave_0\x00', {0x3}, 0x1ff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x101) chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000000100000000000000ff07000000000000"], &(0x7f0000001480), 0x1400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r1, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x202700, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000003c0)={0x0, "a91f51fa5d7fcca1d4fb574218c55843"}) socket$nl_audit(0x10, 0x3, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendfile(r1, r2, 0x0, 0x100000001) 19:24:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r4}}, 0x58) linkat(r2, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000180)='./file0\x00', 0x1000) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r3, @ANYBLOB="04000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000080)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) sendfile(r1, r3, 0x0, 0x100000001) 19:24:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2200, 0x145) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r1, &(0x7f0000000140)='./file0\x00', 0x101002, 0x62) r3 = openat$bsg(0xffffffffffffff9c, 0x0, 0x10000, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x408000, 0x137) r4 = signalfd4(r2, &(0x7f0000000080)={[0x1]}, 0x8, 0x800) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x200980, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x5) openat(r0, &(0x7f0000000040)='./file0\x00', 0x80241, 0x0) syz_open_procfs(0x0, &(0x7f0000001540)='totmaps\x00') timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x100000001, 0x3, 0x2, 0x36b}) 19:24:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8980, &(0x7f0000000880)) 19:24:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fchdir(r0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) sendto(r2, &(0x7f00000000c0)="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", 0x10d, 0x8080, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x400, 0x2, 0x0, 0x7}}, 0x80) clock_gettime(0x0, &(0x7f0000006f80)) recvmmsg(r1, &(0x7f0000006d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:24:11 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000000c0)={0x2e9, 0x3}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r1, 0x0, 0x2004c000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x44) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) 19:24:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 76) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1315.981748] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1315.981748] program syz-executor.6 not setting count and/or reply_len properly [ 1315.984225] FAULT_INJECTION: forcing a failure. [ 1315.984225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.985569] CPU: 1 PID: 10392 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1315.986280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1315.987111] Call Trace: [ 1315.987385] dump_stack+0x107/0x167 [ 1315.987760] should_fail.cold+0x5/0xa [ 1315.988147] copy_page_from_iter+0x40a/0x900 [ 1315.988596] blk_rq_map_user_iov+0x138b/0x1a60 [ 1315.989065] ? perf_trace_lock+0xac/0x490 [ 1315.989479] ? __lockdep_reset_lock+0x180/0x180 [ 1315.989948] ? __lockdep_reset_lock+0x180/0x180 [ 1315.990424] ? blk_rq_unmap_user+0x750/0x750 [ 1315.990867] ? mark_held_locks+0x9e/0xe0 [ 1315.991279] ? find_held_lock+0x2c/0x110 [ 1315.991692] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1315.992228] ? lock_downgrade+0x6d0/0x6d0 [ 1315.992641] ? import_single_range+0x24d/0x2e0 [ 1315.993103] blk_rq_map_user+0x103/0x170 [ 1315.993514] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1315.993993] ? sg_build_indirect.isra.0+0x3b3/0x710 [ 1315.994503] ? sg_build_indirect.isra.0+0x448/0x710 [ 1315.994997] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1315.995537] ? sg_build_indirect.isra.0+0x710/0x710 [ 1315.996042] ? vprintk_func+0x93/0x140 [ 1315.996441] ? record_print_text.cold+0x16/0x16 [ 1315.996916] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1315.997428] ? trace_hardirqs_on+0x5b/0x180 [ 1315.997871] sg_write.part.0+0x69e/0xaa0 [ 1315.998297] ? sg_new_write.isra.0+0x770/0x770 [ 1315.998760] ? find_held_lock+0x2c/0x110 [ 1315.999172] ? __might_fault+0xd3/0x180 [ 1315.999572] ? lock_downgrade+0x6d0/0x6d0 [ 1315.999986] ? _cond_resched+0x12/0x80 [ 1316.000379] ? inode_security+0x107/0x140 [ 1316.000782] ? avc_policy_seqno+0x9/0x70 [ 1316.001189] ? selinux_file_permission+0x92/0x520 [ 1316.001679] ? security_file_permission+0x24e/0x570 [ 1316.002182] sg_write+0x87/0x120 [ 1316.002536] do_iter_write+0x482/0x670 [ 1316.002932] ? import_iovec+0x83/0xb0 [ 1316.003325] vfs_writev+0x1ae/0x620 [ 1316.003693] ? vfs_iter_write+0xa0/0xa0 [ 1316.004091] ? __fget_files+0x26d/0x4c0 [ 1316.004494] ? lock_downgrade+0x6d0/0x6d0 [ 1316.004907] ? find_held_lock+0x2c/0x110 [ 1316.005327] ? __fget_files+0x296/0x4c0 [ 1316.005724] ? __fget_light+0xea/0x290 [ 1316.006122] do_writev+0x139/0x300 [ 1316.006475] ? vfs_writev+0x620/0x620 [ 1316.006864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1316.007372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1316.007893] do_syscall_64+0x33/0x40 [ 1316.008258] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1316.008771] RIP: 0033:0x7f8812842b19 [ 1316.009133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.010994] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1316.011773] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1316.012473] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1316.013161] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.013849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.014551] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:24:11 executing program 0: pselect6(0x40, &(0x7f0000000040)={0xfff, 0x7fff, 0xffffffff80000001, 0xff, 0x8, 0x80000000, 0x8001, 0x62}, &(0x7f0000000080)={0x1000, 0x8, 0xffffffffffffffe1, 0xfffffffffffffffc, 0x8, 0x100000, 0x1, 0x3}, &(0x7f00000000c0)={0x90000000000000, 0x0, 0x9, 0x6, 0x1, 0x400, 0x7}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x5]}, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:24:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x8002247b, &(0x7f0000000080)="ee84f1422a5a893659968575559af6b3b80b9a7f75fd8da803e84318e50e30938ce14b18dac0c430b463") ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:24:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 77) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:24:12 executing program 7: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) clock_gettime(0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x185000, 0x0) io_uring_enter(r3, 0x4069, 0xc803, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ppoll(&(0x7f0000000340)=[{}], 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0xffffffffffff0001]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x4000007ffffffc) r6 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r6, 0x4010942a, &(0x7f0000000140)={0x1, 0x81}) r7 = timerfd_create(0x7, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000300), 0x2, 0x0) timerfd_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r7, 0x0, &(0x7f0000000080), 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r7) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x241, 0x12d) 19:24:12 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f0000000240)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004fb701000000000000002000200020102004200020002000200000000000000000bf000000000000bf252f45000000000000000000000000000000000000000000000000000000000001000001010000017307", 0x82, 0x8800}], 0x0, &(0x7f0000000080)) 19:24:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8981, &(0x7f0000000880)) 19:24:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @reject_sync_conn_req={{0x42a, 0x7}, {@none, 0x5e}}}, 0xb) [ 1316.547958] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1316.547958] program syz-executor.6 not setting count and/or reply_len properly [ 1316.556791] FAULT_INJECTION: forcing a failure. [ 1316.556791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.557753] CPU: 1 PID: 10429 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1316.558313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1316.558967] Call Trace: [ 1316.559191] dump_stack+0x107/0x167 [ 1316.559488] should_fail.cold+0x5/0xa [ 1316.559796] copy_page_from_iter+0x40a/0x900 [ 1316.560156] blk_rq_map_user_iov+0x138b/0x1a60 [ 1316.560527] ? perf_trace_lock+0xac/0x490 [ 1316.560857] ? __lockdep_reset_lock+0x180/0x180 [ 1316.561230] ? __lockdep_reset_lock+0x180/0x180 [ 1316.561599] ? blk_rq_unmap_user+0x750/0x750 [ 1316.561955] ? find_held_lock+0x2c/0x110 [ 1316.562292] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1316.562718] ? lock_downgrade+0x6d0/0x6d0 [ 1316.563051] ? import_single_range+0x24d/0x2e0 [ 1316.563418] blk_rq_map_user+0x103/0x170 [ 1316.563743] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1316.564121] ? alloc_pages_current+0x18f/0x280 [ 1316.564488] ? sg_build_indirect.isra.0+0x448/0x710 [ 1316.564893] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1316.565316] ? sg_build_indirect.isra.0+0x710/0x710 [ 1316.565715] ? vprintk_func+0x93/0x140 [ 1316.566029] ? record_print_text.cold+0x16/0x16 [ 1316.566411] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1316.566812] ? trace_hardirqs_on+0x5b/0x180 [ 1316.567164] sg_write.part.0+0x69e/0xaa0 [ 1316.567490] ? sg_new_write.isra.0+0x770/0x770 [ 1316.567857] ? find_held_lock+0x2c/0x110 [ 1316.568186] ? __might_fault+0xd3/0x180 [ 1316.568504] ? lock_downgrade+0x6d0/0x6d0 [ 1316.568842] ? _cond_resched+0x12/0x80 [ 1316.569154] ? inode_security+0x107/0x140 [ 1316.569484] ? avc_policy_seqno+0x9/0x70 [ 1316.569806] ? selinux_file_permission+0x92/0x520 [ 1316.570193] ? security_file_permission+0x24e/0x570 [ 1316.570602] sg_write+0x87/0x120 [ 1316.570881] do_iter_write+0x482/0x670 [ 1316.571197] ? import_iovec+0x83/0xb0 [ 1316.571506] vfs_writev+0x1ae/0x620 [ 1316.571799] ? vfs_iter_write+0xa0/0xa0 [ 1316.572115] ? __fget_files+0x26d/0x4c0 [ 1316.572435] ? lock_downgrade+0x6d0/0x6d0 [ 1316.572763] ? find_held_lock+0x2c/0x110 [ 1316.573096] ? __fget_files+0x296/0x4c0 [ 1316.573423] ? __fget_light+0xea/0x290 [ 1316.573738] do_writev+0x139/0x300 [ 1316.574024] ? vfs_writev+0x620/0x620 [ 1316.574337] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1316.574753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1316.575167] do_syscall_64+0x33/0x40 [ 1316.575466] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1316.575873] RIP: 0033:0x7f8812842b19 [ 1316.576173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1316.577611] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1316.578212] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1316.578780] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1316.579341] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1316.579896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1316.580456] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1316.616341] ISOFS: Bad logical zone size 1907 [ 1316.657536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.671731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.677486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.681523] ISOFS: Bad logical zone size 1907 [ 1316.682017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.715833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.722920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.731659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.733046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.743258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 [ 1316.744228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=10443 comm=syz-executor.7 19:24:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) r1 = eventfd2(0x2, 0x80800) r2 = dup3(r0, r1, 0x80000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000380)=ANY=[@ANYBLOB="01fc013d2b00000018000000", @ANYRES32=0xffffffffffffffff]) r4 = openat(r3, &(0x7f0000000280)='./file1\x00', 0x701f02, 0x2c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000003700)={0x0, 0x989680}) dup(0xffffffffffffffff) r5 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r5, &(0x7f0000000340)='./file0\x00', 0x0) r6 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)={0x2, 'tunl0\x00', {0xb9}, 0x9}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x0, 0x8000, 0x101, 0x4]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000)={0x2, 'team_slave_1\x00', {0x7fffffff}, 0x4}) socket$netlink(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) 19:24:32 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\x82\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\xb5\xc6#w\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87\x8d\x8d\x82|\x94\x10\xdaU', 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000080)="fa", 0x1}], 0x1, 0x400006, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}) pread64(r0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="100000bbcdd9cb198100070200030023"], 0x10) 19:24:32 executing program 2: msgrcv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/udc', 0x10400, 0x4b) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x42, 0xe0, 0x79, 0x0, 0x0, 0x10201, 0x420, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1800, 0x4, @perf_config_ext={0x6}, 0x10011, 0x0, 0x3, 0x4, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0xe9}, 0x0, 0xffffffffffffffff, r3, 0x1) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r4, &(0x7f0000000100)={0x80000000}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r6 = msgget$private(0x0, 0x24) msgctl$IPC_RMID(r6, 0x0) msgrcv(r6, &(0x7f0000000200)={0x0, ""/100}, 0x6c, 0x1, 0x2000) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x5, 0x20, 0x6, 0xd3, 0x0, 0x20, 0x8900, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x53, 0x2, @perf_bp={&(0x7f0000000280), 0x1}, 0x1000, 0x81, 0x5, 0x8, 0xfffffffffffff000, 0xffffffff, 0x7ff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r0, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x4, 0x8, 0x0, 0x0, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x0, 0xb44a, 0x3, 0x5, 0x9, 0x101, 0x400, 0x0, 0x40, 0x0, 0x2}, 0x0, 0x7, r4, 0xe) copy_file_range(r1, 0x0, r5, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) 19:24:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) inotify_init1(0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0xc2000258) 19:24:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8982, &(0x7f0000000880)) 19:24:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000), 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x4000010, r2, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000000000000002e2f66696c653000da32ddc0f35457196e7bcc75929bd4a73851093e85fb808bd0b688461d9139ed61e048db4d5737016d240951313c94e8a7506b89ccb616f5eeef74db85f35bd2c63c126b2f5947cc2098f3bd465e60b04655e28b201f86297605225523e9aa1766215eb52daaeafeb241e65cc48b0a9c0912ef7c2f6c4c70f4fa9bbff7d8cf398aaa34f51a10483b8f49bf857f798c4b65fb00f572729ed33717c070edddb848f731628ef61bf47355"]) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, r4, &(0x7f0000000140), &(0x7f0000000240)='./file0/file0\x00', 0x10, 0x400}, 0xffffffff) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000880)) 19:24:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 78) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:24:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000880)) [ 1336.476156] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1336.476156] program syz-executor.6 not setting count and/or reply_len properly [ 1336.480286] FAULT_INJECTION: forcing a failure. [ 1336.480286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.481552] CPU: 1 PID: 10455 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1336.482263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.483129] Call Trace: [ 1336.483408] dump_stack+0x107/0x167 [ 1336.483788] should_fail.cold+0x5/0xa [ 1336.484186] copy_page_from_iter+0x40a/0x900 [ 1336.484650] blk_rq_map_user_iov+0x138b/0x1a60 [ 1336.485125] ? perf_trace_lock+0xac/0x490 [ 1336.485552] ? __lockdep_reset_lock+0x180/0x180 [ 1336.486030] ? __lockdep_reset_lock+0x180/0x180 [ 1336.486509] ? blk_rq_unmap_user+0x750/0x750 [ 1336.486968] ? mark_held_locks+0x9e/0xe0 [ 1336.487390] ? find_held_lock+0x2c/0x110 [ 1336.487814] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1336.488338] ? lock_downgrade+0x6d0/0x6d0 [ 1336.488758] ? import_single_range+0x24d/0x2e0 [ 1336.489227] blk_rq_map_user+0x103/0x170 [ 1336.489645] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1336.490135] ? alloc_pages_current+0x18f/0x280 [ 1336.490629] ? sg_build_indirect.isra.0+0x448/0x710 [ 1336.491148] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1336.491692] ? sg_build_indirect.isra.0+0x710/0x710 [ 1336.492204] ? vprintk_func+0x93/0x140 [ 1336.492608] ? record_print_text.cold+0x16/0x16 [ 1336.493105] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1336.493635] ? trace_hardirqs_on+0x5b/0x180 [ 1336.494098] sg_write.part.0+0x69e/0xaa0 [ 1336.494541] ? sg_new_write.isra.0+0x770/0x770 [ 1336.495025] ? find_held_lock+0x2c/0x110 [ 1336.495467] ? __might_fault+0xd3/0x180 [ 1336.495883] ? lock_downgrade+0x6d0/0x6d0 [ 1336.496334] ? _cond_resched+0x12/0x80 [ 1336.496741] ? inode_security+0x107/0x140 [ 1336.497175] ? avc_policy_seqno+0x9/0x70 [ 1336.497610] ? selinux_file_permission+0x92/0x520 [ 1336.498122] ? security_file_permission+0x24e/0x570 [ 1336.498668] sg_write+0x87/0x120 [ 1336.499052] do_iter_write+0x482/0x670 [ 1336.499487] ? import_iovec+0x83/0xb0 [ 1336.499892] vfs_writev+0x1ae/0x620 [ 1336.500267] ? vfs_iter_write+0xa0/0xa0 [ 1336.500672] ? __fget_files+0x26d/0x4c0 [ 1336.501081] ? lock_downgrade+0x6d0/0x6d0 [ 1336.501504] ? find_held_lock+0x2c/0x110 [ 1336.501929] ? __fget_files+0x296/0x4c0 [ 1336.502342] ? __fget_light+0xea/0x290 [ 1336.502756] do_writev+0x139/0x300 [ 1336.503122] ? vfs_writev+0x620/0x620 [ 1336.503520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1336.504050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.504584] do_syscall_64+0x33/0x40 [ 1336.504966] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1336.505488] RIP: 0033:0x7f8812842b19 [ 1336.505870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.507741] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1336.508509] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1336.509225] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1336.509962] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.510715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.511460] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1336.523833] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:24:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x121400) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="410000001557000015fa0100000000000000"]) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000640)=ANY=[], 0x30) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) [ 1336.557418] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1336.572127] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1336.590935] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1336.615350] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1336.638197] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:24:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 79) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:24:32 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x2}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) close(r1) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10b040, 0x100) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f0000000100)="5950d42c96a0c3") 19:24:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa674}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000002a40)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r4, 0x0, &(0x7f0000002a00)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000002400)=[{&(0x7f0000000100)="1ec6d0a826fb612f01200a967659ebbb", 0x10}, {&(0x7f0000000140)="dc04b6790f8fe5dd338f8722f856c592172b22ba42ec470808c7d85cbfcabebb47ed2f828b2b55133c17b2f9108e6a5000bfdc95d4abd604aacba1a10ad5329424a00c0e16fed245fef0b9cbbde61c145bcaf8a7788a6635945a4cbc13504770d318e7006f88ae4db1f230d81f80fd314db5761999f93751ac1a98c4ebf2ab1f5f4ada774d9557be8220123112a02105c757ee461573ccd2d7066e2233a64211e2c48835176dce8d6243", 0xaa}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="f1d871eddf61f3eab5", 0x9}, {&(0x7f0000001240)="450d07909e3a985d375e555b8b504bdea0c2c86c80236efe997036f445564ee2e6501ea960592134911ac8a226bdf850e4e6e5e3fefd6c341b45adb8238c4d231790040f0018be9681405f627a03b0392046d08912548cdd44640b39a0b2463904cd14027e9712da2f1774", 0x6b}, {&(0x7f00000012c0)="cc23d93624e2352a81309a76f70b6080312f09dac187611ae97c40a5e0629c3ea29a82316b8d95bff97a51630dbe2c5964e140387f666a52c80b5648b093182b1102cd208c87a34a7103111ba3f7", 0x4e}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="70924a412e211f2cd6c9f0dd14e677170a6ab9aea00f341d5acf4dcf984b17e64373c6a1ca9098aa40f2ddf99a9566b20c4f53ef2aeb3fb5818fe2c180b475cef3cdaa9b0c0a4ae1e869c8bb875c1f3e33a451c17edb6101c25050afc8eb5f9bde51ee79f913786966b075415de1b7ca05d63b1913024e4b699816abbbc2660aa19cdaefbc88b1eabb0f31b6fa", 0x8d}], 0x8, &(0x7f0000002480)=[{0xd0, 0x11, 0x3, "e5e08e0632c3abb117b6005fd10c71f7a10a0a7c4bfc6ce18465b05bcf5498f7c061d50b53182f9bdd9e43c1d2567cd5d361533199e4ebfb6d07bb53171b8dee6d9c1a0cd2af5aff1503b8b7fe4e4164a83ddf7e06eb875509a967f6b6c9818e1a294e3bdc870b584f6f552c3707894a5010e5984188b30d720466c980df094be76e4afd5e46af8b168d10e0d7e04e267dc86d8bf4822947976c708c8d3d3a72349355718fb1930fa8fa746a919af5ccc12acd9ddb9a85554458c2d355d2"}, {0x80, 0x102, 0x2, "f38d85e69c1fef58f881dc34d74da37a3a31e4d5558217f196b08fe751a686a60c28c0868d935e3bbe26cb286199e3f5fb2227d9fbc82e6a40e02d8504c59382e8e8eb3f9f6c902053f967751c995ea198f045f9c6cf6106e1a7b822c93bc739476902efe328b88fc4"}, {0x110, 0x1, 0xfffffffb, "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"}, {0xb8, 0x105, 0x1, "f86bcf87ed5844d0304a1690ba1eca2f5d27b7c2d649bbfcae6a88785a4146347d5612a5a8e69b02b2582b4547d6116d765292326b47e9db1a00dd399e0bca73e6d6f4386631fa15ba4f39c3b9d6fdb40c1c27ce6747a62d2973ce5e950a7ea4daad48bc95c7b80a70bc977773234f6adbfeb374551c7dd4208a5efba575f1449876c6b77807a7624ef5726b8fbbe6dce89b2a3bacda3aaf6bcd7fce2c45f0a3fe8970c511ae"}, {0xd0, 0x1, 0x8, "d224c0b09f8471ff14edc15141aeba4c90ce517a6b5a2c3cea5e1bd43d7e29f6325852ea4602b06163783a2bc5d79f4ae04c2f37fc69d1475b7fa82dfd5c23ae060710cda4fdd6ac7786f9c3f34d93fe35e58a5bf34719602f64caa1a1c1f79340db61caa914323f985fb55771e7a3cff5f0a9a0abc1895b683e8bdc72c1b762cddbf8aa95eee061d1145e0cecfff8daa83e8bda9c6e37cc04d390a2c9a9294686e51163c127308e31cd7f1bcbdf511a23439da5efa200f7f7"}, {0x108, 0x0, 0x400, "c66da03e13f9620c959d351c89054a0161e1e4ba99c794b9c443979df33eb4efbc6b7bc63e4df636aae2170848fcb68dc2e9208e5cc66f3ffd6f43eca61b7fc71dcf6cf205b8d60668cee0163ed07536bedb7acff468e808a8be25baf8d802f596a1976405ddf023d9de1113fb00c65b748e74954a35341f098f79308ed0cd48e4be05b413ba190cc2ad1e271e3b24b216d489fb9433520cb02bce4006566f1d9d9782af42777b2ebb59c990e7c9a0a7b5a5d3f6e8eb3ed685b97b95395f8c8a56fd18ab9eba0bcb497a1bf8614e11abece34f69ff571cb7998e57bef708136c6e0a3d5be84d8671fb4f21b2566cfebc05f760d8485e3a39"}, {0x78, 0x0, 0xd863, "7f3547c2e5cb4281160e491593c820f8695840381d021387afbc7192ea3dfce597d366a08438296d922ca4e6e9d226caff0207cc345fef33301664fd33ef12935dbb5c7abea24af13562b04680283f29897d2bfa55d2a9decab22592b392fc052e"}], 0x568}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x40) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1336.781314] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1336.781314] program syz-executor.6 not setting count and/or reply_len properly 19:24:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) 19:24:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x8983, &(0x7f0000000880)) 19:24:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560b, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x0, 0x7ff, 0xffff, 0x4}}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB='#! ./&ile0\n'], 0xb) 19:24:32 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) socket$netlink(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)="85ee", 0x2}], 0x1, 0x5, 0x100ff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2a00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="81000000000000002e2f66696c65300070f7f60267f2e595c766af6ffc589eff77ce59c89eb076ba177e1bfe98211473b0a394aced9acbcff1c798b0ba102cf659b7d7228cc606b3cc042cdca6601bc8c018a8ce036d08f915a01221ceae4d204fd831c40000200000c6af292342a01f8a9fd1a9d2fa2e5963a1b27aff1b84735004ad21c7ceb185742634fb4b5879d9fb16"]) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan0\x00'}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r3}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd, 0xbb, 0x0, 0x2000, 0x0, 0x1, {0x0, r3}}, 0x3ff) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaafa472122a6388a6023f78c73d4926f1b133cf5fc208aa277346a65b0dec38f5cf335393f7d464fae6760921fc19b251342bcfbcbc22792a9f440e41bb446ac5ab5b951fbf4460d8cab3169adadcf46cbec323c4b14f0448b200c19222f6cc6fecb1c533ebc76aec111222188ae676d0c17a0c048a9c4741e56a4f1c1cbf0ff7742c9c483a4e89bf351cb1c2919b4dd207c28173a04867bfcab9d2725796a07424f4616d341f1028a0da33a2a"], 0xca) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) [ 1336.809079] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1336.825877] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:24:32 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x27, 0x0, "a0de498dd587ca1d1795e5106583d4eb685e0982a9ef68571318b8135bbf116204731ccd00474ae45309aef5f90488472dbf90f591b93112200ea6addb594fe9335651d747c4b6d169d6027f1036b247"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000100)="85f1f75399ca84579b14068f5d1a4a07dbb5280c5118b7dfc46439a80c6ecc6207a3782b01249160811590be8efc165ef1b3ac74dca0768b27df", 0x3a}, {&(0x7f0000000240)="ffa3106a6c644a5135752ae040bc0970b5fd39178d9e3ca96acfa289a9adb68fa06b7ef9fc3de451db14c9ce7912d76f3032542e5e64efbeaf92a223662d53afa797fd07761a233205db517062435d917e0fececf57c65e265156696ecb1f14b9ec58e18c5cd12c11dc53c7381a4653fd76e10a12d01dada895b3b30e5f6bc3f282539e4c7c7aa18e2172d666ab59c853fa61545dee163ab1e63bd7cd4b6627130e5afed3da282727a9cf1ce2bb7b687a1514d98a3c90931cdfb5fcedd9b52f1372e453b1dffa513cfb1932bf96e80e3bd9d653a2cfed0c2e12c9e792b4c9c04a1a00154e3636bdd8935796ddecc006569ef", 0xf2}, {&(0x7f0000001840)="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", 0x2dd}], 0x3}}], 0x1, 0x0) [ 1336.842881] FAULT_INJECTION: forcing a failure. [ 1336.842881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1336.845124] CPU: 0 PID: 10488 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1336.846322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1336.847674] Call Trace: [ 1336.848111] dump_stack+0x107/0x167 [ 1336.848712] should_fail.cold+0x5/0xa [ 1336.849341] copy_page_from_iter+0x40a/0x900 [ 1336.850072] blk_rq_map_user_iov+0x138b/0x1a60 [ 1336.850838] ? perf_trace_lock+0xac/0x490 [ 1336.851515] ? __lockdep_reset_lock+0x180/0x180 [ 1336.852273] ? __lockdep_reset_lock+0x180/0x180 [ 1336.853030] ? blk_rq_unmap_user+0x750/0x750 [ 1336.853754] ? find_held_lock+0x2c/0x110 [ 1336.854423] ? sg_common_write.constprop.0+0x9b6/0x1a30 [ 1336.855290] ? lock_downgrade+0x6d0/0x6d0 [ 1336.855962] ? import_single_range+0x24d/0x2e0 [ 1336.856716] blk_rq_map_user+0x103/0x170 [ 1336.857382] ? blk_rq_map_user_iov+0x1a60/0x1a60 [ 1336.858155] ? alloc_pages_current+0x18f/0x280 [ 1336.858914] ? sg_build_indirect.isra.0+0x448/0x710 [ 1336.859741] sg_common_write.constprop.0+0x10ed/0x1a30 [ 1336.860606] ? sg_build_indirect.isra.0+0x710/0x710 [ 1336.861421] ? vprintk_func+0x93/0x140 [ 1336.862062] ? record_print_text.cold+0x16/0x16 [ 1336.862835] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1336.863660] ? trace_hardirqs_on+0x5b/0x180 [ 1336.864378] sg_write.part.0+0x69e/0xaa0 [ 1336.865046] ? sg_new_write.isra.0+0x770/0x770 [ 1336.865797] ? find_held_lock+0x2c/0x110 [ 1336.866467] ? __might_fault+0xd3/0x180 [ 1336.867130] ? lock_downgrade+0x6d0/0x6d0 [ 1336.867823] ? _cond_resched+0x12/0x80 [ 1336.868458] ? inode_security+0x107/0x140 [ 1336.869132] ? avc_policy_seqno+0x9/0x70 [ 1336.869797] ? selinux_file_permission+0x92/0x520 [ 1336.870598] ? security_file_permission+0x24e/0x570 [ 1336.871413] sg_write+0x87/0x120 [ 1336.871972] do_iter_write+0x482/0x670 [ 1336.872612] ? import_iovec+0x83/0xb0 [ 1336.873241] vfs_writev+0x1ae/0x620 [ 1336.873840] ? vfs_iter_write+0xa0/0xa0 [ 1336.874487] ? __fget_files+0x26d/0x4c0 [ 1336.875146] ? lock_downgrade+0x6d0/0x6d0 [ 1336.875819] ? find_held_lock+0x2c/0x110 [ 1336.876503] ? __fget_files+0x296/0x4c0 [ 1336.877166] ? __fget_light+0xea/0x290 [ 1336.877810] do_writev+0x139/0x300 [ 1336.878395] ? vfs_writev+0x620/0x620 [ 1336.879034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1336.879885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1336.880732] do_syscall_64+0x33/0x40 [ 1336.881339] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1336.882185] RIP: 0033:0x7f8812842b19 [ 1336.882801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.885756] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1336.886993] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1336.888145] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1336.889296] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.890446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.891602] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1336.913900] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:24:32 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x40, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x15) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 19:24:32 executing program 1: ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x3, 'wg2\x00', {0x3}, 0xc000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:24:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x89a0, &(0x7f0000000880)) 19:24:32 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3ff]}, 0x8) pidfd_getfd(r0, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000100)="53e17c39a4f3884748bef7767b8042e8cedaa82415e876bde67500c7fcbc9d9180c2ca4ad981e1ca17b5fa58b18c22e2d20fa25716094b3014b01676d099c7c5705cf65b9e589853ccb768eff88023082ef20f81995bd563c24a694a97c33c4853fc5b86cf39a2268aef48688e90fd132189c1971613ee4490c08d9fd021dd64049fea7ab135780607edec5ca7097947991e79c0a337f5f59a345676454031f8ab51138958dfc9b742cf753a9c0fc9cbbe0f7ef6edcb167704f44a1bcee61d4e8233d0d50506fe2be6cf80de5af33ee9a7b292645b") 19:24:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f00000000c0)=0x56cb, r4, &(0x7f0000000100), 0x2, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xa2050, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000002c0)) lseek(r1, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0) 19:24:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 80) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:24:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000010c0)={0x1f, 0x4, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000001040)={0x1f, 0x2}, 0x6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "289793b940b461526b526cd879150d1f"}) r1 = syz_open_dev$mouse(&(0x7f0000001b00), 0x23, 0x100) write$bt_hci(r1, &(0x7f0000001c00)=ANY=[@ANYRESHEX=r0], 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a80), 0x200000, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000001ac0)={0x9, 0xd23, 0x5, 0x7fff, 0x2}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0x1, 0x2}, 0x6) setsockopt(r0, 0x3, 0x8, &(0x7f0000001100)="9d06f348016948bfa83fc0527ccb136cece7977dbb521209baaa1708310324985cfe1fd544bae1e06da6bcffe4f589fdf270e4c98c941eb65a2fb4ab0bd134bf108e8a0235469f76c28c8c5ad7ff5b7590d99b57fe53f530824fb31b8cc24d8d7fbcc3886bdf16f9ef9595d25542cef39fdd6155371b5c3370dd7b3c42053dc8fc92f2e00ed2c091e00a9a17d838cd46a54321a58a87a9bd351a99d90507d8f24540069e5e7138ecf3a3dffe3ee0e6f31daea5eae5155ed28a6316d2823b75c4fcd4faee82d3382703f53a90eb8b1664de55d107a8fec537c28abf3634a82087d8c21a0fd8850bf9c0de8ccb670aa8c1", 0xf0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_elf64(r0, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x5, 0x9, 0x1, 0x0, 0x2, 0x6, 0x7fffffff, 0xb5, 0x40, 0x161, 0xb9c, 0x4, 0x38, 0x1, 0xb2e7, 0x100, 0x24e2}, [{0x7, 0xfffffffd, 0x80000001, 0x1, 0xfffffffffffff001, 0x3, 0x1, 0x1}, {0x3, 0x400, 0x9, 0x1, 0x878b, 0x2, 0x7, 0x8001}], "19943060f0ed998af5a5628fef362e49219e321a4c5f33724c264430294005a50254e3d23938827e71563aa9b0ce5cc38bffdda0fbfa795829baf339fe87bb6cadc7c6abc584ba90da67477d3bc2e299f021c4c79ad64a8b11c4d49c0dae82e23abd03232942f8256f481ab60c8f9caf37299da0feeaf20e75fb77188a92574af5a2673b15c55f05adc3e2b047", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x83d) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x200, 0x4, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x7, @private0, 0x1}}}, 0xfffffffffffffe1e) getsockopt$IP_SET_OP_GET_BYNAME(r4, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000001080)=0x28) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000001b80)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r5}}, 0x58) ioctl$sock_bt_hci(r5, 0x800448d7, &(0x7f0000001040)) [ 1337.134807] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1337.168640] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:24:33 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ext2\x00', 0x904000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0xb2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r2}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="c107a2c6", @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc78ca27728297fa689f9108b9e5a3e210d9015b22211d6cc3f97cd895030adcb9295ade00853ef288e1fd6d3d8554bb81c3261e804728fab2b560d1dd834a6d24419de9149520b04223af6a5e190"], 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000080)) 19:24:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x28) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1337.302283] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1337.302283] program syz-executor.6 not setting count and/or reply_len properly [ 1337.304506] FAULT_INJECTION: forcing a failure. [ 1337.304506] name failslab, interval 1, probability 0, space 0, times 0 [ 1337.305579] CPU: 1 PID: 10545 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1337.306137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1337.306808] Call