Warning: Permanently added '[localhost]:46396' (ECDSA) to the list of known hosts. 2025/09/01 11:51:10 fuzzer started 2025/09/01 11:51:11 dialing manager at localhost:35473 syzkaller login: [ 50.557668] cgroup: Unknown subsys name 'net' [ 50.616638] cgroup: Unknown subsys name 'cpuset' [ 50.629510] cgroup: Unknown subsys name 'rlimit' 2025/09/01 11:51:21 syscalls: 2214 2025/09/01 11:51:21 code coverage: enabled 2025/09/01 11:51:21 comparison tracing: enabled 2025/09/01 11:51:21 extra coverage: enabled 2025/09/01 11:51:21 setuid sandbox: enabled 2025/09/01 11:51:21 namespace sandbox: enabled 2025/09/01 11:51:21 Android sandbox: enabled 2025/09/01 11:51:21 fault injection: enabled 2025/09/01 11:51:21 leak checking: enabled 2025/09/01 11:51:21 net packet injection: enabled 2025/09/01 11:51:21 net device setup: enabled 2025/09/01 11:51:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/09/01 11:51:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/09/01 11:51:21 USB emulation: enabled 2025/09/01 11:51:21 hci packet injection: enabled 2025/09/01 11:51:21 wifi device emulation: enabled 2025/09/01 11:51:21 802.15.4 emulation: enabled 2025/09/01 11:51:21 fetching corpus: 0, signal 0/2000 (executing program) 2025/09/01 11:51:21 fetching corpus: 50, signal 26960/30387 (executing program) 2025/09/01 11:51:21 fetching corpus: 100, signal 39581/44342 (executing program) 2025/09/01 11:51:21 fetching corpus: 150, signal 44232/50392 (executing program) 2025/09/01 11:51:21 fetching corpus: 200, signal 48367/55818 (executing program) 2025/09/01 11:51:21 fetching corpus: 250, signal 54444/62964 (executing program) 2025/09/01 11:51:22 fetching corpus: 300, signal 59373/68933 (executing program) 2025/09/01 11:51:22 fetching corpus: 350, signal 63494/74070 (executing program) 2025/09/01 11:51:22 fetching corpus: 400, signal 66531/78136 (executing program) 2025/09/01 11:51:22 fetching corpus: 450, signal 69483/82139 (executing program) 2025/09/01 11:51:22 fetching corpus: 500, signal 71946/85602 (executing program) 2025/09/01 11:51:22 fetching corpus: 550, signal 74119/88792 (executing program) 2025/09/01 11:51:22 fetching corpus: 600, signal 76928/92505 (executing program) 2025/09/01 11:51:22 fetching corpus: 650, signal 79801/96166 (executing program) 2025/09/01 11:51:22 fetching corpus: 700, signal 82069/99243 (executing program) 2025/09/01 11:51:22 fetching corpus: 750, signal 84452/102379 (executing program) 2025/09/01 11:51:22 fetching corpus: 800, signal 86398/105107 (executing program) 2025/09/01 11:51:22 fetching corpus: 850, signal 88179/107674 (executing program) 2025/09/01 11:51:22 fetching corpus: 900, signal 89887/110096 (executing program) 2025/09/01 11:51:23 fetching corpus: 950, signal 92188/113010 (executing program) 2025/09/01 11:51:23 fetching corpus: 1000, signal 94513/115899 (executing program) 2025/09/01 11:51:23 fetching corpus: 1050, signal 96035/118130 (executing program) 2025/09/01 11:51:23 fetching corpus: 1100, signal 97145/120016 (executing program) 2025/09/01 11:51:23 fetching corpus: 1150, signal 98960/122389 (executing program) 2025/09/01 11:51:23 fetching corpus: 1200, signal 101952/125593 (executing program) 2025/09/01 11:51:23 fetching corpus: 1250, signal 103429/127623 (executing program) 2025/09/01 11:51:23 fetching corpus: 1300, signal 104758/129497 (executing program) 2025/09/01 11:51:23 fetching corpus: 1350, signal 106658/131751 (executing program) 2025/09/01 11:51:23 fetching corpus: 1400, signal 108306/133779 (executing program) 2025/09/01 11:51:23 fetching corpus: 1450, signal 109188/135252 (executing program) 2025/09/01 11:51:24 fetching corpus: 1500, signal 110162/136744 (executing program) 2025/09/01 11:51:24 fetching corpus: 1550, signal 111832/138726 (executing program) 2025/09/01 11:51:24 fetching corpus: 1600, signal 113387/140636 (executing program) 2025/09/01 11:51:24 fetching corpus: 1650, signal 117476/144123 (executing program) 2025/09/01 11:51:24 fetching corpus: 1700, signal 118959/145822 (executing program) 2025/09/01 11:51:24 fetching corpus: 1750, signal 120108/147347 (executing program) 2025/09/01 11:51:24 fetching corpus: 1800, signal 121115/148749 (executing program) 2025/09/01 11:51:24 fetching corpus: 1850, signal 122111/150049 (executing program) 2025/09/01 11:51:24 fetching corpus: 1900, signal 122765/151165 (executing program) 2025/09/01 11:51:24 fetching corpus: 1950, signal 123938/152590 (executing program) 2025/09/01 11:51:25 fetching corpus: 2000, signal 124865/153850 (executing program) 2025/09/01 11:51:25 fetching corpus: 2050, signal 125983/155211 (executing program) 2025/09/01 11:51:25 fetching corpus: 2100, signal 126734/156330 (executing program) 2025/09/01 11:51:25 fetching corpus: 2150, signal 127893/157642 (executing program) 2025/09/01 11:51:25 fetching corpus: 2200, signal 128773/158802 (executing program) 2025/09/01 11:51:25 fetching corpus: 2250, signal 129724/160039 (executing program) 2025/09/01 11:51:25 fetching corpus: 2300, signal 130685/161209 (executing program) 2025/09/01 11:51:25 fetching corpus: 2350, signal 131495/162256 (executing program) 2025/09/01 11:51:25 fetching corpus: 2400, signal 132667/163532 (executing program) 2025/09/01 11:51:25 fetching corpus: 2450, signal 133189/164462 (executing program) 2025/09/01 11:51:25 fetching corpus: 2500, signal 133999/165418 (executing program) 2025/09/01 11:51:26 fetching corpus: 2550, signal 134691/166333 (executing program) 2025/09/01 11:51:26 fetching corpus: 2600, signal 135518/167331 (executing program) 2025/09/01 11:51:26 fetching corpus: 2650, signal 136242/168224 (executing program) 2025/09/01 11:51:26 fetching corpus: 2700, signal 137057/169161 (executing program) 2025/09/01 11:51:26 fetching corpus: 2750, signal 137801/170082 (executing program) 2025/09/01 11:51:26 fetching corpus: 2800, signal 138434/170968 (executing program) 2025/09/01 11:51:26 fetching corpus: 2850, signal 139014/171819 (executing program) 2025/09/01 11:51:26 fetching corpus: 2900, signal 140184/172878 (executing program) 2025/09/01 11:51:26 fetching corpus: 2950, signal 140716/173613 (executing program) 2025/09/01 11:51:26 fetching corpus: 3000, signal 141526/174437 (executing program) 2025/09/01 11:51:26 fetching corpus: 3050, signal 142283/175240 (executing program) 2025/09/01 11:51:26 fetching corpus: 3100, signal 143172/176100 (executing program) 2025/09/01 11:51:27 fetching corpus: 3150, signal 143737/176802 (executing program) 2025/09/01 11:51:27 fetching corpus: 3200, signal 144192/177494 (executing program) 2025/09/01 11:51:27 fetching corpus: 3250, signal 144926/178243 (executing program) 2025/09/01 11:51:27 fetching corpus: 3300, signal 145768/179003 (executing program) 2025/09/01 11:51:27 fetching corpus: 3350, signal 146591/179699 (executing program) 2025/09/01 11:51:27 fetching corpus: 3400, signal 147106/180366 (executing program) 2025/09/01 11:51:27 fetching corpus: 3450, signal 147589/180980 (executing program) 2025/09/01 11:51:27 fetching corpus: 3500, signal 148045/181583 (executing program) 2025/09/01 11:51:27 fetching corpus: 3550, signal 148634/182256 (executing program) 2025/09/01 11:51:28 fetching corpus: 3600, signal 149504/182967 (executing program) 2025/09/01 11:51:28 fetching corpus: 3650, signal 149938/183508 (executing program) 2025/09/01 11:51:28 fetching corpus: 3700, signal 150514/184070 (executing program) 2025/09/01 11:51:28 fetching corpus: 3750, signal 151189/184704 (executing program) 2025/09/01 11:51:28 fetching corpus: 3800, signal 151661/185243 (executing program) 2025/09/01 11:51:28 fetching corpus: 3850, signal 152228/185838 (executing program) 2025/09/01 11:51:28 fetching corpus: 3900, signal 153048/186420 (executing program) 2025/09/01 11:51:28 fetching corpus: 3950, signal 153526/186995 (executing program) 2025/09/01 11:51:28 fetching corpus: 4000, signal 154104/187497 (executing program) 2025/09/01 11:51:28 fetching corpus: 4050, signal 154735/188009 (executing program) 2025/09/01 11:51:28 fetching corpus: 4100, signal 155223/188520 (executing program) 2025/09/01 11:51:28 fetching corpus: 4150, signal 155704/189007 (executing program) 2025/09/01 11:51:29 fetching corpus: 4200, signal 156134/189452 (executing program) 2025/09/01 11:51:29 fetching corpus: 4250, signal 156605/189886 (executing program) 2025/09/01 11:51:29 fetching corpus: 4300, signal 157123/190314 (executing program) 2025/09/01 11:51:29 fetching corpus: 4350, signal 157579/190699 (executing program) 2025/09/01 11:51:29 fetching corpus: 4400, signal 158077/191177 (executing program) 2025/09/01 11:51:29 fetching corpus: 4450, signal 158458/191609 (executing program) 2025/09/01 11:51:29 fetching corpus: 4500, signal 158906/192026 (executing program) 2025/09/01 11:51:29 fetching corpus: 4550, signal 159270/192399 (executing program) 2025/09/01 11:51:29 fetching corpus: 4600, signal 159807/192886 (executing program) 2025/09/01 11:51:29 fetching corpus: 4650, signal 160199/193241 (executing program) 2025/09/01 11:51:29 fetching corpus: 4700, signal 160724/193618 (executing program) 2025/09/01 11:51:30 fetching corpus: 4750, signal 161158/193806 (executing program) 2025/09/01 11:51:30 fetching corpus: 4800, signal 161614/193813 (executing program) 2025/09/01 11:51:30 fetching corpus: 4850, signal 162024/193815 (executing program) 2025/09/01 11:51:30 fetching corpus: 4900, signal 162505/193819 (executing program) 2025/09/01 11:51:30 fetching corpus: 4950, signal 162780/193831 (executing program) 2025/09/01 11:51:30 fetching corpus: 5000, signal 163148/193832 (executing program) 2025/09/01 11:51:30 fetching corpus: 5050, signal 163572/193836 (executing program) 2025/09/01 11:51:30 fetching corpus: 5100, signal 163911/193842 (executing program) 2025/09/01 11:51:30 fetching corpus: 5150, signal 164322/193843 (executing program) 2025/09/01 11:51:30 fetching corpus: 5200, signal 164802/193898 (executing program) 2025/09/01 11:51:30 fetching corpus: 5250, signal 165233/193910 (executing program) 2025/09/01 11:51:30 fetching corpus: 5300, signal 165563/193922 (executing program) 2025/09/01 11:51:31 fetching corpus: 5350, signal 166208/193997 (executing program) 2025/09/01 11:51:31 fetching corpus: 5400, signal 166615/194055 (executing program) 2025/09/01 11:51:31 fetching corpus: 5450, signal 166997/194098 (executing program) 2025/09/01 11:51:31 fetching corpus: 5500, signal 167233/194105 (executing program) 2025/09/01 11:51:31 fetching corpus: 5550, signal 167702/194107 (executing program) 2025/09/01 11:51:31 fetching corpus: 5600, signal 168053/194143 (executing program) 2025/09/01 11:51:31 fetching corpus: 5650, signal 168273/194153 (executing program) 2025/09/01 11:51:31 fetching corpus: 5700, signal 168600/194154 (executing program) 2025/09/01 11:51:31 fetching corpus: 5750, signal 168949/194160 (executing program) 2025/09/01 11:51:31 fetching corpus: 5800, signal 169399/194192 (executing program) 2025/09/01 11:51:31 fetching corpus: 5850, signal 169922/194210 (executing program) 2025/09/01 11:51:32 fetching corpus: 5900, signal 170324/194222 (executing program) 2025/09/01 11:51:32 fetching corpus: 5950, signal 170665/194237 (executing program) 2025/09/01 11:51:32 fetching corpus: 6000, signal 171115/194239 (executing program) 2025/09/01 11:51:32 fetching corpus: 6050, signal 171466/194250 (executing program) 2025/09/01 11:51:32 fetching corpus: 6100, signal 171932/194277 (executing program) 2025/09/01 11:51:32 fetching corpus: 6150, signal 172437/194280 (executing program) 2025/09/01 11:51:32 fetching corpus: 6200, signal 172917/194280 (executing program) 2025/09/01 11:51:32 fetching corpus: 6250, signal 173253/194287 (executing program) 2025/09/01 11:51:32 fetching corpus: 6300, signal 173581/194287 (executing program) 2025/09/01 11:51:32 fetching corpus: 6350, signal 173912/194288 (executing program) 2025/09/01 11:51:32 fetching corpus: 6400, signal 174272/194289 (executing program) 2025/09/01 11:51:32 fetching corpus: 6450, signal 174548/194290 (executing program) 2025/09/01 11:51:33 fetching corpus: 6500, signal 175025/194294 (executing program) 2025/09/01 11:51:33 fetching corpus: 6550, signal 175528/194309 (executing program) 2025/09/01 11:51:33 fetching corpus: 6600, signal 175796/194318 (executing program) 2025/09/01 11:51:33 fetching corpus: 6650, signal 176122/194337 (executing program) 2025/09/01 11:51:33 fetching corpus: 6700, signal 176556/194338 (executing program) 2025/09/01 11:51:33 fetching corpus: 6750, signal 176807/194339 (executing program) 2025/09/01 11:51:33 fetching corpus: 6800, signal 177172/194343 (executing program) 2025/09/01 11:51:33 fetching corpus: 6850, signal 177466/194386 (executing program) 2025/09/01 11:51:33 fetching corpus: 6900, signal 177761/194388 (executing program) 2025/09/01 11:51:33 fetching corpus: 6950, signal 178157/194392 (executing program) 2025/09/01 11:51:33 fetching corpus: 7000, signal 178499/194401 (executing program) 2025/09/01 11:51:33 fetching corpus: 7050, signal 178692/194416 (executing program) 2025/09/01 11:51:33 fetching corpus: 7100, signal 178931/194419 (executing program) 2025/09/01 11:51:34 fetching corpus: 7150, signal 179220/194426 (executing program) 2025/09/01 11:51:34 fetching corpus: 7200, signal 179778/194451 (executing program) 2025/09/01 11:51:34 fetching corpus: 7250, signal 180278/194457 (executing program) 2025/09/01 11:51:34 fetching corpus: 7300, signal 180573/194465 (executing program) 2025/09/01 11:51:34 fetching corpus: 7350, signal 180845/194469 (executing program) 2025/09/01 11:51:34 fetching corpus: 7400, signal 181139/194478 (executing program) 2025/09/01 11:51:34 fetching corpus: 7450, signal 181294/194480 (executing program) 2025/09/01 11:51:34 fetching corpus: 7500, signal 181574/194480 (executing program) 2025/09/01 11:51:34 fetching corpus: 7550, signal 182388/194506 (executing program) 2025/09/01 11:51:34 fetching corpus: 7600, signal 182694/194510 (executing program) 2025/09/01 11:51:34 fetching corpus: 7650, signal 182984/194535 (executing program) 2025/09/01 11:51:34 fetching corpus: 7700, signal 183561/194555 (executing program) 2025/09/01 11:51:35 fetching corpus: 7750, signal 184095/194555 (executing program) 2025/09/01 11:51:35 fetching corpus: 7800, signal 184318/194557 (executing program) 2025/09/01 11:51:35 fetching corpus: 7850, signal 184704/194557 (executing program) 2025/09/01 11:51:35 fetching corpus: 7900, signal 184980/194557 (executing program) 2025/09/01 11:51:35 fetching corpus: 7950, signal 185219/194559 (executing program) 2025/09/01 11:51:35 fetching corpus: 8000, signal 185677/194562 (executing program) 2025/09/01 11:51:35 fetching corpus: 8050, signal 186093/194566 (executing program) 2025/09/01 11:51:35 fetching corpus: 8100, signal 186355/194570 (executing program) 2025/09/01 11:51:36 fetching corpus: 8150, signal 186586/194581 (executing program) 2025/09/01 11:51:36 fetching corpus: 8200, signal 186976/194584 (executing program) 2025/09/01 11:51:36 fetching corpus: 8250, signal 187277/194586 (executing program) 2025/09/01 11:51:36 fetching corpus: 8300, signal 187503/194586 (executing program) 2025/09/01 11:51:36 fetching corpus: 8350, signal 187773/194595 (executing program) 2025/09/01 11:51:36 fetching corpus: 8400, signal 187992/194608 (executing program) 2025/09/01 11:51:36 fetching corpus: 8450, signal 188479/194616 (executing program) 2025/09/01 11:51:36 fetching corpus: 8500, signal 188682/194616 (executing program) 2025/09/01 11:51:36 fetching corpus: 8550, signal 188913/194618 (executing program) 2025/09/01 11:51:36 fetching corpus: 8600, signal 189215/194662 (executing program) 2025/09/01 11:51:36 fetching corpus: 8650, signal 189485/194669 (executing program) 2025/09/01 11:51:36 fetching corpus: 8700, signal 189754/194671 (executing program) 2025/09/01 11:51:37 fetching corpus: 8750, signal 190002/194683 (executing program) 2025/09/01 11:51:37 fetching corpus: 8800, signal 190176/194687 (executing program) 2025/09/01 11:51:37 fetching corpus: 8850, signal 190407/194706 (executing program) 2025/09/01 11:51:37 fetching corpus: 8900, signal 190678/194707 (executing program) 2025/09/01 11:51:37 fetching corpus: 8950, signal 190970/194710 (executing program) 2025/09/01 11:51:37 fetching corpus: 9000, signal 191255/194712 (executing program) 2025/09/01 11:51:37 fetching corpus: 9050, signal 191536/194715 (executing program) 2025/09/01 11:51:37 fetching corpus: 9085, signal 191761/194720 (executing program) 2025/09/01 11:51:37 fetching corpus: 9085, signal 191761/194720 (executing program) 2025/09/01 11:51:39 starting 8 fuzzer processes 11:51:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x10}, 0x10}, {0x0, 0x138}], 0x2}, 0x0) 11:51:39 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r2, 0x0) 11:51:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001000)) 11:51:39 executing program 7: unlinkat(0xffffffffffffffff, 0x0, 0x200) r0 = memfd_create(&(0x7f00000001c0)='}&@\x00', 0x6) pread64(r0, &(0x7f0000000340)=""/140, 0x8c, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) 11:51:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20}}}}}, 0x0) 11:51:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xffff, 0x4) 11:51:39 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:51:39 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x0) [ 79.088955] audit: type=1400 audit(1756727499.857:7): avc: denied { execmem } for pid=272 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 80.344030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.346292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.348354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.352400] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.354465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.356131] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.358491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.359835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.360191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.361940] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.366327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.371765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.379909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.382179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.390217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.392311] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.395958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.403178] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.404928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.406275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.411858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.415185] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.417232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.418578] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 80.420200] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.420331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.422932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.424134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.426256] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 80.427986] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 80.433184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.437317] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.438910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 80.441632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 80.443948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.529913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.533716] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.545690] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.560825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.566425] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 82.495089] Bluetooth: hci0: command tx timeout [ 82.495130] Bluetooth: hci1: command tx timeout [ 82.495948] Bluetooth: hci7: command tx timeout [ 82.496876] Bluetooth: hci5: command tx timeout [ 82.560745] Bluetooth: hci3: command tx timeout [ 82.561707] Bluetooth: hci4: command tx timeout [ 82.562249] Bluetooth: hci2: command tx timeout [ 82.622812] Bluetooth: hci6: command tx timeout [ 84.543381] Bluetooth: hci7: command tx timeout [ 84.544890] Bluetooth: hci0: command tx timeout [ 84.545454] Bluetooth: hci1: command tx timeout [ 84.546083] Bluetooth: hci5: command tx timeout [ 84.609046] Bluetooth: hci3: command tx timeout [ 84.609643] Bluetooth: hci2: command tx timeout [ 84.610181] Bluetooth: hci4: command tx timeout [ 84.670606] Bluetooth: hci6: command tx timeout [ 86.590698] Bluetooth: hci1: command tx timeout [ 86.591149] Bluetooth: hci5: command tx timeout [ 86.592387] Bluetooth: hci0: command tx timeout [ 86.592867] Bluetooth: hci7: command tx timeout [ 86.654590] Bluetooth: hci4: command tx timeout [ 86.655020] Bluetooth: hci2: command tx timeout [ 86.655412] Bluetooth: hci3: command tx timeout [ 86.718673] Bluetooth: hci6: command tx timeout [ 88.638690] Bluetooth: hci5: command tx timeout [ 88.639147] Bluetooth: hci0: command tx timeout [ 88.639563] Bluetooth: hci1: command tx timeout [ 88.639949] Bluetooth: hci7: command tx timeout [ 88.702624] Bluetooth: hci4: command tx timeout [ 88.703052] Bluetooth: hci2: command tx timeout [ 88.703431] Bluetooth: hci3: command tx timeout [ 88.766581] Bluetooth: hci6: command tx timeout [ 117.267570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.269108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.647905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.648459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.067516] audit: type=1400 audit(1756727538.834:8): avc: denied { open } for pid=3673 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 118.083977] audit: type=1400 audit(1756727538.834:9): avc: denied { kernel } for pid=3673 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:52:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001000)) 11:52:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001000)) 11:52:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001000)) [ 118.673772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.674395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:52:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 118.839353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.841197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:52:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) 11:52:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) [ 119.067994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.069166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:52:19 executing program 1: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000006c0)={0x2, 0x1}) 11:52:20 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 119.311842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.312932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.437138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.437792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.547150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.547785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.948618] audit: type=1400 audit(1756727541.717:10): avc: denied { read } for pid=3850 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.550519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.551227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.587196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.588548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.631091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.631961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.677798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.678386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.749243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.751057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.825048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.825703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.989576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.990203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.013446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.014079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:52:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x10}, 