Trace: [ 1337.307028] dump_stack+0x107/0x167 [ 1337.307332] should_fail.cold+0x5/0xa [ 1337.307649] ? mempool_alloc+0x148/0x360 [ 1337.307977] ? mempool_free_pages+0x20/0x20 [ 1337.308336] should_failslab+0x5/0x20 [ 1337.308645] kmem_cache_alloc+0x5b/0x310 [ 1337.308983] ? mempool_free_pages+0x20/0x20 [ 1337.309332] mempool_alloc+0x148/0x360 [ 1337.309660] ? mempool_resize+0x7d0/0x7d0 [ 1337.310002] ? __lockdep_reset_lock+0x180/0x180 [ 1337.310378] ? mark_lock+0xf5/0x2df0 [ 1337.310698] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.311131] __sg_alloc_table+0x24e/0x390 [ 1337.311469] sg_alloc_table_chained+0x9b/0x1f0 [ 1337.311842] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 1337.312230] scsi_alloc_sgtables+0x236/0xaf0 [ 1337.312603] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 1337.313010] ? scsi_init_command+0x4ee/0x750 [ 1337.313379] scsi_queue_rq+0x1dc9/0x27f0 [ 1337.313733] blk_mq_dispatch_rq_list+0x372/0x1c30 [ 1337.314122] ? target_unblock+0x1/0x60 [ 1337.314443] ? __blk_mq_sched_dispatch_requests+0x236/0x450 [ 1337.314908] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 1337.315305] ? do_raw_spin_lock+0x121/0x260 [ 1337.315659] ? rwlock_bug.part.0+0x90/0x90 [ 1337.316005] ? hctx_lock+0x7f/0x200 [ 1337.316306] __blk_mq_sched_dispatch_requests+0x263/0x450 [ 1337.316837] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 1337.317361] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 1337.317787] __blk_mq_run_hw_queue+0x12c/0x290 [ 1337.318158] ? blk_mq_start_request+0x3f0/0x3f0 [ 1337.318550] __blk_mq_delay_run_hw_queue+0x4f1/0x550 [ 1337.318964] blk_mq_run_hw_queue+0x170/0x2f0 [ 1337.319319] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 1337.319735] ? do_raw_spin_unlock+0x4f/0x220 [ 1337.320106] ? _raw_spin_unlock+0x1a/0x30 [ 1337.320463] blk_mq_sched_insert_request+0x384/0x440 [ 1337.320891] ? __blk_mq_sched_bio_merge+0x3d0/0x3d0 [ 1337.321304] ? sg_remove_sfp_usercontext+0x420/0x420 [ 1337.321720] ? blk_account_io_start+0x11b/0x170 [ 1337.322101] sg_common_write.constprop.0+0xee9/0x1a30 [ 1337.322525] ? sg_build_indirect.isra.0+0x710/0x710 [ 1337.322934] ? vprintk_func+0x93/0x140 [ 1337.323252] ? record_print_text.cold+0x16/0x16 [ 1337.323633] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1337.324039] ? trace_hardirqs_on+0x5b/0x180 [ 1337.324399] sg_write.part.0+0x69e/0xaa0 [ 1337.324730] ? sg_new_write.isra.0+0x770/0x770 [ 1337.325104] ? find_held_lock+0x2c/0x110 [ 1337.325444] ? __might_fault+0xd3/0x180 [ 1337.325768] ? lock_downgrade+0x6d0/0x6d0 [ 1337.326112] ? _cond_resched+0x12/0x80 [ 1337.326433] ? inode_security+0x107/0x140 [ 1337.326784] ? avc_policy_seqno+0x9/0x70 [ 1337.327111] ? selinux_file_permission+0x92/0x520 [ 1337.327516] ? security_file_permission+0x24e/0x570 [ 1337.327925] sg_write+0x87/0x120 [ 1337.328209] do_iter_write+0x482/0x670 [ 1337.328528] ? import_iovec+0x83/0xb0 [ 1337.328847] vfs_writev+0x1ae/0x620 [ 1337.329149] ? vfs_iter_write+0xa0/0xa0 [ 1337.329477] ? __fget_files+0x26d/0x4c0 [ 1337.329806] ? lock_downgrade+0x6d0/0x6d0 [ 1337.330146] ? find_held_lock+0x2c/0x110 [ 1337.330484] ? __fget_files+0x296/0x4c0 [ 1337.330828] ? __fget_light+0xea/0x290 [ 1337.331149] do_writev+0x139/0x300 [ 1337.331437] ? vfs_writev+0x620/0x620 [ 1337.331755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1337.332180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1337.332595] do_syscall_64+0x33/0x40 [ 1337.332895] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1337.333306] RIP: 0033:0x7f8812842b19 [ 1337.333610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1337.335096] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1337.335717] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1337.336283] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1337.336850] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1337.337429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1337.338006] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 19:24:33 executing program 5: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r3, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r4 = fork() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r4}) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0x14) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) 19:24:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x89a1, &(0x7f0000000880)) [ 1342.241474] Bluetooth: hci5: command 0x0409 tx timeout [ 1344.289457] Bluetooth: hci5: command 0x041b tx timeout [ 1346.337433] Bluetooth: hci5: command 0x040f tx timeout [ 1347.700078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.701210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.703306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1347.724558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.725553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.727556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1348.385533] Bluetooth: hci5: command 0x0419 tx timeout 19:24:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x32) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000200)="f3fb158b0b1991c19f600dcc34331e5a2988565b8c5ce0cd6691917adee74cc2f54132945e6090cd9b68cd12f675b126102f630e3e3b160fa6") writev(r3, &(0x7f0000000580)=[{&(0x7f0000000080)="c72f2cbfd1c16bcaf7655f6b5c6452947bc8aa0ffc4b11114463e657f414e7a3efa8f1a63139e182d5ba69c7808454c90efebf6ce38a5486e308d33959674f0c27b6aa890984c763302f7d1adb1d5437207fdc7bd34286a5fba919e1348695c8cf93d79237b510d64b", 0x69}, {&(0x7f0000000600)="cfeacc65efdc79ea563403523516e327702c0a4c235e7c9bf72c24e6176b6fe6bdf1bb3dede8e7bc8741c4bfdc995dbf050367407284ee7e920121633cce5bc5c71f9b184c1e157dae52128086e1d681444365227ce4e724eb6b2459e968182e8d4775deb1a21705185f9f108e711ea2acb5b927968525b0c8ae84b87b4ff63b28a28b3106d736e63f7305549c781e51b14bbf48", 0x94}, {&(0x7f00000007c0)="1ae33d34253227320b601fee8d3ff9794fdf6865139adef5899cb6bfeabc164426802f43ae01b0670000001efb9b083bf7d9d6d5a8dafab5eaffd930b291b7242842f274a3db52d9a223c6223d68e9e9103f0ee988d87d191cda099f7abd1dcbbcd271d1d357bf209dc1c91316fd8b36a4803b3284e6a12b8c10193db6df3087047d03d0ec30ed27351cb8570880b016323df96dba626bfd3c7f3f4b98b10c514cf57cb82380db2045f356d825d3564da4ed6284d505f90d8cfc00005f6be0add1153e362deda8c45b5582ebd0d5311d8382b04fa84bafdf0891e16bbdd50f9cb51c8f3b2692f7b35c3e0529e2778922", 0xf0}, {&(0x7f0000000240)="ca387986ac1d76fe3d8cfefd35a4a833af579c44ac0e746862e642930aa458d7ce7799bf79eb107c8912bf3c3277573e3185f00db7d4c7a2945032dbee2ac1320a9934c9017edfebd2ce96b7276b9a6365b9f5ca", 0x54}, {&(0x7f00000002c0)="35d0f80f457fd4de2c525cf568ffe716141054d1c30dc82b4308cef3a506cf33ddc46bd6095312e6dbff39d6f7351054d68b95e60ea7e819379f1883ad8ded873f5dbf6616d0ea8a1ad3b0fbc34b39558b564c674a17b954e39de4e036444f22a88c203cbf84ba00571f711d278100dc29f6a3c3626a584b7a8512fffe40bd80d421750c", 0x84}, {&(0x7f0000000500)="249a96dd80560993174af3fd2adad6dee0a29d931dea029faed80f3ba8a669e560832f6326fa4118b2aa214814b6ca1754431a75a0c55fb1694a0f5aa0e258d7230fa6487f6566b0bd3fbdc7855470039dc8551ab40fba2bb912b1a2509798", 0x5f}, {&(0x7f0000000100)="ef4a85ac54891a225c66fcc2e804284c76531aed40cef11376f55a9ea00c167e9e5bd4ca84634392a08e5f7d486f7813e2946148d785d7cde4c1bda3af4b13c60032ae662f94cc2ab8526f2225b80d913b39128b1b807439e173a09174079db3f0f0cb1b2c7d02b39aa1503c873c812652e867ac46b8716849aa0e9d3b9e4eb98b3b63bb8216f719ae84e644332bbc9373aea74fa1aaac7918159ff63a108ba35924d62f6b6b2b4223e2c38514c43a4f387129596a565091e4267e794e561c43b3d9c45c99", 0xc5}], 0x7) ioctl$sock_bt_hci(r2, 0x800448d7, &(0x7f0000000880)) r4 = io_uring_setup(0x475, &(0x7f00000006c0)={0x0, 0x98a4, 0x20, 0x3, 0x346, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x10032, r4, 0x10000000) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000400)="8846468ae4cda07e8f6b15fb7fc489302fa489ce75407b984b514ac8decc0484f6f84a4817e86e649df75a61883924fb5a67988fbe1fb8cc483d37a7f147477fc01ecaf85b6de537f3da5ac08641653df0f2d3970c5aabaa67898c423e36e8e9b5223d4ec8e20f1a4fe871d57ba3bbe34135c80ddbe07fdfe9da43cc149cadbf2aef2c1e10bd621f7470a0aeda2e1a1f81b949da092169f4bb97fbef95a3eb84b24e775c3cd0bc9b4eb0ca4cdc0d4b5fd223e3cc7b7bc639d60e457e36fd24fd4d4e1b5a2e85ad556fa1a4") 19:24:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x8, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x98, 0x20, 0xc21, 0x1000, 0x0, {0x2}, [@nested={0x6c, 0x96, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="acd2b2c7e98b6167be6b59663e303cbc6ca0f888bb3730e2fda717c5c05458903eebf4f98129b521ac995853622f691db5a3bc250ecd3e8cadf086a4042a461095362e1a7f5dcd1783eb255cc953405e0ba35a38", @typed={0xc, 0xff, 0x0, 0x0, @u64=0x99c8}]}, @nested={0x18, 0x3fff, 0x0, 0x1, [@typed={0xa, 0x15, 0x0, 0x0, @str=',\\(-\x97\x00'}, @typed={0x8, 0x2d, 0x0, 0x0, @uid}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x5, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 19:24:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[@ANYBLOB="0100bcb90000000000000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653200f6b4371731cbf05440d1ed8ce5862d8576839f3ab27ecdae288750c957d70e33d59e95e09a"]) r2 = openat(r1, &(0x7f0000000280)='./file1\x00', 0x701f02, 0x2c) [ 1361.504763] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000640)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000700)="16d1ab79a0c51a7643134e68d590c18f2de629c3d4c2b644f6a189c53e36e1d3120a90c4e9f1f484c47ba5570d8c9b13bd9fe7989f33b096484b331c2db3641cafe90431e416c787307844", 0x4b}], 0x1, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}, {{&(0x7f0000000800)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000840)='/O&', 0x3}, {&(0x7f0000000880)="d66975a1a7998fd971eec521af4e5caad74bb6bb0d9b84", 0x17}, {&(0x7f00000008c0)="6077f051b769f980190a24ac26e45ed9e615e66f4607af526fbb8e8b8d7dd20c7a915c47b569c9c9b76dd6e3ec6dc7bdc3a2bc14222482419c155adf90fcc65c298cc1f7ff9fca2e365c5b4534a1c49a4d14464b186871841964f83ef0474786607b37d1a74479e6111163f5f83b5fa16e31246b1dd0d47a5d876774", 0x7c}, {&(0x7f0000000940)="903348660ebfe5ae996d339e44255f4456078c27640d86ae68a59b3e2ef5ba51b9f93c9a3feffc850710f10b6e1e2cde993fbd32b5346b39beeb9651f1eabd8d6d106c15decb63939e0dd94bd1fea8ab69d7282c366353573bfdc5d15809a2f33f9732fefd776d8ef4ccd1aedee60654b3eb5910f06b10ba4caaab0c4fa006c30b5ff50b4cbf8bcdbc353bf220982d8b7b7404128a72ac8f4f38", 0x9a}, {&(0x7f0000000a00)="133b02f67cecba27ee2d3b58352fc4aff08378b69a3dde971177d76355408d259f35e7ef24ff74efe68ee6711f79a64c39b5e64236c0ca535e958df379fa26d1b7aa9ee385a68ac63a106df1e1a52eb612eae4124efb9a1c8fe3982faa07a0239e72864af5d48a3287eca589b6718459", 0x70}, {&(0x7f0000000a80)="f8ea8c522f7678cfb4af156e40494e9769cfd65bfc959e5271b6f6671c3d17a053ed294769c6cf51717ae2ceb555520e28d42149151f1aa263e3eee9", 0x3c}], 0x6, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @remote}}}], 0x38}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000c40)="d44dd19abed99c2c2d152ab5c33246b926", 0x11}, {&(0x7f0000000c80)="5715a6fe9da74cb5168484f86c15d1ceea63dcad7030bc33e5f65fa3ab43508659ad4f9c81eb8d9066304aedb2e8ac57092d429f115015558a1d6684ab8451cf40a705110a5aa2e20ee8e47d1521736406226bd5ae355763859e00ce25faeead3fb66382ded7c6f0b5f37d59f88d66e5f395ffeb4b6343cd662c60a19b2e8c81d23391bb77fa6eba8da0c6093cb5d678fe413c06c794911c6a52c916039af6bc38c3742189ff2e129e53571c7766776d1eaec1cc44f3a4567820d4d008", 0xbd}, {&(0x7f0000000d40)="90f4e1f33b23674e311eb59eacdc4c7ca935dacd65816f80c4eb749c774744a96cefdd2d143fffc31da3720116b16cbe68348bf9124d7a23c21c83a21c210d5c677a0ed71e4dad58413ea64bcbb1832d4da74efa540eba88b80c0171b39304fe0943980c721f213fac9b909c824255c75dbc038f29a68bc37855554962a1cf3a3d7b4dbb455d8aca3ccd53264effe2e65c34200038dc114d80f16e8a07dc5c84d1f8", 0xa2}, {&(0x7f0000000e00)='eGBH', 0x4}, {&(0x7f0000000e40)="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", 0xfc}], 0x5, &(0x7f0000001080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xda, 0x1, 0xd, [{@broadcast, 0x5}]}, @timestamp_prespec={0x44, 0x4, 0x9d, 0x3, 0x9}, @rr={0x7, 0x23, 0x56, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, @loopback, @local, @private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x100}}, {{&(0x7f00000011c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000001200)="df8195bdf355003d78a5eded00ad3700c98165349700b5305f7c62044ea588375c69eaea2aaefb3e29a57baba10f2f3e80935821cd2109cec21cf607d13154a17bfad87bc5a7c1f74709d9206f76a51cc6d9d9ad4be8ecc5b0f1a471fb03fd3ea644e63ec342ad41dfeae12fa0e6245b80dd88095430d86d6c63583a237a1d12057097c6438947bcc5e0a0d8b4514a88004b5b3fae7bf8063c", 0x99}, {&(0x7f00000012c0)="45c45c2eb93a08a72dc2de611356ced7ec8caf540e48f86bc7c27d8fb692cbe6c17628246d0cfe248b873c29da311d3e7874d597c6f18c6206174dbaa99ae0b761a7b5ac824e616e6a6115756ebbdbab0abe195408af7729ac2df689607caf9da783244914759bd0e14510970c1f9f471dd908b3f59546bbbec8fd51ccc983ffefd5080bd7ba422623a2e2b04d5022440fc73ddfe2", 0x95}, {&(0x7f0000001380)="2eca31b6517b60ba3468a9baf035fd47b4b1bdd266746b1d0c07f67680b3170b406d79f53b9d096c1d71807d4c73634c", 0x30}, {&(0x7f00000013c0)="f907ba7a4c6b9e7cc3c93647349ec57eb73ea7c779a2812e7045b1d9e15779b2054a51e1670b9371f91ed071d8ffdc2b31e674f1b246272897217b9f9db3a93754f0a904fd2ddd9374fbac1fd85fc0a126796f96d79df92b0ef7ae6b205d57fb8629300b80d6490bd69924af943a57a3487f087a889109729c47a8", 0x7b}, {&(0x7f0000001440)="8568a660ef5695792f47064f5879825effe9b9fda1aa9ba4e911c30689fef4f60646316b00a0b61b31eb9f3f10a2f0a4543eee137dba8728d1ecadcff2ad46447f5223bbc6741601e1415d18b08df2c1ecc0496d3260743bd9afba23a05a5b264cbc4ca63b1fedb056f3fb1b23c96db0b2ff13d91780d738e7a1d6f816710b6141abf29a298b091a54724affb1a7fb", 0x8f}, {&(0x7f0000001e00)="db7669bec8f1f3d6d82db32072e39904a85db9536988d2bfae049dd3a602614874214059b2986035edf4f64b367fc1d4723ac0946129eb43ef70fb28eb869f6fe845951aff012a1c3ab9e2ebe21a0c0181115b9f36bec254abec7fb8c05135c467e9816b2efbf35c104731eaf31d8114692920e12fd9dc9272e7a3e88282888ba5d6b1859b59d65d014158ffa7453c61fd10cb799727533e1f0bfff4c6b67395fcc337e7612c435558ac3e342e78e17d181f30bc33fbfd69b39f5b55b35e9239fcbd9b7dd5bdb78ec4ac7a1ef753d6622e0549de6b33542db8699ac907881dd51cc955d9c671d4a00871b7f3aab3c04a0c32795e9db0419b966c3fd130d45e9277bb1e287adf22604a0541d7cb9d2f10892c99adcd8f2ed3b9ab47e44e3d14505523bd7487d2328cb0e401e58758c033aee88d5e65ba8fd6b5a10b028ca4f8b60f10442cb2d3aa689063d448d2f6029976a2bfe1869e7deee570011689a899c43f28d9d441b7ec339a5cc6610f39033b0eb9cae977c16ded7be1b809eacf49b2fbdd1ad227560174b4ee86409b2cbadd7b4fdbafb279ed4b59ad60305e67e663db6ca6a31790526236ce771f511db1f9be2dceb7bdab371aef7d5cd26e851b2afd2199b84d3d6e99b15c7362e538c7389aeb1431f70405bede1c26fc7df73d905fd0afe4825444173442688fbf0dce4e401d690cf4f75c73e01813a798fef1ae5e89ed01866f9def6a89198516af27824e3d3034295c208079fa923398b75d787ebc8c0ee8a63fe9f75905a20b9afa61f79043ab25dec52ea8d3ad6e953a58d30dc56964964c5b66cfcc121763ce4fea51389b4e460745f468410ad0943133dd0fdf6188d37a75561c999074f923ac4122f97c435d13779b37372f6d637082785d4f127d82d7f65ae1722cef88aba3bbedbb727bfc129af1e4af1671c63a9ba223106adab0dd9527043b99424b6b696775360cdd61d9e4fd4fb586377187e119e34099fdb2b108486220684ff0f09a84531d02c89229cfe1805444f6e46dc36d0f4b71af8ace6206ff361bcd41ba593aa02b49460cd693642333362e4532a2cb127705cb38384cb5201e4d42207a7c0ace8e4620fc84d8508ec5decce4a8e92340eabb05f1e1ebe52df31989876e198c7dc79af7413dd4f85391230d2b2870172a4d6a0a1cf97fce9f5fc758215684640686230715d8e7f2d20e9d42ebc261c6a66f61162d69678ff9a919d66dc441bd09a98d2f18024d2e01637ddfb20e740165e06e0315909f277f391cb7c524a43061eaae773711aeacfbed74b9938162b3cc31e7244ea67b2a54b9f7e968c8d41145e2f1f0792dcc7b97065222eae430a8904e0b4d954e0c7e5a1516967175c3f0d2ae2a10be1f9e83291a2a521e39a395626df0291f939d83cf0794e0229e4a3ebceafb24297719bcb45f677a34281d34a746cf60d75e39c9329a53884cf72c61f9e12fc37770523c327cf1bbc83ba4792b6847945d6b1e8aad0228c304abe1830e541bb30af69fc90153f09681c5fe795c2dac1d4c8555083abb21e21afa77b13494595e01796d5fe6b3075f561305e2eef387aa76b3c7527beb93b4f11244af04d6a38a734de9e0898bddb28dcb3dc07996b775d657eb44880705897aac6f6b92a88b93e2dbbe48fa2ca7b2f11df8b1f5cb4f45c492777d780d04d887e26bb3eb677f2e2b939be36c5e898c1b9ca6e3f1a76bc56aef83e814287a4b45972652a20c9169610cea43b68a837a06f3ee2040e42bace8b5797ff5560ab2fec2f59051d4e9ec3bb9858233e6795b1bbd416d4f26c5ab01be9e1ef74da2b2e59d8f926ab324313abb5c897eb9d2c5102e110fa292dee27580b8b45c9acbe1ac62c0f7972d31d9be2c4c9fdef2f90c31c818f0cf8004a5816dfd9f001d203251daff9fa5a674b8f3dfe9793c71ea6615bdc589293a6092974e2e8d7e33f527dad31dd3713414842e4f0456175ab7785cdb358499bfdc956c5e3316d4a2156521a758ba87138df8b3aa503ed6ab1430b1eac39ab8fcb2a88c61a95da7c284c9087682ff3819d2651dac844a8b1650ef9ae8a912224c7ead979223948d8535f7515d59b08d7ed683c7b81d854c92082c5ab9988c321010a7f90133697dd341499fab234f0bee5c62bd9662746d6a0f9d336075c1c239f93893b7e4d93c2acfe224efcf875041173ed9cd3a362449708c9716461fe17600b97f463ab79f954f433ad41fe3becda39d011304e2cf86edea1a4ff823658757506d5cb01ba773d31bab7b07d5dbcaa42d1d9a29b2fe6798555a6f0fa7e674074b172da81c1390f9375e411fbf6a58fed702e98a60096fefbd627e4d483bb9c872f04cd9b158401ebc243e5e44d9b572e78c0b283569c439972a2021b5e83431d97e08b38afaf78d2f2a289bf72e125bb421fac18f11ae21dbdd0e5970f3bfc44818e5fe00351fca4201df97ade8c6d7f1fb8073ac206a38c2c38e1dd24644f4acdbb2fda68d511b82d8ca252b34bea4f282b7492e9625863367975c191a5b3321f43513db82714396809f136129426724cc2e9a5138c6b7eb7fcbd3c02ebc06822e5db64e5e9e95b624be68e92c73df62c5698af1412210563628f45fc8e9798c537b93f938da39ebac0fdf49f74f74930af2dfe30220cfeed9ece956fba