0x10}, {0x0, 0x138}], 0x2}, 0x0) 11:52:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x0, 0xaed, 0x0, 0x0, 0x0, "69b086a5b8986b43a9ea5eb0bbc4ef6f4e9732"}) write(r0, &(0x7f0000000040)="e1ba36772a088869f8dc56f26d614c0a", 0x10) 11:52:22 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000000c0)=""/126, 0x7e) write$binfmt_elf32(r1, 0x0, 0xce) 11:52:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000080), 0x4) 11:52:22 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r2, 0x0) 11:52:22 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20}}}}}, 0x0) 11:52:22 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x10}, 0x10}, {0x0, 0x138}], 0x2}, 0x0) 11:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20}}}}}, 0x0) 11:52:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r2, 0x0) 11:52:23 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000000c0)=""/126, 0x7e) write$binfmt_elf32(r1, 0x0, 0xce) 11:52:23 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) dup3(r0, r2, 0x0) 11:52:23 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x8001, 0x0) [ 123.098430] loop3: detected capacity change from 0 to 2048 11:52:23 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r2, 0x0) 11:52:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)={0x10}, 0x10}, {0x0, 0x138}], 0x2}, 0x0) 11:52:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20}}}}}, 0x0) [ 123.183887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.207559] ext4 filesystem being mounted at /syzkaller-testdir235991079/syzkaller.1nmvw4/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) 11:52:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:52:24 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:24 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x8001, &(0x7f0000000040)=0x1, 0x6) [ 123.396775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:24 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000000c0)=""/126, 0x7e) write$binfmt_elf32(r1, 0x0, 0xce) 11:52:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 11:52:24 executing program 0: gettid() write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) 11:52:24 executing program 6: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:52:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 11:52:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 11:52:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:52:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x8001, 0x0) 11:52:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:52:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 124.037959] loop3: detected capacity change from 0 to 2048 11:52:24 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x40086602, &(0x7f0000000000)={0xffffffff}) [ 124.097292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.101739] ext4 filesystem being mounted at /syzkaller-testdir235991079/syzkaller.1nmvw4/3/file0 supports timestamps until 2038-01-19 (0x7fffffff) 11:52:24 executing program 5: syz_open_dev$usbmon(&(0x7f0000002780), 0x0, 0x0) 11:52:24 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000600)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x25, 0x0, 0x0, @u32}]}]}, 0x2c}], 0x1}, 0x0) [ 124.169076] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:24 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:24 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:52:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x8001, 0x0) [ 124.254067] loop3: detected capacity change from 0 to 2048 [ 124.275312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.284516] ext4 filesystem being mounted at /syzkaller-testdir235991079/syzkaller.1nmvw4/4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.360121] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 11:52:25 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff}, 0x6) 11:52:25 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x13, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:52:25 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x300, 0x0) 11:52:25 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:25 executing program 7: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000000c0)=""/126, 0x7e) write$binfmt_elf32(r1, 0x0, 0xce) 11:52:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000340)='.pending_reads\x00', 0x8001, 0x0) 11:52:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000fbffffffffff20"], 0x28}}, 0x0) [ 124.963446] loop3: detected capacity change from 0 to 2048 [ 125.011877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.014926] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.019812] ext4 filesystem being mounted at /syzkaller-testdir235991079/syzkaller.1nmvw4/5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.042213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 11:52:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x2b, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 125.173201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 11:52:25 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:25 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000fbffffffffff20"], 0x28}}, 0x0) [ 125.336175] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 11:52:26 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000fbffffffffff20"], 0x28}}, 0x0) 11:52:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) [ 125.955887] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 11:52:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000fbffffffffff20"], 0x28}}, 0x0) 11:52:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:52:26 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) 11:52:26 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) [ 126.140382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 11:52:27 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:52:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x52, 0x0, &(0x7f0000000180)) 11:52:27 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fsopen(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socket$inet6_udp(0xa, 0x2, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\x00', 0x0, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000000)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000100)='@:{&,#([\x00', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) dup2(r3, r2) 11:52:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) 11:52:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) 11:52:27 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(0x0, 0x0, 0x0) 11:52:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:52:27 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0x0, 0x4, 0x3, 0x0, 0x6, 0x20, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp, 0x2000, 0x2, 0x8e92, 0x3, 0x7, 0x19c4, 0x0, 0x0, 0x40, 0x0, 0x9}, r1, 0xffffffffffffffff, r0, 0xb) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) r3 = dup(r2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x80, 0x7, 0x20, 0x0, 0x3, 0x1034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x5, 0x81, 0x9, 0x3cc7, 0x1, 0x9, 0x0, 0x21}, 0xffffffffffffffff, 0x5, r3, 0x1) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) 11:52:27 executing program 5: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "d94aec6e7109130b0b52db90fe57dc67dd9eb00943f1f9e82e9fcae08bbc35ca4e7c6b35b9b39faff6d358de7bd2f7d1dbc20603ffe2c2465f51a09b9dc9cb40"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 11:52:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f00000018c0)=[{{&(0x7f0000000100)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001540)=[{0x10, 