076a5ecbcb82000a01a7ef3ea02795b0aa5410774b627d6e6550a656f51c251483a7358bb9ee7fbd5519b202376e4766d93879f3cebb8a3524c4f843c2f2ec4de5bf35489ab29538af68a722abfc65b5ced25b86881f0fbe55ea3ecf0b1c5328fa4f2034f883fc306d5fbaffae2caa50744f2981c3b165aed97271d3764316dc55b434f2e97474f35cf596a1b49a5e6d43da7572bf1d351a282cd6d9b64de28e76631542b14f0f01bee8faae9969433edc051ce79809ff2d260dd7f29b135ada7effeb7efc328d66dbd0849d87b603f053fce3a4be202e166cbf06fbc4a9bfa3c1ad863f9d307c5836baf015a78004e254b3722b5f0006447786d4b22d1a282f088084aefcc1b0ed103f3dea973399712df4f7326f2dc6a702db194390ae3ef5bc32588422b55bd262990de84520f8ff5e53c875c9d6e6ee8bf6ceb1846dc6ccdbd01e34f58922b766df7ca8b110af8680b788e7d3ca990ebdf51f981d1a53b63a8045261859581f51cbce40baf1c1d3066a7dc8eb091afb3c4387afc431e846e79353f72cd945678a9bb667c7b3de7e0ace74f7863010c88cdfa798bd031d917aebbaf0bb6eccbdfd1adf5099393f0839b882b15bb259f12f7cc9d03598954f736d936cd79b5bebc1462bd17d79afc8598ea7f2a9ce3920f30809666aac1a533b21b8037f26f54fce9a3ba95e87f599e2f9d8fac28692d4bb6d2475e73935c8246406d36917372a7def80c5f83fae4ea155436e54004e1c5bd82beb26aa2f59e940dac2a75517b0026516ffd233657cebe898e13336c77cd7d60b9d3e41bf9088139b81a56d548a7d46b7ccb623e2ce160c8f3c2325ab3fb6547e4b3e20dab6e0ef834469e3c4aab69d23bfbfa2cafe0a4af7808885b7bd7ff812c36ce016458a4be637a75ab67004ee45cf1e0b98b17f518712b2a71e6a3c72df895aa401b42d40071faa1b68b02133f2438512c8ec73c662331fbb1d12a82bd9ea7cec62295769fd7b3557f2c740ea6c67fceff9199eacef571e4d4a256e4329a2248446057c9e8191772eb1962689a9ce00c9196e2db0947720b4312d7ca563f1e731066c0cf83c8a39c19841bda60bbdef2a6801dd415b9edd68346d3855d22be9531a1d3e9cc44f90d17719ece065b3a12a9a7356ccf598f2c56b846f0960eba981d7371a62182611af8efe37d7fba31d43340443fa4eea91bba1dc1141f8d4d6de52fb4e9abb7c0dd412cb7ee43f058ed79208abd821f272308ad785dfe0c45dfea8872052df1a45e4581a567de067e465df74a952b1a00e9e394266c3afda2cd4d874818d868cabd56e8539b92b90aa0a2a927ba627daea432a26b530cc0f6dd8c8f36cb8fc8a8c67ca7eee667c94ec3ebf7893c522d87450432f0ad89a20a9d526d0bce2941c3053b4c4c124aae166030250c3f19607c187e73e65ce1256c11e5a9449d8b14fd5fd722e384bf5fd3b263940248fb9984c93b2c7ce878641568469eb6f60ae233a395405a364374fa5991b63abe69f7e0dda026a11f656d06fbb7dd5951ed074bff8153a1eaab2bf639f2bca20e36cdabcb4744a6b5c5dd2dc530b68785addb801c8d61fbb9217e114751cf44082090f7c4bf06ea3aadf55afae218b4986aac94789f09d3caccfb2f7c36b946fc94402510d613ff0520b1eb9a3f6579834d4670d6328b6892e8055fe1f92ee7100c9a9a2571514d9b7f469b184b11b720efa91beaefdd0b3d8f08bb228d6d34e5449850044253a770129d975028449b489fcda233ac0580d5097a83c3286a622340546c35ecde14790be058567c72f90db1140133a481862580197799a0ace6abc0bc10af3101a5a123662d99d4f90aa120aeee03f6b03b22aef73214f9df8885ec7cc70745eb248dd065bd3fb9e88022d7806acbf6028e3cbb4579979299b8639860138e11581df829c99f079fb38b26d7da6ac550631e0671a3d0d4454d8a9c3f9ab1036260e759dcdf1342e825b9114c1a9e0e365dd5f095e70804a2188584f1f9d9eb31e5fa6ad887944cefa860677ff65b1e00b9907ebf52861fda84a51e72f6622bf3f39f882036734511ad1892c8cd78db512940918bd7331538d5cf3a3f16cd2497673a0a49d5e8a5ab007361d7e9f69586e8bb857691e3f54772d9c763a0b686c7d372bbd2ac47d04a71833a8b0a12c21d4079a6321680fbffa32c5c8b5fb833d50fd593e576f70428d678757369838c561fe80c6b712a19905e355ccfa8f4f235e65ec4c5b995858104aeb2c6b082025392fe6f3be6c5ed64c62899835499e93fdc5e6f6228575f40d637447796bfeab1f4dddd57fd7c039ba2fc87bf5ba3a6f1cc4c976b860c1673fc44957f723d4743bd962aced638a5f822e322092df73e34d87d3b5d9be3c0e1fc69728b3cf85a3fd2d0a596cfc0870892b796352ac1a362a66e565bed17b6d5620952f9f213f08defadc107317dc41455b63823bf9137e23b63ed87e6d1162dec6d39e6d48e6c2e6b31070579511e5ff2fc08a1fdf9cca985eddc37622c235bc1f6270dd476e91230655bc0328e41ff328290d5262f84146adbf9ecce2ecb0cb7c31b06a749a811e14c649ca09984725cbcbd0dc36dc6e0fe8ffba903c1525d2ba6d52a72dba0f8b6bc673f487cbef0e428ee0732e56ee1670b094f943d41605dd3d9ad84873d6ac601df89dac1f70c2681f8018745f0ec57960043849650fca5441c35ad5f99572ceefa8e9d9b05f6fc813111467a8333684a678f8c15f28d7945bba373f8ed40c3143981d733755a9a5f02d29ecb09b25ccbfa6f35d6603a94b88f70a0ef110781ade0fa2bc25d0460fe48edabf67550744989a01b7365e9cd670352c1cec795b82cf9d58fea742eb2715f32c0bfc05228d50a8e9ac641c7c05a7bfefc1bfa853903ad2ebd8106a700df691e6fff6adcb2b8859133789fef17c54a5d4e0281ad55fc67d01fe366a1dbf20331d3cbe10f4beb963984464584e5bd94a60459f3ae9c83068d8df809c437f20976e1f9a3736a718f148619c730731fb4f81af503ae5b0e3e1fcf8f3ce48cba5f3866b85d4d405ae75681dfeace849cf46185149c10d46301726d9e26ae320213c52aa09480b5f1b3b324231d0a", 0x1000}, {&(0x7f0000001500)="e19449cd1531d7864d547a79b9b612c80f3c5c38ca9f327761d836734b91dfd79892897dfe8f3a22f7eb387202371b77eb1446e1de531818660642365949f57ebb2bf23933e79f", 0x47}], 0x7, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1e010100000000110000000000000300000000000100000000000000000000001400000000000000000000000200000009000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141428ac1414aa00000000340000000000000000000000070000008624000000030608fa95fda560e202072c08ebf234020bbdc2dc53cb69a89bf50504261800000000"], 0xa8}}, {{&(0x7f00000016c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000001700)="7cd4d125d2d5a02092adfec1d600d9a9e63edb17becb94c5cdca9f6c12d2d8f968b02b8a25f53730998c8f5e14cbc5fa845003cc6f8056b514bb16ef39262ba7b7221f643cc0978d374d3cc4d41b04c010fc5c1af19869d3479aa039549e279d2abf23a2dd5d58a5eded6fea1cf27cf1d9ffe70a3ad17af802692d85c7f3f781a3491b39e12f91dbcf5ffcbb4735c5eed020c5e295226a5b483dd4ca7a24abfd983f36047ffea24bd9f46b5b3b7d24f0", 0xb0}, {&(0x7f00000017c0)="ff74cb820f685b55f60cc46e624e1a292c3c86065f8eb0e7ce060d9a940595268282a781172fb9f553fabebbee4126927f5314aca4b5405d14bf750ca79e80032556d35e7e1a130ed9", 0x49}, {&(0x7f0000001840)="0bc84c9593e9b71e82cfdc2b02c1007e62fdc7761ec31966f02d8c0a218004fadb022ae2ac0b96422af28dbeeaaabca229919ece91cd60941f1a92fb410f584488fbad7c873abe1081ef4f3310f1cd67ff9e1583055af5c05bcd64d48ad7be388fae0f167b0200f317921655f97172093c126e32e7d7b63dfb865dbf1d48b460077577c85189f59c769bd80028f79cd4a09ef1018cc3e23ff746ce6bc6a1690f8fdd6d0e47d791a10e57ee8d6ec0c403dad50369f6b7b038b4bfd4ed56840b5dd8ebdba9f38568501e52c6aa089bd74e6525011fc82467006bb921684426beace291884c880038e4ab3e825ddbd06b235f", 0xf1}, {&(0x7f0000001940)="d6654269df0be5330fda54e02fb6ff5099c5ff778359c02a282265fe579b2e172b1ac8f3b89b046325ec19d71379a1eac79fc30fc0e7aa28a12cb1d706e85eebf7b572512efa699ee472c282a33505325e4b0b29d5c4a8f4dcd0e90bca8b6397a459bdfafa86d2140da3d97ee3d3703b55dafb165308cb26aa8bb0681fcd8926d54796c6c0e1318367cc49", 0x8b}, {&(0x7f0000001a00)="3ef858dd0ee7d68816bcd4e80daee457784337d2dfaab032b2c8394e22448cc2bd563d4c5b6f7645829240e1a52a208b3a8700df4165e9a9f727e20de8612d9af8a547530f5526a12fbf094800fd37d8d2e5e4c400605287804c72fb9358f1af403b00f7b543d0cbb5ddaf7aebad7c02576ae1ab6a932de8134cd8007b69bc9e078d0ad4078e42d376406e8cfe4448ed00fec465470ee0dfaeb736ec91c74d71c45b54b22028826882d36a3287aedca9a0236c6f21db3e79ddfe235fe7a0182d7bde3f0b6116076e577d5e5a7e6a2123382b8932aa8944e8d3826699c1f4d31721f6805c7740cad6b2d4d50e", 0xec}], 0x6, &(0x7f0000001b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x17}}, @ip_retopts={{0x78, 0x0, 0x7, {[@noop, @cipso={0x86, 0x29, 0x2, [{0x2, 0x6, "b84ea01b"}, {0x2, 0x11, "d0c6b8722d02698358cb2c2d96a991"}, {0x1, 0xc, "0066c2ba07b621e2a245"}]}, @end, @ssrr={0x89, 0x17, 0x1e, [@local, @local, @multicast2, @multicast1, @remote]}, @rr={0x7, 0x1f, 0x71, [@remote, @private=0xa010101, @private=0xa010102, @broadcast, @empty, @loopback, @local]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@end, @timestamp={0x44, 0x8, 0x74, 0x0, 0x0, [0x7f]}, @ssrr={0x89, 0x17, 0x30, [@local, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast2]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x1, [{0x0, 0x10, "b6530d3bf6ec4e918d7fbbb28ce2"}, {0x1, 0x2}]}, @generic={0x83, 0x3, "1a"}, @timestamp_prespec={0x44, 0xc, 0x98, 0x3, 0x7, [{@broadcast, 0x3}]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@rr={0x7, 0x27, 0x49, [@multicast2, @rand_addr=0x64010101, @private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x33}, @local, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}]}, @ssrr={0x89, 0x1b, 0x6e, [@private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @multicast1, @empty]}, @end, @lsrr={0x83, 0x1b, 0x6f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @multicast1]}, @lsrr={0x83, 0x1f, 0x85, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x1b8}}, {{&(0x7f0000001d40)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000002e00)="23e244588ef5fe30f137654f525410345d7ed6cb15c67721af02097bb8858e08eee1f2fcb2e6662da52d89918435fe835798818041e5", 0x36}], 0x1, &(0x7f0000002e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xef5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0x68}}], 0x6, 0x800) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, &(0x7f0000003700)={0x0, 0x989680}) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x0) r4 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {}, [{0x2, 0x6}, {0x2, 0x5, 0xee01}, {0x2, 0x3}], {}, [{0x8, 0x7}, {0x8, 0x1}, {0x8, 0x4}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x121040, 0x109) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000040)={0x0, 0x1f9, [0x0, 0xc8a2, 0x0, 0x8000, 0x101, 0x4]}) statx(r2, &(0x7f00000002c0)='./file1\x00', 0x2000, 0x7ff, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) sendto(r5, &(0x7f0000000500)="0a534baef24d1f7adaed4d5233f57d43bf96c2833716c31759483a73d1880a31410ff3a3162480b449256e6a86d83010e706ee08b7ebc56312c1ee58ebde3a58145bd2e5cc7ddfbb61156e0d5161541f366a0a48f726316ad0304d7d8f579d88d4dd329e13a536e8c8e0d49488f04d7b009504d96f5a9cd3eb6e0905b837c5e1f3338dc1224cb0c2e9f9423bc76b4a9f54b2b9a7f04716c425f6c770c3d3d91c0b551958a453e80a44f6acc307ab", 0xae, 0x40400c0, &(0x7f00000005c0)=@sco={0x1f, @none}, 0x80) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @private=0xa010100}, 0x10) 19:24:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = getpid() r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) write$bt_hci(r2, &(0x7f0000000140)={0x1, @read_stored_link_key={{0xc0d, 0x7}, {@any, 0xff}}}, 0xb) write$bt_hci(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="012a0407f9e46527693929414bf1497946085bbeffffffffffff05289b42c35758ea0079f3d7e6245906ea0b8f9b5926566fb964b8c73eed9ebc6700f2774ecaa087eea9a8f070cf0359a9df9508c1904b5626100e42a8fe935e98c188fceb4d36990f2b2c53097ff11bd631a03357662dae963a5b4c7d676ad002a043e50303d71c2be95f043ad1eeea183953c0afb84dd94b29bf6cdb913fea4d1e5e8c0e89b988f72f3bb4d14b0cc3475598a8c91460815cecc79e0cf708aae9ff1630be71fc090d0d2b4c03753624853e73257f8f231f6c8d6eff2abb2f54466935fed5bca01b124e7850d573e743718175ea88fbe207cf8bee607719bd8e766854ac5cb6488ec250a14ae2c7633122b3582da2dd6595ca9020a6c3e759eba6e5c41102219be384036cde97658b44d19084a9a05f5b9ac5879c60adc6607331961d55a548ffeba449d5ebd2a28dffcc27f590e6959e3171bbc3b8fde4faee779a0194cfe2"], 0xb) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r3 = pidfd_open(r1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x1000}) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) fallocate(r4, 0x1, 0x3, 0x7fffffff) ioprio_set$pid(0x1, r1, 0x4000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x1d}) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/net\x00') 19:24:57 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100214, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xa, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x200044d1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0xa) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') fsmount(r3, 0x0, 0x88) openat(0xffffffffffffffff, &(0x7f0000001240)='/proc/self/exe\x00', 0x200, 0x20) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x4c) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8f4b, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$netlink(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x6, 'sit0\x00', {0x200}, 0x8001}) close(0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 19:24:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 81) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:24:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000880)) 19:24:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r1, 0x88, 0x64, 0x0, &(0x7f0000000040)) close(0xffffffffffffffff) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) fcntl$dupfd(r0, 0x406, r4) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32}]}]}, 0x28}}, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fchmod(r2, 0x54) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) pwrite64(r0, &(0x7f00000002c0)="7ecf5af68b35f287ea384d3149a1c52f9963b68a04187de90797ff69f95b768a0e2ea1e89105bfbc5370d9b9a9ad3c6e2794a461f843a93c692ed680757b84f96e13882f93c93dc84dc58c7d8df9a83fde9630c2422401c3b8d1740ffd76d254e7a750a12b71354afdcd1ae612c276ce40541fa7fd832333cd3d2f2a7ae683fba0c67c75b91d35973304516af837c1fdee0edee47d773001ec813a53d3fdbf8133811701c8a22c152852fe7f8452b7de13669b6c1350cc77d2f1b2f9ac703f7015cbf5f478e33bc5c1eaf591a818522485dc8ecfad78604165de16", 0xdb, 0x8) openat(r5, &(0x7f0000000000)='./file0\x00', 0x42c40, 0x21) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x400102, 0x0) [ 1361.564266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1361.575729] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.576592] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1361.576592] program syz-executor.6 not setting count and/or reply_len properly [ 1361.580941] FAULT_INJECTION: forcing a failure. [ 1361.580941] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.582372] CPU: 1 PID: 11050 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 1361.583106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1361.583970] Call Trace: [ 1361.584256] dump_stack+0x107/0x167 [ 1361.584645] should_fail.cold+0x5/0xa [ 1361.585045] ? __lock_acquire+0x1657/0x5b00 [ 1361.585493] ? create_object.isra.0+0x3a/0xa20 [ 1361.585970] should_failslab+0x5/0x20 [ 1361.586366] kmem_cache_alloc+0x5b/0x310 [ 1361.586811] create_object.isra.0+0x3a/0xa20 [ 1361.587293] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1361.587844] kmem_cache_alloc+0x159/0x310 [ 1361.588297] ? mempool_free_pages+0x20/0x20 [ 1361.588762] mempool_alloc+0x148/0x360 [ 1361.589192] ? mempool_resize+0x7d0/0x7d0 [ 1361.589637] ? __lockdep_reset_lock+0x180/0x180 [ 1361.590139] ? mark_lock+0xf5/0x2df0 [ 1361.590565] __sg_alloc_table+0x24e/0x390 [ 1361.591020] sg_alloc_table_chained+0x9b/0x1f0 [ 1361.591493] ? sg_alloc_table_chained+0x1f0/0x1f0 [ 1361.591994] scsi_alloc_sgtables+0x236/0xaf0 [ 1361.592459] ? scsi_cmd_runtime_exceeced+0x1d0/0x1d0 [ 1361.592980] ? scsi_init_command+0x4ee/0x750 [ 1361.593453] scsi_queue_rq+0x1dc9/0x27f0 [ 1361.593889] blk_mq_dispatch_rq_list+0x372/0x1c30 [ 1361.594397] ? target_unblock+0x1/0x60 [ 1361.594804] ? __blk_mq_sched_dispatch_requests+0x236/0x450 [ 1361.595398] ? blk_mq_dequeue_from_ctx+0x7f0/0x7f0 [ 1361.595906] ? do_raw_spin_lock+0x121/0x260 [ 1361.596356] ? rwlock_bug.part.0+0x90/0x90 [ 1361.596797] ? hctx_lock+0x7f/0x200 [ 1361.597198] __blk_mq_sched_dispatch_requests+0x263/0x450 [ 1361.597778] ? blk_mq_do_dispatch_sched+0xa00/0xa00 [ 1361.598304] blk_mq_sched_dispatch_requests+0xfb/0x180 [ 1361.598880] __blk_mq_run_hw_queue+0x12c/0x290 [ 1361.599352] ? blk_mq_start_request+0x3f0/0x3f0 [ 1361.599857] __blk_mq_delay_run_hw_queue+0x4f1/0x550 [ 1361.600384] blk_mq_run_hw_queue+0x170/0x2f0 [ 1361.600850] ? blk_mq_delay_run_hw_queues+0x1a0/0x1a0 [ 1361.601388] ? do_raw_spin_unlock+0x4f/0x220 [ 1361.601863] ? _raw_spin_unlock+0x1a/0x30 [ 1361.602298] blk_mq_sched_insert_request+0x384/0x440 [ 1361.602844] ? __blk_mq_sched_bio_merge+0x3d0/0x3d0 [ 1361.603395] ? sg_remove_sfp_usercontext+0x420/0x420 [ 1361.603945] ? blk_account_io_start+0x11b/0x170 [ 1361.604451] sg_common_write.constprop.0+0xee9/0x1a30 [ 1361.605008] ? sg_build_indirect.isra.0+0x710/0x710 [ 1361.605532] ? vprintk_func+0x93/0x140 [ 1361.605948] ? record_print_text.cold+0x16/0x16 [ 1361.606449] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 1361.606987] ? trace_hardirqs_on+0x5b/0x180 [ 1361.607451] sg_write.part.0+0x69e/0xaa0 [ 1361.607873] ? sg_new_write.isra.0+0x770/0x770 [ 1361.608351] ? find_held_lock+0x2c/0x110 [ 1361.608779] ? __might_fault+0xd3/0x180 [ 1361.609188] ? lock_downgrade+0x6d0/0x6d0 [ 1361.609633] ? _cond_resched+0x12/0x80 [ 1361.610037] ? inode_security+0x107/0x140 [ 1361.610475] ? avc_policy_seqno+0x9/0x70 [ 1361.610914] ? selinux_file_permission+0x92/0x520 [ 1361.611425] ? security_file_permission+0x24e/0x570 [ 1361.611943] sg_write+0x87/0x120 [ 1361.612302] do_iter_write+0x482/0x670 [ 1361.612713] ? import_iovec+0x83/0xb0 [ 1361.613131] vfs_writev+0x1ae/0x620 [ 1361.613527] ? vfs_iter_write+0xa0/0xa0 [ 1361.613944] ? __fget_files+0x26d/0x4c0 [ 1361.614370] ? lock_downgrade+0x6d0/0x6d0 [ 1361.614805] ? find_held_lock+0x2c/0x110 [ 1361.615259] ? __fget_files+0x296/0x4c0 [ 1361.615687] ? __fget_light+0xea/0x290 [ 1361.616096] do_writev+0x139/0x300 [ 1361.616468] ? vfs_writev+0x620/0x620 [ 1361.616883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1361.617442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1361.617996] do_syscall_64+0x33/0x40 [ 1361.618394] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1361.618946] RIP: 0033:0x7f8812842b19 [ 1361.619336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1361.621233] RSP: 002b:00007f880fdb8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1361.622021] RAX: ffffffffffffffda RBX: 00007f8812955f60 RCX: 00007f8812842b19 [ 1361.622775] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000006 [ 1361.623526] RBP: 00007f880fdb81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.624277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1361.625019] R13: 00007fff67f435af R14: 00007f880fdb8300 R15: 0000000000022000 [ 1361.660974] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1361.728328] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.755269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 19:25:11 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x400080) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f00000000c0)=""/233) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) ioctl$FITHAW(r4, 0xc0045878) r5 = timerfd_create(0x7, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f00000001c0)={0x0, 0xffffffff, 0x0, 0xb1, 0x1f, 0x9}) 19:25:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x7fff, 0x4, @private2, @empty, 0x40, 0x7, 0x0, 0x6}}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e22, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)="03ac582249f20029b36e4d70607c6ec477f7c42c1004ac00a7a4ac4e7442e0cf53c38cb1a0e0b063a838064963a22c7612440f08e84c1eeadf58134684260b5d92eacbe18419d4e0a3600c9abe2a0cc53071e6d937d8098c21", 0x59}, {&(0x7f0000000100)="6f949544096bcf8dc4c0de33cf91703144a1e5cc4bdffed85e4f884ca060c0ee7fc5b3ee50ba8ea20d46923a5001f9386bc78cedc6000dad9344a2da463bfcc38ad551a3bbaf4bb5ccebb31941dc12cac63256704822adbb3626b4eb49aab1e2be6e23a83e8d6d5afa6546082cac7a67c790816e7782abd4cddec83e2047582552774cdb42fad44253faadae4759b79bc0763e3e3763da1a240f41386c7707572aad4a099a478114b76d3ca3ff2677a9fa23112b975fc0c985e777f366bbff85e5f2f25b83737108d7322b7b1933bd11a604fedad0", 0xd5}, {&(0x7f0000000200)="df3971abf4b48ea3657bfecf148a906c13c98b86912cef793e19ac87f8ae53b6d549c129bad7523fcfd1a799db82c1f0de7c30fe3be6f595c77cb285261dd6ab420979789134718e50cb84ebe34451ca3b26ed0e522e87ff7861b268a52cc10c22", 0x61}], 0x3, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}], 0x40}, 0x804) 19:25:11 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2004010, &(0x7f0000000200)={[{@clone_children}, {}, {@cpuset_v2_mode}, {@none}, {@none}], [{@subj_role={'subj_role', 0x3d, 'ext3\x00'}}, {@obj_role}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@measure}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) r2 = openat(r0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x40) sendfile(r2, r1, &(0x7f0000000300)=0x1, 0x7fffffff) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) openat(r1, &(0x7f0000000040)='./file1\x00', 0x5c9940, 0x162) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2044034, &(0x7f0000000180)=ANY=[@ANYBLOB="746573ff0020006b6f6e2c00"]) 19:25:11 executing program 7: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='nomand\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x400000100000001) 19:25:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000040)="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") 19:25:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000880)) 19:25:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) (fail_nth: 82) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:25:11 executing program 4: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x13}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0xad}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x2000, 0x3, 0x1, 0x40, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3f, 0x4, 0x5, 0xfd, 0x0, 0x8, 0x10000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xa83, 0x1}, 0x80, 0x220, 0x6, 0x3, 0x7, 0x431f, 0x6, 0x0, 0xfffffff8, 0x0, 0x3}, 0x0, 0x5, r2, 0x0) [ 1375.497084] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1375.497084] program syz-executor.6 not setting count and/or reply_len properly [ 1375.499775] cgroup: Unknown subsys name 'subj_role' 19:25:11 executing program 2: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)=@v3={0x3000000, [{0x4, 0x8b5}, {0x5, 0x1}]}, 0x18, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x90d4d4cf3db7b0ab, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="810000000100000018000000", @ANYRES32=r1, @ANYBLOB="017d3fd0f34d2a171ffeb74ec1650072"]) r6 = syz_genetlink_get_family_id$batadv(0x0, r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0xfec6, 0x39, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050884) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02002abd7011601d87100f0b33881cd4ea65547f5500fcdbdf250b00000008000300", @ANYRES32=r9, @ANYBLOB="0500290001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24040010}, 0x40040) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = fcntl$dupfd(r7, 0x406, r1) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, r10, 0x0) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:25:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000880)) [ 1375.541058] EXT4-fs (sda): Unrecognized mount option "tesÿ" or missing value [ 1375.554725] cgroup: Unknown subsys name 'subj_role' [ 1375.557775] EXT4-fs (sda): Unrecognized mount option "tesÿ" or missing value 19:25:11 executing program 1: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @private=0xa010102}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @local}, 0x61, 0x0, 0x0, 0x0, 0xfff8, &(0x7f0000000080)='sit0\x00', 0x89, 0x3, 0x6137}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000140)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xb0002, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_del_from_accept_list={{0x2012, 0x7}, {0x1}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:25:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000880)) 19:25:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000040)="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") [ 1375.625716] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1375.638726] device lo entered promiscuous mode [ 1375.651734] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:25:11 executing program 5: syz_emit_ethernet(0x12e, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "ee7c63", 0xf8, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, {[@hopopts={0x0, 0x1d, '\x00', [@generic={0x4, 0xe2, "1baae30242e0534114688de8e4d20b8be264776e0dd6b36710805807967ab23fbb2787b6e01a65e7e940e7d3dcb7ba0b0938092c435545bfc6dd4e4bf74fc7784dc0e8455c018460b670c0c9e388fada54ba69850b3ba21b0de790334e69e4e0f655660ecc7169ca2e64c243f777323700caae08f9b0937ad00e6990e68c5fed7044d9d8d018708ed0fb1082d5d0159d98a21ed551ce14bef0654e30f38e09f6584cdf40349b0f981c36863e74f135090f80a34b062ef04d422cb43d1370cab94ea9346ae171ce1f54fc3db105c69338a4c0d0bda8f7620d3c944a82751ac15efd28"}, @pad1, @jumbo={0xc2, 0x4, 0x800000}]}]}}}}}, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x880, 0x8) write$tun(r0, &(0x7f0000000040)={@void, @val={0x2, 0x3, 0xffff, 0xcfbb, 0x80, 0xffff}, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x9100, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x19, 0x3, 0x0, 0x0, "b844c75b06aed58d996750a5e5b343db12ca8bf523810a5e107a22b6a1a9fbb068a6aefbb6925628911df6a4bf94cbdd389e937dcd00f365ef4f8f38bea0ef84"}}}}}, 0x68) [ 1375.691719] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1375.691719] program syz-executor.6 not setting count and/or reply_len properly 19:25:28 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r3 = signalfd4(r0, &(0x7f0000000380)={[0x1]}, 0x8, 0x800) open_tree(r3, &(0x7f0000000340)='./file0\x00', 0x80801) clock_gettime(0x0, &(0x7f0000000040)) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x1e1a47f4a1764c1a, r3, 0x4e230000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000180)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x8000, r5, &(0x7f00000003c0)="13060b0ed357bfadd3b5be42a324424d8e0875b80a9813a767bd3b29d2ad6beb1348a6af37f79f3cc6092a616c8d991b264876c35756dea10cb880ba9badd2e72f84e2dd84cd6b8cea811ae9f34cdf36e7e2c0f3b2622c501c1eee361087bcd230fac4d2011d28e3d4d2e85503967dd7dcd75525a0db03f0132720fa0e6e00d6c7a96c6a37869bc707d65628604a6d", 0x8f}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000000480)="e77f592d528f68bc41b0d5ccc7795e51275c7a15cb702ebdc2d2e4182cae0a92aa035a51b549f4d3279d6ba1a7334b8649b590dffd276f403b5dd71cdb17e8339d42aae3a86336778178ebff1d66415930cb7bdb74b9750545d58d061b02bd24f39edaba95508540", 0x68, 0x7ff, 0x0, 0x3}]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002600)={0x0, 0x0, "f8adfe73f6542ef2bbdd923fcd6ab2b30aaedd951fbcf881c5f433197d28529dfe35f640677fb27a9f6b4ced16bf222d0a305a21d1146d789053f194ec19269b6e0c3cb113c1f4671b6f5a95e17e61139d8f4c904c813bc1cc42fd3e9b3f7945200c6c527805eb2e6b4df9fb74f4f1abefbffff88cf6804ea4d3eeb0bb452580d865e7b314f5594fd4661757d020948a56899f1bff243a1d3beb91964cf596476a8fac7fdb1d9e209ba158175e38b88bfdcd39fc03f71b97816418c35275dc158de896d05f2b3c544db23a675fa88bfb4d8ccd42b5bdc8aa9781899886c9607a053a5c6cd592189133cde0126b5420ece382b83d9474e8246f34f3f0fd9f9fe3", "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"}) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f00000002c0)={0x2, 0x0, 0x61, &(0x7f0000000240)=""/97}) close(r4) 19:25:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000880)) 19:25:28 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x0, 0x8}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r3 = getpgrp(0x0) r4 = pidfd_open(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r5 = dup(r4) setns(r5, 0x2020000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(r6, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0xe4, 0x81, 0x2, 0x0, 0x5, 0x3403, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x8000, 0x8, 0x3, 0x9, 0x4, 0x40, 0x0, 0x80, 0x0, 0x1}, r2, 0xa, r5, 0x8) dup3(r1, r0, 0x0) 19:25:28 executing program 2: times(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x400, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x24000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) 19:25:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3ffff, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)={{0x77359400}, {r2, r3/1000+10000}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)="01", 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file1\x00') creat(0x0, 0x0) sendfile(r0, r1, 0x0, 0x20d315) 19:25:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="021dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:25:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000880)) [ 1392.579274] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1392.579274] program syz-executor.6 not setting count and/or reply_len properly [ 1392.579866] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (255 blocks) [ 1392.639796] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1392.639796] program syz-executor.6 not setting count and/or reply_len properly [ 1392.648970] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1392.650500] sr 1:0:0:0: [sr0] tag#0 CDB: Test Unit Ready [ 1392.651574] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (255 blocks) [ 1392.678697] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 19:25:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000880)) 19:25:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) sendmsg$nl_generic(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x44, 0x21, 0x200, 0x70bd25, 0x25dfdbff, {0x9}, [@generic="f684a4c6c45791c97a2f3b6797f9f947f7a230eb0be0a4a867ba8467f056bdf0d6109a681f7731b06a4d755c1b"]}, 0x44}}, 0x11) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) preadv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/152, 0x98}, {&(0x7f0000000140)=""/190, 0xbe}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/133, 0x85}, {&(0x7f0000001340)=""/177, 0xb1}, {&(0x7f0000001400)=""/3, 0x3}, {&(0x7f0000001440)=""/219, 0xdb}], 0x8, 0xa377, 0x6) r2 = syz_open_dev$vcsa(&(0x7f00000015c0), 0xff, 0x200001) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000001600)="15c1") setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), 0x4) 19:25:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) syz_usb_connect$uac1(0x3, 0xc1, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x52, 0x40, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x3, 0x9, 0x81, '^'}, @as_header={0x7, 0x24, 0x1, 0x81, 0x6}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x6, 0xf7, {0x7, 0x25, 0x1, 0x1, 0x20, 0x4000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x2, 0x80, 0x2, "15b527", '\"'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x1f, 0x1f, "703cfe", "c6"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0xfc69, 0x3, "aa"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x2, 0x3f, 0xa7, "1064f4abfaf3"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x46ec, 0x1f, 0x3f}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x2, 0x80, {0x7, 0x25, 0x1, 0x81, 0x6, 0x82}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x7, 0xf9, 0x40, 0x10, 0x20}, 0x1d, &(0x7f0000000300)={0x5, 0xf, 0x1d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x7, 0xde9e}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0xd, 0xdd}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x6}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c00}}]}) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2002, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x26}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x8050) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xd8499488957a772f}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) timer_gettime(r1, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 19:25:28 executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0xfff, 0x0) 19:25:28 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="031dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1392.847178] udc-core: couldn't find an available UDC or it's busy [ 1392.848332] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 19:25:28 executing program 2: sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a0001010000000000000000000000007b828f25ec5b000087ffaf9ad9aa915e7d849240d722e9c27c9b961e996eb528583f4ea58726bb0c27189c86829de05a67c4029ef3be55c5d8aab4080c99ccb47bcba1a91e25c1cb0dc63f55a232411f5a028920d31d18ff2f54a0b3b6f06da1aae0db1076416e3ccf216c4a3a299689ab0ffe2b88cd09a1704c"], 0x1c}}, 0x0) [ 1392.878168] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 1392.880856] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1392.882444] sr 1:0:0:0: [sr0] tag#0 CDB: Test Unit Ready 19:25:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000000c0)="527ab95ae3c12434d6071f536766f5cf36b4fa93a24273e91d07ad3b10719b7dfe89fe434e4fdf27d13a4c588d5ea947fb163c5289b9e65181139dacac6398a4a2ac9d0dfd5efbe0762774bcc02eaa26b545482ce17660a9304fe0d038c8b7858520ae5e4a3764661950aebd5a48a09141d55cf5982ffd2c6f5308bc62c97276d1ac6c8cf78f2b4f17f162b8d86555f158e45ec9be262c9d41452fa9196d4b273f69e5df20a2fe8739fc620f99d130604c083bc17b") bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x6, 0x4) 19:25:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc9, 0x200, 0x3, "67cf1c7fe1845f71bbb3c6fc2c38882c"}}}, 0x20) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_name_req={{0x419, 0xa}, {@none, 0x9, 0xfb, 0x5}}}, 0xe) [ 1392.977865] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1392.977865] program syz-executor.6 not setting count and/or reply_len properly [ 1393.032855] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1393.032855] program syz-executor.6 not setting count and/or reply_len properly [ 1394.785427] Bluetooth: hci0: command 0x0c1a tx timeout [ 1396.833470] Bluetooth: hci0: command 0x0c1a tx timeout 19:25:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000880)) 19:25:44 executing program 5: lseek(0xffffffffffffffff, 0x0, 0x3) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getresuid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r3 = gettid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)={0x22c8, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x22ab, 0x1b, 0x0, 0x1, [@generic="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", @typed={0x8, 0x4e, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x12, 0x0, 0x0, @pid=r3}, @generic="a2b3dfd4f55b9cbd5cba13db8af9ccf574f2b3723e0d09c1cb270eafe3b28e49b35d64449e51993756a0cbcaf8a3374b5c869d8a95f5f469b853eea47d1d22b457960eabb1b0701f54bd9156ab2d678a76451aad687c52547507ce490749d42ecadfa4e3ea5f12d7814de2e8e1820abcfa6f6d5648da85e021e4dacb90d7b82e0a48618b1d78eacff8e257d64a4b9ecd3e76a9c3e6d93e9b7b69d490", @generic="4141d20bcd4f3f50679355f52d074845bd039203cf7a1596a8d7a3ed2a170841202fcf4a349ec412d492712d1c2d1cd3a718d7426dd662b3428e51b0a60e07d8ad0bf4e201f70262f4ba9ce1d52dbb43fc2988f8b6ae3dadb1", @typed={0x4, 0x60}, @typed={0xbc, 0x12, 0x0, 0x0, @binary="72da6c123172e768de020e9c8a8f76c729e33511f6941ee2579967cf2fe48343aa2852fc7aaa11dfa4a563c5f10a8aa16ba7a9bebd3a88d0e2434e4dffde34d9b2309e3a232c025b2e7fee1abc6061f9cd5ca6a3a2039a2c369749158c28fa021e4440060b54df2116cb6b55ebed6c7942ea15822e6a069c0be586eef6e9f6fd661d74043a196d732ada2f8d59aefd207d5850173f254c7dcb3f37ce7836ead3fa9b3f8d22faa5598c5af6542eefb23d71ec99d63c10f234"}, @generic="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", @generic="74cd5a7f9e77c0f34772bfd7d0dfbe51ac9b41e026cd8faa4a0ed40c9da251da7a1c0be13422c52b1d2a5f799d8317d6b452c740f2c5e69d96a6ef5c44dcec485304f034daf826beeaa55f59b4cdaa17139ef1a192d66fa93fbc4be6c92d4f235c4640d07455885ad06c7fdd797bb94dab626cb4a3c71317fdc0ac5ee8f3cbd7fa5cefb3cdd84277cd3738de22ca768d1606005378cc4c0d44f47aaf5545495342889c8767976a707b1044f37a4743f9b04f4200a5251056598e656a13f29c891dbf70575a6390cfa951eda1d46e840c54fde28025dddfa300d3554ddda486cfb13c"]}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x22c8}}, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r1, &(0x7f0000000140)=""/255, 0xff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x4010) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) unshare(0x48020200) 19:25:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6600, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) rt_sigpending(&(0x7f0000000180), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000000)="c9bae1e95e5fafab09bc4fd0e37155ffd51661c788abb5e67c4d23fa1ff9eecbeed58af457f3ad0dad444bfadce6e605bd968025c3d2a4b8545642669acea030178cfaf9c8ca19c25c029bb0bb63ead25adb0262861fa353a3e2f779a2fef481f7351c3c7e8280797afe675c86849233001bc548718a80b098639edc5e25dd502c72dd7156242681f5", 0x89) 19:25:44 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_mount_image$msdos(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x3f, 0x3, &(0x7f0000000680)=[{&(0x7f0000000400)="c5f66d53202b2a0a2e70bbc9db0cc660d36d6d5f", 0x14, 0xfffffffffffff801}, {&(0x7f0000000440)="d886acbe7aaa0125ec513b17bd87818cbd710f64dac602", 0x17, 0xfff}, {&(0x7f00000005c0)="45770d92c7baf3858b4e2a0fa1ef88f785724ef16f925d0e8bf9ada964879682bcf5d186a265cd7a226cc5589fc7eab9dc40b40a78837d1940f25ff75e3e295991fd6f5d5f372ed09bfff65cd07e27aee5ae7df046d33a872003650f55034bf5acc7c27cc69e0655f19da493f2451ea29c131b155c85a5843541eb45c85d92031d1fd3f0755bd716e14e7fc2d61dbc8fcaf3cba1916561c924a8061e29da", 0x9e, 0x20}], 0x10, &(0x7f0000000700)={[{@fat=@check_normal}, {@nodots}, {@nodots}], [{@subj_type={'subj_type', 0x3d, '+}!]'