0x1, 0x4f}], 0x10}}], 0x1, 0x0) 11:52:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) 11:52:27 executing program 1: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0xf, 0x0, 0x0) 11:52:27 executing program 5: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "d94aec6e7109130b0b52db90fe57dc67dd9eb00943f1f9e82e9fcae08bbc35ca4e7c6b35b9b39faff6d358de7bd2f7d1dbc20603ffe2c2465f51a09b9dc9cb40"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 11:52:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) 11:52:27 executing program 7: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 11:52:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 5: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "d94aec6e7109130b0b52db90fe57dc67dd9eb00943f1f9e82e9fcae08bbc35ca4e7c6b35b9b39faff6d358de7bd2f7d1dbc20603ffe2c2465f51a09b9dc9cb40"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 11:52:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x0, 0x0) 11:52:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 5: r0 = add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "d94aec6e7109130b0b52db90fe57dc67dd9eb00943f1f9e82e9fcae08bbc35ca4e7c6b35b9b39faff6d358de7bd2f7d1dbc20603ffe2c2465f51a09b9dc9cb40"}, 0x48, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) 11:52:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020601000240008000f8", 0x16}], 0x0, &(0x7f0000010d00)) 11:52:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000300)=0xffff7fff, 0x4) 11:52:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) 11:52:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') lseek(r0, 0x0, 0x0) [ 126.910357] FAT-fs (loop3): bogus sectors per cluster 6 [ 126.911036] FAT-fs (loop3): Can't find a valid FAT filesystem [ 126.935126] FAT-fs (loop3): bogus sectors per cluster 6 [ 126.935792] FAT-fs (loop3): Can't find a valid FAT filesystem [ 127.044911] FAT-fs (loop3): bogus sectors per cluster 6 [ 127.045378] FAT-fs (loop3): Can't find a valid FAT filesystem 11:52:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020601000240008000f8", 0x16}], 0x0, &(0x7f0000010d00)) 11:52:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001440), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 11:52:27 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "79104f3aee507297d082b74a0b6b571600293a7c86d486a506f35998c9da489c4132d9a77037b7efe7a5f06afff448639d2cb46e92e69abe6208462327b0e81e"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000100)='\x00', 0x0) 11:52:27 executing program 6: prctl$PR_GET_IO_FLUSHER(0x3a) 11:52:27 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x1018}, './file0\x00'}) 11:52:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r0, 0x0, 0x0, 0x5) 11:52:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020601000240008000f8", 0x16}], 0x0, &(0x7f0000010d00)) 11:52:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r0, 0x0, 0x179) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf2, 0x0, 0x0, 0x4, 0x0, 0x6b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=""/176, 0xb0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000040)) 11:52:27 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sched\x00') lseek(r0, 0x100000000, 0x0) 11:52:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) [ 127.199572] FAT-fs (loop3): bogus sectors per cluster 6 [ 127.200031] FAT-fs (loop3): Can't find a valid FAT filesystem [ 127.209125] audit: type=1400 audit(1756727547.978:11): avc: denied { watch } for pid=4197 comm="syz-executor.0" path="/proc/4197/task" dev="proc" ino=5919 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 11:52:27 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x3}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x0, 0xfffffffa}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 11:52:27 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5415, 0x0) 11:52:27 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0) 11:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) 11:52:28 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)={{0x14}, [], {0x14}}, 0x28}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 11:52:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020601000240008000f8", 0x16}], 0x0, &(0x7f0000010d00)) [ 127.313404] FAT-fs (loop3): bogus sectors per cluster 6 [ 127.314477] FAT-fs (loop3): Can't find a valid FAT filesystem 11:52:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev}, {@in6=@local, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x0, 0x0, 0x0, {@in=@private}}, 0x28}}, 0x0) 11:52:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sched\x00') lseek(r0, 0x100000000, 0x0) [ 127.349340] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4215 comm=syz-executor.7 [ 127.350297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4215 comm=syz-executor.7 11:52:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5415, 0x0) 11:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) [ 127.384854] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4220 comm=syz-executor.7 [ 127.387196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4220 comm=syz-executor.7 11:52:28 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0) 11:52:28 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) 11:52:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000014) fcntl$notify(r0, 0x402, 0x80000024) [ 127.474726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:52:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sched\x00') lseek(r0, 0x100000000, 0x0) 11:52:28 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000bc0)={'team_slave_0\x00', 0x0}) 11:52:28 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/189, 0xbd, 0x7) 11:52:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev}, {@in6=@local, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x0, 0x0, 0x0, {@in=@private}}, 0x28}}, 0x0) 11:52:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5415, 0x0) 11:52:28 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40043d14, &(0x7f0000000140)) 11:52:28 executing program 3: r0 = syz_io_uring_setup(0x4e0b, &(0x7f0000001780), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001800), &(0x7f0000001840)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/235, 0xeb}, {&(0x7f0000000200)}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1) 11:52:28 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0) 11:52:28 executing program 0: getrusage(0x1, &(0x7f00000002c0)) 11:52:28 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/189, 0xbd, 0x7) 11:52:28 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='sched\x00') lseek(r0, 0x100000000, 0x0) 11:52:28 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:52:28 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40043d14, &(0x7f0000000140)) 11:52:28 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5415, 0x0) 11:52:28 executing program 6: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/clockevents', 0x200100, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000001d80)={0xb3}, 0x0, 0x0, 0x0, 0x0) 11:52:28 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 11:52:28 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/189, 0xbd, 0x7) 11:52:28 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:52:28 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40043d14, &(0x7f0000000140)) 11:52:28 executing program 4: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PIN_SETFUNC2(r0, 0x40043d14, &(0x7f0000000140)) 11:52:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev}, {@in6=@local, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x0, 0x0, 0x0, {@in=@private}}, 0x28}}, 0x0) 11:52:28 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/189, 0xbd, 0x7) 11:52:28 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x8, 0x4}) 11:52:28 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "08bac43417214462c8a613438f727832650d8a1518228667e303a7b0f02be31ec862337f6688bbd019ffe5374c7d222d845020a8de085992526c12fe41dd6c6b"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 11:52:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f00000000c0)) 11:52:28 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:52:28 executing program 1: prctl$PR_GET_TSC(0xf, 0x0) 11:52:29 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "08bac43417214462c8a613438f727832650d8a1518228667e303a7b0f02be31ec862337f6688bbd019ffe5374c7d222d845020a8de085992526c12fe41dd6c6b"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 11:52:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x6a, 0x1, 0x0, 0x0, "", [@typed={0x15c, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x18}], 0x1}, 0x0) 11:52:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 11:52:29 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) 11:52:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) 11:52:29 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@hopopts={{0x11}}], 0x18}}], 0x1, 0x0) 11:52:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc) 11:52:29 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 11:52:29 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "08bac43417214462c8a613438f727832650d8a1518228667e303a7b0f02be31ec862337f6688bbd019ffe5374c7d222d845020a8de085992526c12fe41dd6c6b"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 11:52:29 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3b) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000001540)) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80081, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000001500)={0x0, 0x0, 0xffff8000}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:52:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000002c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev}, {@in6=@local, 0x0, 0x6c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@getsa={0x28, 0x12, 0x0, 0x0, 0x0, {@in=@private}}, 0x28}}, 0x0) 11:52:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 11:52:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x40181, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="feb8e520d8768a6467872d0a", 0xc}], 0x1, 0x0, 0x0, 0x0) 11:52:29 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) 11:52:29 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "08bac43417214462c8a613438f727832650d8a1518228667e303a7b0f02be31ec862337f6688bbd019ffe5374c7d222d845020a8de085992526c12fe41dd6c6b"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) 11:52:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) 11:52:29 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15, 0x0, 0x0, 0xffffffff}, {0x6}]}) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:52:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 11:52:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0) 11:52:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "96481f"}) [ 129.074686] audit: type=1326 audit(1756727549.841:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4336 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714352fb19 code=0x0 11:52:29 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)='x', 0x1}]) 11:52:29 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) 11:52:29 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 11:52:29 executing program 2: msgctl$IPC_SET(0x0, 0x9, 0x0) [ 129.898378] audit: type=1326 audit(1756727550.663:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4336 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f714352fb19 code=0x0 11:52:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) 11:52:30 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)='x', 0x1}]) 11:52:30 executing program 1: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup(r0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, 0x0) 11:52:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "96481f"}) 11:52:30 executing program 2: msgctl$IPC_SET(0x0, 0x9, 0x0) 11:52:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x608000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @dev, 0x0, 0x0, 0x0, 0x700, 0x10000000, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x10, 0x1d, 0xe01}, 0x10}}, 0x0) 11:52:30 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x41009432, &(0x7f0000000000)) 11:52:30 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)={0x18, 0x68, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) 11:52:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "96481f"}) 11:52:30 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x608000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @dev, 0x0, 0x0, 0x0, 0x700, 0x10000000, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x10, 0x1d, 0xe01}, 0x10}}, 0x0) 11:52:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "96481f"}) 11:52:30 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), 0x0) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.selinux\x00', 0x0, 0x2) 11:52:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)='x', 0x1}]) 11:52:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x41009432, &(0x7f0000000000)) 11:52:31 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) 11:52:31 executing program 2: msgctl$IPC_SET(0x0, 0x9, 0x0) 11:52:31 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) write$tcp_mem(r0, 0x0, 0x0) 11:52:31 executing program 2: msgctl$IPC_SET(0x0, 0x9, 0x0) 11:52:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x41009432, &(0x7f0000000000)) 11:52:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)) 11:52:31 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000)='x', 0x1}]) 11:52:31 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r1, 0x1}, 0x14}}, 0x0) 11:52:31 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x41009432, &(0x7f0000000000)) 11:52:31 executing program 1: msgctl$MSG_STAT(0x0, 0xb, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000100)=""/80) msgrcv(0x0, &(0x7f0000000180)={0x0, ""/156}, 0xa4, 0x0, 0x1800) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000240)=""/99) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000002c0)=""/123) r0 = msgget(0x3, 0x200) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000340)=""/207) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000540)=""/6) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000580)=""/193) msgget(0x1, 0x1) fork() 11:52:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) 11:52:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x4000000002, 0x7}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="85", 0x1}], 0x1, 0xffff, 0x0) 11:52:31 executing program 0: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@nocase}, {@fat=@tz_utc}, {@fat=@time_offset}]}) 11:52:31 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2400001) 11:52:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x608000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @dev, 0x0, 0x0, 0x0, 0x700, 0x10000000, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x10, 0x1d, 0xe01}, 0x10}}, 0x0) 11:52:31 executing program 3: perf_event_open(&(0x7f0000003900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 130.698312] No source specified [ 130.699887] No source specified 11:52:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) 11:52:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2405, 0x0) 11:52:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "1863408d6d0c138430bfe8b3e907fe9cde92d65faf8569780991ea2e4b3de830a75474c9d653a97346e40910bc4bdc655801d1a293d0aff05f0d6fcfd5b1538cc858595f65a6ba58b7bee089049ad9a280c3a93e0d16366f8cab7ee8d06f3af76ff78724b9f1ca4738d19648c5fb3c25cc2f974824e757b34b18185f87ba0b73980ee77b3e9d1c66b28dc7f09f2a1bfda1980344ad6417798e2ad23bab41e1ec45228e13603a183cbd5abf1f4406408b4e93db5464b263726857b352e21eea8dab33dcfb933e55a445f2572a309545a435fcfe6e855d3dca537781902d56c3a13e5724cf305d4058a6ce7e33e7f5c0e8afacafe68379ca83f9473c4e25910e4f13da87446bc26ee2c16963e5e628ab493ddcc1c91bd6e867c667c084b33456bfb5305186b9ce5e46bb28ee5f198453f30443260a5e45b530865e946d9e54c0221c7a1fccea8bad1b9f5275c9dc198771a6698caa460cefde41c3746918de5fe944978a02632159ba708014633873356464f6c9c261500b7cd73398679b8a1943e576668a9a4980f16aa9740e9598be600a85a377a14c0540c7d7cca49b1aeadacdfd7029821a5d150c2aafd6a3f7ddae313f472409fda770f31a49f021cc3147cf6b64f6ead0f0ab44f36789530240f6966055880c9ca8a27cacb265aced55d8a831611d52656caa2fc26a2b0f325f9c37bf5251527077b01a63b8e4049ad1dc"}) [ 