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080), 0x0) sendfile(r0, r2, &(0x7f0000000740)=0x3, 0x1) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000000c0)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r4, &(0x7f0000000480)="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", 0x10e) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r6, 0xffff) dup(r4) sendfile(r1, r3, 0x0, 0x20d315) r7 = accept4$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c, 0x800) read(r7, &(0x7f00000002c0)=""/189, 0xbd) 19:25:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:44 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="041dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:25:44 executing program 1: timerfd_settime(0xffffffffffffffff, 0xd47c409e645f76ce, &(0x7f0000000040)={{0x0, 0x3938700}}, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000000c0)='caif0\x00') 19:25:44 executing program 4: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @empty}, {0x0, @local}, 0x0, {0x2, 0x4e22, @multicast1}, 'veth0_to_team\x00'}) r0 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x40) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(r1, &(0x7f0000000100)='./file0\x00', 0x40000, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = timerfd_create(0x7, 0x0) timerfd_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000000080), 0x0) fcntl$setlease(r6, 0x400, 0x2) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) creat(&(0x7f0000000340)='./file2\x00', 0xc9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) openat(r7, &(0x7f0000000280)='./file0\x00', 0x401, 0x0) sendfile(r3, r4, 0x0, 0x100000001) [ 1409.021823] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1409.028563] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1409.037944] netlink: 8876 bytes leftover after parsing attributes in process `syz-executor.5'. 19:25:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000880)) [ 1409.084091] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1409.125064] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1409.125064] program syz-executor.6 not setting count and/or reply_len properly 19:25:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f00000000c0)="8a3f221e7d319229c410214ed3fbff0863fe4e74b8f426c475351ea2b41fa48346daec74197123b144c82e6334b5125035e9f862ea8ddd4e1ff8ee5ecb33c289373677c35d1f3ab21b0266b4f6a00de570d1684254be81662e8be144962371bac3ec43ee4fa6cf39c46b2857c23fd8361c4dc7118f57a4676f32e4f579825e502e1046ddacb51c0488b8108deb1e1c44cbba9aa00aab605ff9d6e3dea4530a924af3e82bb9bcecc9c80680ae7e9f97184ff51b5d9aa2bf8fd931009d8fe59ac48a8f679ee12dbb3380322b6c955cb66220dff6777c8fcfb4") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r3}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @write_auth_payload_to={{0xc7c, 0x4}, {0xc9, 0xfffc}}}, 0x8) close(r0) [ 1409.157974] netlink: 8876 bytes leftover after parsing attributes in process `syz-executor.5'. 19:25:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000880)) [ 1409.217754] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1409.217754] program syz-executor.6 not setting count and/or reply_len properly 19:25:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x40049409, &(0x7f0000000880)) [ 1409.250259] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:25:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x260bc1, 0xd2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f00000011c0)={0x0, 0x5}, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x4]}, 0x8, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000140)={0x0, 0x401, [0x40, 0x1, 0x4, 0xa2, 0x7ff, 0x5]}) copy_file_range(r3, 0x0, r2, 0x0, 0x10001, 0x0) dup2(r2, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80800) writev(r5, &(0x7f0000001280)=[{&(0x7f0000001180)}], 0x1) fcntl$setpipe(r5, 0x407, 0x0) sendfile(r2, r4, 0x0, 0x20d315) [ 1409.320075] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:25:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000880)) 19:25:45 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x6, 0x7, 0x1f, 0x0, 0xd5, 0x40020, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x7f000000, 0x6, 0x2, 0x7ff, 0x1, 0xffff, 0x0, 0xfffffffe, 0x0, 0x6}, r0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x124d63) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r2, 0xfffffffffffffffc, 0x0, 0x3) openat(r2, &(0x7f0000000380)='./file0\x00', 0x44000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x84180, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x24}}, 0x81) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000340)={0x3, 0x1, 0x1b}) syz_io_uring_setup(0x535c, &(0x7f0000000240)={0x0, 0x59e0, 0x10, 0x1, 0x14e}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000500), &(0x7f0000000540), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x40000d0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) 19:25:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000280)={{'\x00', 0x3}, {0x9}, 0xc4, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)="c130d8066044d35eb6b8dfd0112e555f750d100371bb849d855b68e8ff4a49e55ea385186825bdd3e2c2d9ff2287faa7cad8b5", 0x33, 0x0, &(0x7f0000000140)={0x2, 0xad, {0x1, 0xc, 0x7, "71435f14d5ab01", 0x99, "e6da9e7c715a7379d769aef28422d7a3fb9bdfeeb9280a964b3b36f1edccf30ccf5c9b8fc4ff70cf4824757171546ef89121f3178e1d8c9fec41e28557d103bff8e10072e5c8604fca32bf9218fa9d9c66486dbe4f12e558e42cd874a03f695b8831373a59cd372fc17487158d0bb00b8f161487488d129587bf18e70376c3bf3dcde50897119c90b29e03a71cb8a0c834b740eb76cd0d6b1d"}, 0x66, "aa069ca915f362453bdb3a62ed12f85316d6aa3db60db1c953813b4f3b33f1a8e2832c66fcccab297e6b71f7ea903d924270a0c9529bfa3047fa60144ad340f660c2ad1bf7e2d7c3a6c2614773c938d5a26b1afbd8bdb8ff57adb0de9466b6937e804714727a"}, 0x11f}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="40000400"], 0x6) [ 1411.425439] Bluetooth: hci0: command 0x0401 tx timeout [ 1413.474384] Bluetooth: hci0: command 0x0401 tx timeout 19:25:59 executing program 2: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="ccea34ab8b9ca332bfdeb90d3b19f285fb663b780a69f3593977117d1e945b619bce8baa23305283dd1ca8e40110435c49656b9b280a9008088ad1edf185a6e8b3cfd30124cb49f32a13da8de682d711f399e1571fbf2cc869039f559317cade43ec1ed12b1c21848bf16c4f1bfea511e4798360183ac4dedfa419aa66f3c6d86b1fd694abddb60fa78d904b5de56872e011ee7450f001852b592eabf85045dc9189c6563bf718717ad0003163", 0xad, 0x80000000}], 0x0, &(0x7f0000000340)={[{@fat=@dos1xfloppy}]}) 19:25:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x40086602, &(0x7f0000000880)) 19:25:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) 19:25:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="051dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:25:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @delete_stored_link_key={{0xc12, 0x7}, {@any, 0x3}}}, 0xb) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000080)="363892733d407e8d8b6c1e95caccafae0f37470a1573ea3c4559c6a446539fc6c2372974829af35b61b57dc0b8767373578738455517e48158cbb220744a272f0dc83e57e4472e5e7f4f") ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000100)={0x0, 0x1000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052900)={0x7, [], 0x81, "d5e2b485aca084"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fac0)={0x6, [], 0x8, "8b458d8b37b0ed"}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002140)=ANY=[@ANYBLOB="280000511004010000000000000000000000000005000000000000000c00008008000d00ac14140034b0924448d3d93bf65a224c9af36152729fae4f58615d9d759914bb1aececcfd468590703bbd119dcb37e33f36b2db5c506aeed7085472dc360a0cf3228f6231915a39a9df6b829edfdd902a93d56e1933f30d49a94"], 0x28}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r1, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000020c0)={0x3, 0x80, 0x4, 0x26, 0x6e, 0x5, 0x0, 0x40, 0x2040, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1f}, 0x0, 0x4, 0x7, 0x0, 0x3f, 0x8, 0x71, 0x0, 0x1ff, 0x0, 0x200}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$RTC_UIE_ON(r2, 0x7003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0c0583b, &(0x7f0000000080)) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000000)) 19:25:59 executing program 7: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080), 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYRES64=r0], &(0x7f0000000340)=""/110, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0)={0x0, 0x9695, 0x4, 0x40001}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r2, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x221}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) recvmmsg(r1, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000080)) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r3, &(0x7f0000000000), 0x5ac, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) 19:25:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$nl_xfrm(r2, 0x0, 0xc00c8cc) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="ec0000000400020027bd7000ffdbdf251b0000000d659e6165284378cabc626fa8be1cc2346f280294069a62e7863e7a31e5f1b2e7407dd3c7c0124b6e54171904a37842cdef3fd8bc2c008315dbfc02dde09ceb9292d8b36a6ca1abd244811fb148e3c3a348f455d1443034a7bfc5db45a4a19b4499972c0faa1b0045cbcd525ff78506198263116a4c51301d887c0836af839a42ffbbd5f63bf4addf9833e707226c624c0303a55a3c8994be3638d16ffc3883dd2642f74ff31a47976671be0ff9e834cbd331fd576b2ba5c9aa3cbe30b21ed30b2b2703615badc108007300ac1414bb0000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00802abd70004fcfc57602aab15e7e6d9889e178fcdb07250bf6ff000000"], 0x14}, 0x1, 0x0, 0x0, 0x48851}, 0x4008010) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 1423.589541] FAT-fs (loop2): bogus number of reserved sectors [ 1423.590056] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1423.590809] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1423.601516] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1423.601516] program syz-executor.6 not setting count and/or reply_len properly 19:25:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000100)="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") [ 1423.627424] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1423.627424] program syz-executor.6 not setting count and/or reply_len properly 19:25:59 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)=0x0, {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r1}}, 0x58) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) r5 = getpgid(r2) kcmp$KCMP_EPOLL_TFD(r5, 0xffffffffffffffff, 0x7, r0, &(0x7f00000000c0)={r4, r3, 0x8005}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) r9 = getpid() pidfd_open(r9, 0x0) mq_notify(r8, &(0x7f0000000140)={0x0, 0x23, 0x0, @tid=r9}) io_submit(r7, 0x1, &(0x7f0000000640)=[&(0x7f0000000180)={0x0, 0x0, 0x5, 0x1, 0x0, r6, &(0x7f0000000040)='\x00', 0x1}]) [ 1423.652298] FAT-fs (loop2): bogus number of reserved sectors [ 1423.653439] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1423.654934] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1423.656516] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:25:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x8, 0x9, 0x9, 0x6d0}, {0x1, 0xc, 0xfc, 0x8001}, {0x2, 0x2, 0xf8, 0x8}, {0x2, 0x3, 0x3, 0x347}, {0x400, 0x7, 0x0, 0x80ae}, {0x1, 0x5, 0x27, 0x1}, {0x2, 0x20, 0x6, 0x9}, {0x9, 0x1}, {0x2, 0xcb, 0xf3, 0x9}]}, 0x10) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:59 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x40087602, &(0x7f0000000880)) 19:25:59 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000203030000000000000000000300000608000100030000000900020000000002010000000030080001000000002608000340000000080800034000"/80], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000300)={0x101, 0xcdc4, 0xc90, 0x7, 0x3, 0x8}) timer_gettime(r1, &(0x7f0000000280)) timer_gettime(r1, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1423.714486] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1423.752372] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure 19:25:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="061dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:25:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:25:59 executing program 2: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0xff, 0x7d, 0x0, 0x0, 0x62, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x1ff, 0x7ff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/182) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000001e00)=""/102400) 19:25:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) writev(r1, &(0x7f0000001440)=[{&(0x7f0000000040)="dd4d2036098fa3bcca6b2b0c1c886f58eb49eafbf09c5a1a99d29c31831daf95f98859272f45ceb7939311edb8708865b468a5bb2f0403f755efc3e2563721c7b2fededcbac0bc567c04345d36f242c22ed0e5c01f8df8ca3666ccaa9d1f7ff3a14dbee0df761033d82bacbfc479d18f34c576781eedda5a2d863dc3122fe76b84d4c43323da77fbaaa42413bbc5c35f7c1a4493dc33b587835d23518c14738d217783ef817afe2f205c96872d9ed92be4bc9851879be6b2101d76", 0xbb}, {&(0x7f0000000180)="c0afedc17cb833a2c7a3e7a01b24859cb54432d62cd19f7fd5dd76be1fa43e2fe18a2c318ce4d4c26226707c654e40fd06a086d96cbe61c813dcb5b760f1ea9fba70a642944a4614307d49bbbb5d572f7018fc4595011dd598d009e922821a2829ce066df76a2abddf223682b63917c3d01592a5e12d4a5462f632b4e129cbf8e6d541062598fd08767329140335655671d9ced6797df9f7f4f3300bbbe943cc92a8e6faec3bccd5fd4532e1e350d62cb4f62807e2be2a1c1f88ad94f0f2f68c1bc8afd5a902def404a8c70c32a165012a22ec69116b9d05cbb7a5eb91294e63eec14a237facc3da9a1e576a0ccc4e571f131c5a5d0b9685", 0xf8}, {&(0x7f0000000280)="2ce66be7cec323fa661450d806297772b15f31c4cd9971f9b9f8e1e2f0f24a7f192f8e17101aaf0f57206bd654f6cda5fe044fae5039692aa1d5e2e050786d1852e35c045d70b1769169b9ac33aa519b13094f5ff355df47e210daa4bc99d26cfbd78d", 0x63}, {&(0x7f0000000300)="a17d9899f45965e55e19c24f317cf464bb9a482c567c22f6e22063d384ea651d96239a7ae8983561ff", 0x29}, {&(0x7f0000000340)="56c1ab73ce40bdb5f959d773fcc8e222c51a72124f26ee0c830c9db4be5f5c17d872b2247df1d0f6ddd826f09717ce12676d86c1ad7f812e1204f9d4b21cbf82a8637ef1d0315590d907e1eb59978aef88d886c8dc20ca46cc2b5a5b48bcd948c81c91261c9230e39f39bba4d1842315aaecce4bc060da3a3c81a6b93cce0febaae5b85df8e870df323eb26157fdaf757160ab391e45bded1cbc59eb9cefa32ceb53db6f97c954eafd9f8bdb792ac84f916422de5be1ae91565ddf8099caafda11fbdd88546d0ee2f05493e6ba6f117414481fa243", 0xd5}, {&(0x7f0000000440)="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", 0x1000}], 0x6) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x90c40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x5, 0x0, 0x80}, 0x0, 0x9, 0xffffffffffffffff, 0x1) fchmod(r0, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000014c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000001500)) r2 = syz_open_dev$evdev(&(0x7f0000001540), 0xfff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "72dfbd2f7dccfa8c76f39b7e02d1a025e56953bfcc7ded92480999c46a676ef2088e047a708d20f2bb9170f26b8f078531af6e616299b70c73255cf80501b4c65891c4f9dfe0db202699e033aae8810b479f5af97753f0795e65106f3af20d166a0f3391f993837137d8ac3f3c00b777de888d24471a70cd94973e7edd640cc5e1a5633104bb25dee18fa077338fcd48002939d3eb38168d5bb170c657d112bf96de2e9f8f7e2a95c698eeacbceebe00cc788df552ae559b28b8c4e0214b2277979f826cf7c9b9815ea68ee5b149e1b639ad9d45a8d858674ce7c7d45ccbe10fa3702229a2a827b1fcb6c0e0841c500cb620b12c10e4c7fd833ba94a2b959dc5", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000002e00)={r3, 0x522}) write$bt_hci(r0, 0x0, 0x6) [ 1423.832931] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1423.832931] program syz-executor.6 not setting count and/or reply_len properly 19:25:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, "2e0473", 0xb6, 0xe0}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1423.848826] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1423.848826] program syz-executor.6 not setting count and/or reply_len properly [ 1425.633494] Bluetooth: hci0: command 0x0c12 tx timeout [ 1427.681434] Bluetooth: hci0: command 0x0c12 tx timeout 19:26:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffbe, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:26:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x4020940d, &(0x7f0000000880)) 19:26:15 executing program 7: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x21000508}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739dd28962", 0x6) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x108000}) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}, @nested={0x8, 0xa, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, 0x24}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000001c0)={@mcast1, 0x7d}) sendfile(0xffffffffffffffff, r3, &(0x7f0000000100)=0x1, 0x9e6) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r4, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r5, &(0x7f0000002100)=""/4095, 0xfff, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2a}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 19:26:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) execveat(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='\'-^:&/\\,!])