130.814919] audit: type=1400 audit(1756727551.583:14): avc: denied { write } for pid=4434 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:52:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc}}}}, 0x28}}, 0x0) 11:52:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x46) 11:52:31 executing program 6: r0 = syz_io_uring_setup(0x2cb1, &(0x7f00000001c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 11:52:31 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x608000, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @dev, 0x0, 0x0, 0x0, 0x700, 0x10000000, 0x80000005}) socket$inet6_udp(0xa, 0x2, 0x0) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x10, 0x1d, 0xe01}, 0x10}}, 0x0) 11:52:31 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2400001) 11:52:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x46) 11:52:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 11:52:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) 11:52:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, "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"}) 11:52:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000080)=0x1000, 0x4) 11:52:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)) 11:52:31 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2400001) 11:52:31 executing program 6: add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x32e7, &(0x7f0000003580)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003600), &(0x7f0000003640)) 11:52:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x46) 11:52:31 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) close(r1) 11:52:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) 11:52:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4, 0x0, 0x46) 11:52:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x31, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 11:52:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@dev}, 0x8) 11:52:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 11:52:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013b00)) 11:52:32 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="8c", 0x1}], 0x1, 0x2400000, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x2400001) 11:52:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) 11:52:32 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) [ 131.429286] loop4: detected capacity change from 0 to 16 [ 131.451683] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (2 blocks) [ 131.487088] loop4: detected capacity change from 0 to 16 [ 131.489073] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (2 blocks) 11:52:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013b00)) 11:52:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x31, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 11:52:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:52:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 11:52:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) 11:52:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x2f, 0x0, &(0x7f0000000140)) 11:52:32 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) 11:52:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0x0}, @loopback, [{0x3, 0x1, "ffe0e1cd3150"}]}}}}}}, 0x0) [ 131.588941] loop4: detected capacity change from 0 to 16 [ 131.609916] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (2 blocks) 11:52:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) 11:52:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x60, 0xc9b4, 0x6}) 11:52:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x31, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 11:52:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 11:52:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x800, 0x0) 11:52:32 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x0, 0xfff}, @timestamp, @mss, @sack_perm, @timestamp, @timestamp, @mss, @sack_perm], 0x8) 11:52:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013b00)) 11:52:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 131.779080] loop4: detected capacity change from 0 to 16 11:52:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x800, 0x0) 11:52:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) [ 131.810729] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (2 blocks) 11:52:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x60, 0xc9b4, 0x6}) 11:52:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x31, &(0x7f0000002b00)={0x5, {{0x2, 0x0, @multicast1}}}, 0x90) 11:52:32 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, &(0x7f0000000000)=@x25={0x9, @remote}, &(0x7f0000000080)=0x80) 11:52:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x60, 0xc9b4, 0x6}) 11:52:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013b00)) 11:52:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x800, 0x0) 11:52:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:52:32 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f00000004c0)) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 11:52:32 executing program 7: r0 = eventfd2(0x0, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f00000007c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0, 0x0, 0xfffffffffffffffe}]) 11:52:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x1f00, 0x0, 0x0}) 11:52:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) [ 131.983780] loop4: detected capacity change from 0 to 16 [ 131.992812] EXT4-fs (loop4): bad geometry: block count 256 exceeds size of device (2 blocks) 11:52:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x800, 0x0) 11:52:32 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x60, 0xc9b4, 0x6}) 11:52:32 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f00000004c0)) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 11:52:32 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001400), 0x9202, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000001440)) 11:52:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x1f00, 0x0, 0x0}) 11:52:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) 11:52:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000040)) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:52:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) 11:52:32 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f00000004c0)) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 11:52:32 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001400), 0x9202, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000001440)) 11:52:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x1f00, 0x0, 0x0}) 11:52:33 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x0) 11:52:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) 11:52:33 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x75}}) 11:52:33 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001400), 0x9202, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000001440)) 11:52:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) 11:52:33 executing program 7: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001400), 0x9202, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000001440)) 11:52:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5cca, 0x4) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x0) 11:52:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x30}}, 0x0) 11:52:33 executing program 7: fchmod(0xffffffffffffffff, 0x0) 11:52:33 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f00000004c0)) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 