\x00'], &(0x7f00000005c0)=[&(0x7f0000000400)='io.pressure\x00', &(0x7f0000000440)='-!Z*\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='io.pressure\x00', &(0x7f0000000500)='/&:\x00', &(0x7f0000000540)='\xdf{[\x00', &(0x7f0000000580)='(-(+\x00'], 0x400) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r3) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@rc={0x1f, @none}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/157, 0x9d}], 0x1}, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000600)='\x00', &(0x7f0000000640)='./file1\x00', r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x107142, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0) r7 = signalfd(r1, &(0x7f0000000080)={[0x6]}, 0x8) io_uring_setup(0x25ce, &(0x7f0000000380)={0x0, 0x4496, 0x2, 0x0, 0xa4, 0x0, r7}) r8 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(r8, 0x4, 0x46c00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010080000100000018000000c94932ef36060650d466b2792f7831ad8570b40625ed11f52c1e3e509060ae7e442214b6b700000000b200"/67, @ANYBLOB="06000000000000002e2f66696c653100f7d78c0e834f625471198f857e60552b8609c083c8eec51df9636d93d12f4b38caa4041f88edac61994257b06b0ffb116cabcf8e34838ddd351440852d4058b0be97551fe0cc0e686acee542651f70cc82f57c0138b08028f73bf6fb182bdb9448122b96554a7c0b5521f8db9fb757c83cbe7906a8ad24726fa6477724a4aa6786c2450769203ed72a582274b9cbd4c40a09444ff07f3add7e3cb700"]) sendfile(r6, r3, 0x0, 0x7ffffff9) fallocate(r2, 0x0, 0x0, 0x8004) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 19:26:15 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="4d3527064eb464fec83493a1c03af25c0cf5aa89e1bec29b2b2bda81cc01c57cb56ad660c5", 0x25}, {&(0x7f0000000180)="7245fbf085fac6bd5795b06b0ae97f0f20b39253f42ddae2a764639ec8e0493b21ea2389f86fc0d1b08c36fa277e4c6457b56c4672d534af8ee3fd53a0c06f1933fc2b1a9743ce2faae675440cce573722c2b332f5bca87ef66ab920a9cea6d594db666dc471cb1c28322fb9074b1e24c63173c34fed29174cfd997b82d3ecc62a5807e7d14a88a5bd5926548a96bab934e988eda04aa8c0e79a3a1b59a897042ffb332ffa3377c683d0b6c53a02983f5f464a9d435e7ab50bfd8f6618dd100c6cf2fb68df0b74a0532c344ec2721655", 0xd0}, {&(0x7f0000000280)="a400d3fe729a9095e1d420906164c033d8", 0x11}], 0x3, 0x3, 0x0, 0x5) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="07af43315e278bc0dc102e98311bb200002470bbbbbbbbbbbb000d00000000000000007bc74f84dbc157914cd8c864a1be9eedbf84c7959dd76445502e8debf42a1f820f5fe25e762e614b3d9ae47ca38e68"], 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f00000007c0)=""/211, 0xd3}], 0x3, &(0x7f00000008c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x20) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000d00)={{'\x00', 0x2}, {0xffffffff80000000}, 0xa, 0x0, 0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)="d29ffdf49b6d5546b48764bd270331cbdf60cbb6601815fbf6f395c9f1dd11d90521d172840db64f0f66c064c2d80d6df8359b27613f21c48fde3321c66d337fda175004c936c5a6d1760ff31d5d98a29553702eb0d4850711a5d15cfa7c31922f0663f8aecc93eee2f56696e5881e3a880c7d1e8b627a54ef3fe7c035cd7568c7963bb6c013e974bfa0892d6c04beaf772fa8c92130e8dc4e0a98f59de2679b2b2fdcf127ec63cffe563fa6f6da704258bbadab1afa77b64e7cba4f451c49ca6a6d9501b6b615338fe24045d4867c17d0711673a68916767570c7187af3374f382b525fdf49531f3b2c584717d864", 0xef, 0x0, &(0x7f0000000ac0)={0x2, 0x15d, {0x1, 0xc, 0x84, "a576846104d335706fdad4373d53e2b8f289120119c9259297e4bd71d72353147edb0168361d1d125f9c783827bce71e5b4fe26532fe536eef4118c6fd8c2272fad953b8e5ee75a1f233f7c0ac9f688ee66b1c8f1cb21bb1cec27da200a8402eac23d612e8b82ba01f7ef0248343a60152da21797d3e9afc7d9ce5d7b2785c4fba4bebb9", 0xcc, "af58d854cd973de8c623259155b1f11c84b8535d0ab45174a7748be92e4faa50cf4c49bd536b638826495f6fd7e43215c559924167265c941cf689c22d0a23610f1affbce50cbdc7a17d46fceb9eb7cd89d62d72353b90ee3d644bdabb7ec582c27ea6bc0f1f429695b06691b2794c421624518c38b01ea4e2efd0826bbd2b3f06c3a469f2adc15e7fbef51a9f2fb55031fe966728b48fe007083a8f8a40f7b79cdaeafd7d7262235bbcf64e7e5ce774ff56348bc2a2e5af3fe0422c3e57ceff5dc0523deca2bf4e029fc3e4"}, 0xa4, "1d9f9815749230ec5c1af4ae426dcfd9b620e3e7912e8d340218be3c24a0b9a004c6c905a5405062a991faf510b89a853c564c07f4b2380d39f19920de987f0d7f8c002f33f0a5d26173ae6cf49ba049ce4eb4264da6ce396426faae8630ba8a492681627b4f204c19301c152c54d56ecaba3400e29fbf85b2be0e70e6c8aaee40f0d777e196f89ccdd0b0153ce785190abb8b394e5d1bff5dc0d619b25673b01ca8ea5e"}, 0x20d}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00'}) write$tun(r2, &(0x7f0000000600)={@void, @void, @ipv6=@gre_packet={0x0, 0x6, "28a859", 0x184, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, {[@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@private0, @remote, @local, @remote]}, @srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@dev, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @empty, @mcast2, @loopback]}, @hopopts={0x0, 0x1, '\x00', [@generic, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim]}, @routing={0x0, 0xc, 0x0, 0x0, 0x0, [@private0, @dev={0xfe, 0x80, '\x00', 0x1}, @private0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}]}}}, 0x1ac) syz_emit_ethernet(0x6f, &(0x7f0000000300)={@empty, @random="261cc46d165b", @void, {@x25={0x805, {0x3, 0x4, 0x23, "615dcb345ad0ec3ff7fc79370c798b63ec0601013205103c1c961068ee18b495ad9384a9ab8544a30ce044115b3269e121283b8797fe5dfb9fd98ef26ecf7e22fe0f6bafe801fb110cde8e6812cafeb5f27b9f28c5eac631c85cbb7787b4"}}}}, &(0x7f0000000380)={0x0, 0x4, [0x452, 0x2ac, 0x6bd, 0x886]}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x101880, 0x18) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x8) 19:26:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x40, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) fallocate(r0, 0x38, 0x3, 0x401) 19:26:15 executing program 5: syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x2004040004, 0xaaaaaaaaaaaae38, &(0x7f0000000400)=[{&(0x7f00000001c0)="18c697b088021277eb2518d1d81fd61724d47911e5028000bfdff3", 0x1b, 0x2}, {&(0x7f0000000200)="008dfad5c21a34f6d0710cf61e024668239d02cc7ffab5fe6950", 0x1a, 0x3}, {&(0x7f0000000240), 0x0, 0x7ff}, {&(0x7f0000000280)="af41a8b8044a212132557f5ed7a16254e147b5947f8eed237bd9ec3fa49741f6cf40df59b604108f874f3f93421dc381a5ca0bfda76e671a7fca17d441d71245ef74d89a692a509d75f6b8d1a028a1f6d93da119699681f89835321cf5e1a2b9983463858577b06736d8c25cf49ae0b317dc95a212f5d33920e3ea6be2c4869d9535a728227e21c3c0c1b8fbbee39d4d2ea65edc85c3f5363da2a74c3dde643e4a8724215794ae79f2d41a14849f32ebc4753f1cf3b83b909832130d026cedb4f4adf80dab9ff35f57a7ca557adb43426caddf4083e1332f2978f485527bc70f0df718a3b704dfb456c06c54a1", 0xed, 0x401}, {&(0x7f0000000380)="1ffb675c06f925dc8d0bfa962f4fea7dd5a702ecf72a31761b066cee70d12bf7a4fe0a88f087d57b8bc954e6488db4c0d3251d4bd5b50b2514a516fa90bf65ce913f15b4b0c009e441552f3f39bf8bc9bf339f05b68200402b9dec07bc26ce9e583bc08baac2364fa49a6a5129d6326cb1ca2c9218f9", 0x76, 0x2}], 0x880000, &(0x7f00000000c0)=ANY=[@ANYBLOB="66ff0400d71f404537facffcc8cb807d63202a50e00b188d2e862c618176a12392ad996eb38e2250cb8586eb6b2cfe548ba618484d33342eea2315b40a64af7bf87478eb3418021b4833fae3c6b8aee6e71813e6ced62768adecd61a7e9e7e405336d210dfd3f3b913ea4e0c267f01a6a0ff5e72cf2e50db02577f2d89f2a780db437bf4fc6c3d7d48464c217848b19479926ca9c33134436d95a72f9432c6a6574d744f95326aeebbf448c8afe203f83fefff348047c01683621a2aa36c789412a7925db3563bb8ad2e5e9efbe037025d5499bf8ace5d8b55ceb99bf568075ef86f803f6417c436f7"]) open(&(0x7f0000000000)='./file0\x00', 0x40a800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200, 0x116) 19:26:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="071dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1439.488070] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1439.488070] program syz-executor.6 not setting count and/or reply_len properly 19:26:15 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x10, 0xffffffffffffffff, 0x8000000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) pipe2(&(0x7f0000000180), 0x80800) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r1, 0x0, &(0x7f00000000c0)="09d1fa98ea0cc8ddec4c5ea6c8ea6a4f9aceb297999f0168046cd83c143fa50ef3bd39d993072dbdc93ce7253c7a40ebeb8a7dd5358c64dc1f0108d52b0eef805b54cffad3421d6586ad8c51a9fba79e4a7d06d642be24a2621817569148bed0fe77ab750ff17434aba26d816c3a0d449a079e7a179c0ee7c42b45d32140f5e3b0e36c9598b9c2e220520cbf390472e6ae9a", 0x92, 0x40010122, 0x1, {0x0, r2}}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000080)={0x3, 0x1000, '\"/I', 0x3, 0x5}) bind$bt_hci(r3, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r3, 0x800448d7, &(0x7f0000000880)) 19:26:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = timerfd_create(0x7, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xfffffffffffffff8) 19:26:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000880)) 19:26:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000880)) [ 1441.697483] Bluetooth: hci3: command 0x0401 tx timeout [ 1445.154406] Bluetooth: hci0: command 0x0409 tx timeout [ 1447.201487] Bluetooth: hci0: command 0x041b tx timeout [ 1449.249414] Bluetooth: hci0: command 0x040f tx timeout [ 1449.824966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.827143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.833643] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1449.865298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.867033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.869519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1451.298357] Bluetooth: hci0: command 0x0419 tx timeout [ 1452.065400] Bluetooth: hci3: command 0x0401 tx timeout [ 1454.114397] Bluetooth: hci3: command 0x0401 tx timeout 19:26:40 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x4000, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r3, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0) ioctl$CDROMREADAUDIO(r4, 0x530e, &(0x7f0000000ac0)={@msf, 0x1, 0x1, &(0x7f0000000a80)=""/1}) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 19:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x4, "cafdfd", 0x67, 0x8f}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:26:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000880)) 19:26:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000400"/232]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000100000003000000030000000220"]}) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000002c0)=""/182, &(0x7f0000000200)=0xb6) dup(0xffffffffffffffff) unshare(0x48020200) [ 1464.618948] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1464.618948] program syz-executor.6 not setting count and/or reply_len properly 19:26:40 executing program 7: sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x100}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000031c0)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @mcast2}, 0x1c) 19:26:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000880)) 19:26:40 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xff) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5d0, 0x2a0201) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x47c0}}, 0x0, 0xffffffffffffffff, r1, 0x0) getrandom(0x0, 0x0, 0x0) shutdown(r0, 0x1) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) unshare(0x48020200) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="e4a976daee868aa4a82216ed0554a8095970ae5531a4bf9540fc58a7f8e6634bda97e8248db4dee89d72f014f35ec91691828147478fc4b63877b499959210f195cf3325ec21093bb68a3582d7536f217d9e9df7241b910010000000c2000000000000008599af6afa660d419f6c1a3323cf206ad9de765029b51df03f9499e5"], 0x1c}}, 0x0) 19:26:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="081dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1464.643014] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1464.643014] program syz-executor.6 not setting count and/or reply_len properly 19:26:40 executing program 7: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="d65a0000000039002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 19:26:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x803, 0x4}, 0xc) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) clone3(&(0x7f0000000340)={0x208000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/77, 0x4d, &(0x7f0000000280)=""/98, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) write$P9_RREADDIR(r2, &(0x7f00000000c0)={0xb, 0x29, 0x1, {0x6}}, 0xb) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x3, 0x9, '=^@', 0xfd, 0x3e}) mount(&(0x7f0000000100)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ext3\x00', 0x400, &(0x7f00000003c0)='\x00') 19:26:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:26:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="091dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:26:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000040)={{0x9, 0x9}, 0x100, './file0\x00'}) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1464.792615] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1464.792615] program syz-executor.6 not setting count and/or reply_len properly 19:26:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) creat(&(0x7f0000000040)='./file0\x00', 0x20) 19:26:40 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000880)) [ 1464.823236] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1464.823236] program syz-executor.6 not setting count and/or reply_len properly 19:26:40 executing program 5: ftruncate(0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x20044000) r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r2, 0x52, 0x64}, &(0x7f0000000600)=ANY=[@ANYBLOB="656e633d6f616570206861736b6532732d3132382d78383600000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000e5aca1101bcc753ae462ede3fe90ffdf30344bba1195061a0689f5bd94862302"], &(0x7f0000000280)="5d73449c19fe117891c00e6e17777f21b1fb2057ad2f2c82d2af8583ffdf549d1af9d1b0f60bd44bdd68596eaa5e7bbfe5371e88b50503c5d7950fe172aa94b9fafb9a2549e98f4378dc651ea93b64a13741", &(0x7f0000000580)=""/100) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={0x0, 0x88, 0x64}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000400)="17ef668a7e2564a6b7a272148f3482105c62bda927aa2254b5402328ad1652388da2b0031144142ab24716822e5daa1463e3504947f326430694a5a4088a018b88b066c91240e9666415a7b44dcefae06509acdb96219c34fcd727886b940b94af65bf7335f0434340510e3b49f816c05d5e950a2ddbdf95c0c171efbf8b9040e9816499a485e120", &(0x7f0000000680)="1f8f2ca318d2bc90169a98cab005d1366c3c67ac92a0365fbef580fef6e693e2dc202eb23b4331e8fd295b9c758e11a1a80fce1ad3118e6a8f5b3cb631c404f1cbbad873afa7b90138a80a12343cb66002f20ef4d1f6f84927fe5d66cedcd7ca2298c8da") keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x90}, &(0x7f0000000700)={'enc=', 'pkcs1', ' hash=', {'poly1305-neon\x00'}}, &(0x7f0000000300), &(0x7f0000000780)="568cf5d78305d554cdcac8c8ac88c70e36208d82099c25e102f094ec206271a9f95eb9464966458f0e9db705f10c375ee70ae18605756adebe938cb3a105838a76d8d43202f611db2b2ed91f38010a1c1a8768a48f673406d35e8e6a977840604d4683d2f1128dd4414c7f2f8772932bcfe3e24be40eeb8ed4b0119ac94f66ebb815eec91480c7befdef62f86c29ad9a") 19:26:40 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) stat(&(0x7f0000000080)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f0000001340)='./file0\x00', r2, &(0x7f0000001380)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x127023, &(0x7f0000000240)={[{@gid}], [{@euid_eq={'euid', 0x3d, r2}}, {@appraise_type}, {@appraise_type}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xa0b) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRESHEX], 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x48810) close(0xffffffffffffffff) openat(r1, &(0x7f0000000180)='./file0\x00', 0x4a8a80, 0x2) [ 1465.633351] Bluetooth: hci5: command 0x0406 tx timeout [ 1466.849445] Bluetooth: hci0: command 0x0401 tx timeout [ 1468.898266] Bluetooth: hci0: command 0x0401 tx timeout 19:26:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01750c01f8dff9d3556452a977be107327c445cbba4aa9502df49f431649ca40ff00000000040000f33b8bc3fe7ec96431f85e8b88b9ca994fec21d0fcc8b6898088c0688a249d369ea09a2f"], 0x5) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)="b5487589acfc5833e1b32054a62abc693b1502606bd30c77435587e39f0ae34a371d26124a58e1592b6da967edd45d89ee226c4dc6fccff334391b210506836d29926329c9fd3a55bc9c94892f71b7c0c4a0c20f19a72d44133c5b84d1621887495ad99030dedd8ca3cc0de88e925ad6dcec43d5ff3ed7210b496a61dca439d4a03a03d49d7f5097c071580955") ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000880)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd=r1, 0x2, &(0x7f0000000140)=""/165, 0xa5, 0x18}, 0x23) 19:26:53 executing program 5: syz_emit_ethernet(0x56, &(0x7f0000000480)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x20, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@dstopts={0x3a}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @ipv6=@icmpv6={0x4, 0x6, "b5725d", 0x1e1, 0x3a, 0x1, @mcast2, @empty, {[@hopopts={0x62, 0xa, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0xe, "29c68edf07f670a295e66b8ba97c"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x3, [0x9, 0x20, 0x7, 0x2, 0xffffffff]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}]}, @fragment={0x3a, 0x0, 0x4, 0x1, 0x0, 0x1, 0x64}, @dstopts={0x2f, 0x1, '\x00', [@ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xc0000000}]}, @srh={0x5c, 0xa, 0x4, 0x5, 0xff, 0x50, 0x80, [@mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @dev={0xfe, 0x80, '\x00', 0xf}]}, @srh={0x0, 0x14, 0x4, 0xa, 0x0, 0x20, 0x366a, [@remote, @dev={0xfe, 0x80, '\x00', 0x32}, @remote, @local, @local, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}, @fragment={0x89, 0x0, 0x49, 0x1, 0x0, 0x3, 0x66}], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @mcast2, [{0x1, 0x7, "483992f8628d2abbff9c049ea70cd9bb1e72b161a45adf2de7262efda8bbf77bfc6835ea4f39b57c1a641c871fb41ec8b526eb51f28e020c9a96f00d6f"}, {0x4}]}}}}, 0x209) 19:26:53 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000080), 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f00000011c0)={0x946a, 0x3, 0x2, 0x10001, 0x8}) r4 = timerfd_create(0x7, 0x0) timerfd_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000080), 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000010c0), 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) ppoll(&(0x7f0000001100)=[{r2, 0x2180}, {r3, 0x8080}, {r4, 0xc6}, {r1, 0x2201}, {r0, 0x4000}, {r5, 0x2228}, {r1, 0x2100}], 0x7, &(0x7f0000001180)={r6, r7+10000000}, &(0x7f0000001200)={[0x400]}, 0x8) 19:26:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa0, 0x0, 0x305, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x800, @rand_addr=' \x01\x00', 0x80000001}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x100, 0x2}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0xf6, "8934001ba52b718b5f03a704bbfb3df56715b09b6734893650d5a1c4045171a5f0cc2165f828b2568058c64aeb0f15e06d9964354d145f21de2256ed667fc546c336f6e5e446cd8a710af59890a0b455c1e0966c4f7c51eefa39cf2c44028e492a88965655ea8fae8b0a2628f731ad89fc533e9d07ef86444c7fcd31c31415707e5f66894bc6d6b70f6d630fa7184d6295a5bcde9701de40ab58106a99b62309a903f017fb592297bd8d8a08ab292aa79877075e2649417add47a67a4ccf7f65e651ded8f7f18a963f7d942782b2076c062e4b62643f25c27a94ef35c28218c3cd02b795cf3e9aaedd7ef1dd7b5096c60ddf637d678b"}, &(0x7f0000000040)=0x11a) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0xc, @loopback, 0x4e20, 0x4, 'lc\x00', 0x2, 0x48, 0x37}, {@private=0xa010101, 0x4e20, 0x0, 0x8001, 0x1, 0x9}}, 0x44) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 19:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80086601, &(0x7f0000000880)) 19:26:53 executing program 4: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="04914c9f1700d7d357dd7d8dbb4747c945de67e0117bdb94035aca2a2bc2dd1cf87785986fe7d279f1e4a2c35455aac953d3f9f625", @ANYBLOB]) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000880)=@rc={0x1f, @none}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1}, 0x2) syz_open_procfs(0x0, 0x0) rt_sigaction(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x20, 0x1, 0x7f, 0x7, 0x0, 0x4, 0x20282, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x53, 0x2, @perf_config_ext={0x9, 0x3}, 0x10, 0x122534ec, 0x0, 0x8, 0x100000000, 0x3, 0x7, 0x0, 0x8, 0x0, 0xbb5f}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xff, 0x2, 0x3f, 0x9, 0x0, 0x0, 0x11005, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x1f}, 0x10000, 0x3, 0x40, 0x0, 0x7, 0x200, 0x1, 0x0, 0x1f, 0x0, 0x1}, 0xffffffffffffffff, 0x7, r1, 0x2) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x1, {0x24, 0x24, 0x1, 0x3, 0x2, 0xfe2d, 0x0, 0x1d, 0x1}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) unshare(0x48020200) 19:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) r1 = timerfd_create(0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000080), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) 19:26:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0d1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1477.837686] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1477.841844] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1477.868931] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1477.872172] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1477.872172] program syz-executor.6 not setting count and/or reply_len properly [ 1477.883222] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) 19:26:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80087601, &(0x7f0000000880)) 19:26:53 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = dup(r0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x23, 0x5, 0x6, 0x0, 0xffffffff, 0x64, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000, 0x80}, 0x41002, 0x7ff, 0x4, 0x1, 0x4, 0xfffffffe, 0xb22, 0x0, 0x9, 0x0, 0xf2}, 0x0, 0xa, r1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r3, 0x0, 0xb) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x5, 0x3, 0xff, 0x7, 0x0, 0x6, 0x8000, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x220a0, 0x28, 0x1, 0x5, 0x6, 0x2, 0x58, 0x0, 0xf574, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r2, &(0x7f00000003c0)=""/4096, 0x1000, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x125342, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xce) r6 = dup2(r5, r4) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"/467, @ANYRES16]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r7, r6, 0x0, 0x7ffffff9) 19:26:53 executing program 7: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_setup(0x3558, &(0x7f0000000100)={0x0, 0x6571, 0x20, 0x1, 0x49, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x4000007ffffffc) [ 1477.927996] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) [ 1477.934981] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1477.934981] program syz-executor.6 not setting count and/or reply_len properly [ 1477.964378] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 3556981408 (only 16 groups) 19:26:53 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x0, "f12117", 0x1, 0x9}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="9009427005e250cfeb1cb929b879d8b0123fb1aae002f2059e08d4bc172615934a225a5d9ad7357a0c689ba30a6878e59c8baddfa377a5816f172d01ea6bd330d19b116b423b8a3cbc991dc0dce3b4d27a99d1cc17f7a2463e0cf8d96d5e543889130fe190266c37f500ccea7a32eacdd9ab2c751f6f83") ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) [ 1478.025325] [ 1478.025629] ====================================================== [ 1478.026519] WARNING: possible circular locking dependency detected [ 1478.027416] 5.10.209 #1 Not tainted [ 1478.027931] ------------------------------------------------------ [ 1478.028854] syz-executor.2/11927 is trying to acquire lock: [ 1478.029661] ffff88801ad60b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1478.031153] [ 1478.031153] but task is already holding lock: [ 1478.031998] ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1478.033282] [ 1478.033282] which lock already depends on the new lock. [ 1478.033282] [ 1478.034449] [ 1478.034449] the existing dependency chain (in reverse order) is: [ 1478.035517] [ 1478.035517] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1478.036494] __mutex_lock+0x13d/0x10b0 [ 1478.037132] rfkill_register+0x36/0xa10 [ 1478.037778] hci_register_dev+0x42e/0xc00 [ 1478.038448] __vhci_create_device+0x2c8/0x5c0 [ 1478.039167] vhci_open_timeout+0x38/0x50 [ 1478.039825] process_one_work+0x9a9/0x14b0 [ 1478.040517] worker_thread+0x61d/0x1310 [ 1478.041406] kthread+0x38f/0x470 [ 1478.041922] selinux_netlink_send: 28 callbacks suppressed [ 1478.041946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35144 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.045485] ret_from_fork+0x22/0x30 [ 1478.045490] [ 1478.045490] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1478.045526] __mutex_lock+0x13d/0x10b0 [ 1478.045542] vhci_send_frame+0x63/0xa0 [ 1478.045558] hci_send_frame+0x1b9/0x320 [ 1478.045578] hci_tx_work+0x10af/0x1660 [ 1478.052233] process_one_work+0x9a9/0x14b0 [ 1478.052920] worker_thread+0x61d/0x1310 [ 1478.053561] kthread+0x38f/0x470 [ 1478.054119] ret_from_fork+0x22/0x30 [ 1478.054712] [ 1478.054712] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1478.055838] __flush_work+0x105/0xa90 [ 1478.056463] hci_dev_do_close+0x131/0x1240 [ 1478.057136] hci_unregister_dev+0x149/0x430 [ 1478.057823] vhci_release+0x70/0xf0 [ 1478.058417] __fput+0x285/0x980 [ 1478.058962] task_work_run+0xe2/0x1a0 [ 1478.059573] do_exit+0xb6f/0x2600 [ 1478.060140] do_group_exit+0x125/0x310 [ 1478.060777] __x64_sys_exit_group+0x3a/0x50 [ 1478.061467] do_syscall_64+0x33/0x40 [ 1478.062069] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1478.062865] [ 1478.062865] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1478.063771] __mutex_lock+0x13d/0x10b0 [ 1478.064410] bg_scan_update+0x82/0x500 [ 1478.065037] process_one_work+0x9a9/0x14b0 [ 1478.065760] worker_thread+0x61d/0x1310 [ 1478.066402] kthread+0x38f/0x470 [ 1478.066957] ret_from_fork+0x22/0x30 [ 1478.067553] [ 1478.067553] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1478.068777] __lock_acquire+0x29e7/0x5b00 [ 1478.069444] lock_acquire+0x197/0x470 [ 1478.070061] __flush_work+0x105/0xa90 [ 1478.070684] __cancel_work_timer+0x368/0x4c0 [ 1478.071387] hci_request_cancel_all+0x73/0x230 [ 1478.072109] hci_dev_do_close+0xd9/0x1240 [ 1478.072783] hci_rfkill_set_block+0x166/0x1a0 [ 1478.073496] rfkill_set_block+0x1fd/0x540 [ 1478.074162] rfkill_fop_write+0x253/0x4b0 [ 1478.074827] vfs_write+0x29a/0xa70 [ 1478.075410] ksys_write+0x1f6/0x260 [ 1478.076005] do_syscall_64+0x33/0x40 [ 1478.076626] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1478.077426] [ 1478.077426] other info that might help us debug this: [ 1478.077426] [ 1478.078563] Chain exists of: [ 1478.078563] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1478.078563] [ 1478.080504] Possible unsafe locking scenario: [ 1478.080504] [ 1478.081350] CPU0 CPU1 [ 1478.082005] ---- ---- [ 1478.082660] lock(rfkill_global_mutex); [ 1478.083247] lock(&data->open_mutex); [ 1478.084155] lock(rfkill_global_mutex); [ 1478.085093] lock((work_completion)(&hdev->bg_scan_update)); [ 1478.085930] [ 1478.085930] *** DEADLOCK *** [ 1478.085930] [ 1478.086795] 1 lock held by syz-executor.2/11927: [ 1478.086962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34247 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.087496] #0: ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1478.090770] [ 1478.090770] stack backtrace: [ 1478.091425] CPU: 1 PID: 11927 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 1478.092416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1478.093596] Call Trace: [ 1478.093979] dump_stack+0x107/0x167 [ 1478.094508] check_noncircular+0x263/0x2e0 [ 1478.095119] ? register_lock_class+0xbb/0x17b0 [ 1478.095778] ? print_circular_bug+0x470/0x470 [ 1478.096438] ? find_first_zero_bit+0x94/0xb0 [ 1478.097077] ? alloc_chain_hlocks+0x342/0x5a0 [ 1478.097726] __lock_acquire+0x29e7/0x5b00 [ 1478.098336] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1478.099088] ? SOFTIRQ_verbose+0x10/0x10 [ 1478.099677] ? __lockdep_reset_lock+0x180/0x180 [ 1478.100058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53893 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.100350] ? mark_lock+0xf5/0x2df0 [ 1478.100371] lock_acquire+0x197/0x470 [ 1478.100392] ? __flush_work+0xdd/0xa90 [ 1478.103789] ? lock_release+0x680/0x680 [ 1478.104370] ? __flush_work+0x78c/0xa90 [ 1478.104945] ? lock_downgrade+0x6d0/0x6d0 [ 1478.105551] __flush_work+0x105/0xa90 [ 1478.106100] ? __flush_work+0xdd/0xa90 [ 1478.106660] ? lock_chain_count+0x20/0x20 [ 1478.107261] ? queue_delayed_work_on+0xe0/0xe0 [ 1478.107921] ? mark_lock+0xf5/0x2df0 [ 1478.108468] ? mark_lock+0xf5/0x2df0 [ 1478.109006] ? lock_chain_count+0x20/0x20 [ 1478.109603] ? perf_trace_lock+0xac/0x490 [ 1478.109620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53481 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.111935] ? lock_chain_count+0x20/0x20 [ 1478.112547] ? mark_held_locks+0x9e/0xe0 [ 1478.113140] __cancel_work_timer+0x368/0x4c0 [ 1478.113773] ? cancel_delayed_work+0x20/0x20 [ 1478.114411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.115163] ? __cancel_work+0x250/0x2b0 [ 1478.115744] ? trace_hardirqs_on+0x5b/0x180 [ 1478.116372] ? __cancel_work+0x1bb/0x2b0 [ 1478.116960] ? try_to_grab_pending+0xe0/0xe0 [ 1478.117602] hci_request_cancel_all+0x73/0x230 [ 1478.118259] hci_dev_do_close+0xd9/0x1240 [ 1478.118856] ? rfkill_set_block+0x18f/0x540 [ 1478.119475] ? hci_dev_open+0x350/0x350 [ 1478.120048] ? mark_held_locks+0x9e/0xe0 [ 1478.120644] hci_rfkill_set_block+0x166/0x1a0 [ 1478.121287] ? hci_power_off+0x20/0x20 [ 1478.121848] rfkill_set_block+0x1fd/0x540 [ 1478.122447] rfkill_fop_write+0x253/0x4b0 [ 1478.123043] ? rfkill_sync_work+0xa0/0xa0 [ 1478.123642] ? security_file_permission+0x24e/0x570 [ 1478.124371] ? rfkill_sync_work+0xa0/0xa0 [ 1478.124970] vfs_write+0x29a/0xa70 [ 1478.125490] ksys_write+0x1f6/0x260 [ 1478.126016] ? __ia32_sys_read+0xb0/0xb0 [ 1478.126604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1478.127358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1478.128104] do_syscall_64+0x33/0x40 [ 1478.128645] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1478.129380] RIP: 0033:0x7f943ededb19 [ 1478.129918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1478.132552] RSP: 002b:00007f943c363188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1478.133640] RAX: ffffffffffffffda RBX: 00007f943ef00f60 RCX: 00007f943ededb19 [ 1478.134661] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000008 [ 1478.135679] RBP: 00007f943ee47f6d R08: 0000000000000000 R09: 0000000000000000 [ 1478.136707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1478.137727] R13: 00007fffe29136bf R14: 00007f943c363300 R15: 0000000000022000 19:26:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @user_confirm_reply={{0x42c, 0x6}}}, 0xa) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000880)) 19:26:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x80108906, &(0x7f0000000880)) 19:26:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="0e1dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) [ 1478.201268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35656 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.245461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.290131] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33608 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.313548] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1478.313548] program syz-executor.6 not setting count and/or reply_len properly [ 1478.323164] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35140 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.402182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.404192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=11943 comm=syz-executor.7 [ 1478.728143] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 256 (only 16 groups) VM DIAGNOSIS: 19:26:54 Registers: info registers vcpu 0 RAX=0000000000014320 RBX=0000000000000001 RCX=ffffc90000a9f000 RDX=0000000000040000 RSI=ffffffff81299dc1 RDI=0000000000000001 RBP=0000000000000200 RSP=ffff8880488e7328 R8 =0000000000000000 R9 =ffffffff856727cf R10=0000000000000000 R11=0000000000000001 R12=000000000000007c R13=0000000000000216 R14=ffff88804de0b480 R15=0000000000000000 RIP=ffffffff81299dc3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f16b8089700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2c523000 CR3=0000000017c14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822cbe31 RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88804d77f1d0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000034 R13=0000000000000034 R14=ffffffff879e8200 R15=dffffc0000000000 RIP=ffffffff822cbe88 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f943c363700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055e6f602f960 CR3=000000004ebe4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000