11:52:33 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x1f00, 0x0, 0x0}) 11:52:33 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x75}}) 11:52:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) 11:52:33 executing program 2: r0 = io_uring_setup(0x6aff, &(0x7f0000000140)={0x0, 0x0, 0x1800}) io_uring_enter(r0, 0x7d2b, 0x0, 0x0, 0x0, 0x0) 11:52:33 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:52:33 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) 11:52:33 executing program 4: clock_getres(0x2, &(0x7f0000000000)) 11:52:33 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() setpriority(0x0, r0, 0x7) 11:52:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_access\x00', 0x0, 0x0) 11:52:33 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x6612, 0x0) 11:52:33 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x75}}) 11:52:33 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 11:52:33 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setresuid(0x0, 0xee01, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) 11:52:33 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:52:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a5ebb0440c3943d75022b49464b9", 0xe}], 0x1, &(0x7f0000000640)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}}], 0x2, 0x0) 11:52:33 executing program 1: r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_WKALM_SET(r0, 0x7003, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x75}}) 11:52:33 executing program 7: syslog(0x4, &(0x7f00000000c0)=""/252, 0xffffff92) 11:52:33 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setresuid(0x0, 0xee01, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) 11:52:33 executing program 6: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 11:52:33 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x8}, 0x0, &(0x7f00000002c0), 0x0) 11:52:33 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 11:52:33 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:52:33 executing program 7: syslog(0x4, &(0x7f00000000c0)=""/252, 0xffffff92) 11:52:33 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) 11:52:33 executing program 5: sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) 11:52:33 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 11:52:33 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="19b2c8e9a1173c54", 0x8}}, 0x0) 11:52:33 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1}]) 11:52:33 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setresuid(0x0, 0xee01, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) [ 133.071094] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.873265] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.873986] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.882210] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.887997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.890225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.895002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.899687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.900167] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.904107] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.909423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.912442] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.916276] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.920150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.920688] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.925439] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.928469] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 133.928990] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 133.934691] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 133.939556] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 133.940048] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 133.948990] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 133.953298] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 133.956722] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 133.959803] Bluetooth: hci6: Opcode 0x0406 failed: -4 11:52:34 executing program 7: syslog(0x4, &(0x7f00000000c0)=""/252, 0xffffff92) 11:52:34 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 11:52:34 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x11, 0x7}], 0x18) 11:52:34 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1}]) 11:52:34 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="19b2c8e9a1173c54", 0x8}}, 0x0) 11:52:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) 11:52:34 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) 11:52:34 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) setresuid(0x0, 0xee01, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) [ 134.025681] ieee802154 phy0 wpan0: encryption failed: -22 11:52:34 executing program 7: syslog(0x4, &(0x7f00000000c0)=""/252, 0xffffff92) 11:52:34 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="19b2c8e9a1173c54", 0x8}}, 0x0) [ 134.109399] ieee802154 phy0 wpan0: encryption failed: -22 11:52:34 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1}]) 11:52:34 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)="19b2c8e9a1173c54", 0x8}}, 0x0) 11:52:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 11:52:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x0) 11:52:35 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1}]) 11:52:35 executing program 3: setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="d9543038a1b282d50a0127a3fe787904192e30be12e051656ca28132eba1a51d12f95180d319eef8bb32a4a5275ed0721e7666ca07423b043d77f268a4db33451cf00ae47cb045f9bc4e0385ab12e07ac5", 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 11:52:35 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) 11:52:35 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) 11:52:35 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 134.297820] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.334428] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (8) 11:52:35 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) 11:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh, 0x8) 11:52:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 11:52:35 executing program 6: perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)=',', 0x1, r0) [ 134.481152] loop7: detected capacity change from 0 to 1352 11:52:35 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100088ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200088ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200088ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200088ea70325132510000ea703251070064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 11:52:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "48d203e7a5451c196e"}]}]}, 0x44}}, 0x0) 11:52:35 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x351}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x21, 0x0, &(0x7f0000000000)="8ba6c5532a6626bb0126f29951fb2359a2c841d94be994ddf2def7ff0755b21363fd41aeaf30ad72dfb2689714e968c789a57547be01f2d2ce0eda91e0f01db465a1298ebd5952f543727fa1bd21488d89054723d31224c6734b88e4c99849c87e130f91bc1d8af167b5a13cc2ca3ea3a6fd7fc97b7539e522127d58f8ddbc6b0482ae37f8045570f0094f8960190faa425119f7a27a83539c27ceef783050dabd6bd32b0a7b35db998e665e3c78bada2a3b039492be1edbc9faa2ca0c229bdd3ad9f2074cc33e611ecb931d57c1abea3b16736060d970c9dbd44c60a88bb912ba2d50a80fc773885f435d3f49fd118a7eaa4400e4837e889743c06075e314b560800ab83466e56b9c6c8e7edf7f1e2f88dd6abc77e27e5fd2a70d30e8ce65767cd96fa5a1e5b6fd7d941edbf7c95afc142b3aed0169fe164579a8d28dc60c2a9c0524b80bd2050093af367a4c945539e945e9fe5951cd65ea25ec21d6dc03d7d32a355f5855389c168d0459b888d8b6aeb3f4480f2d26da5d627e17f7dc1bdb2d62523e33cfaee8e8287e280e6826958705dbfa28257f62ca1a20cb87fdf16adf9258315ea767c67b6a30e7d9757eacf2fc6185bfa9cad388ecebfbc3bef173b1f05d7588a9a908d4a55a0c5aed9df4c9324ca3deadbd1e72a0794e320c6e9bcd44013b29a4626bb0905544734cde8cc7ddb3cbf63533f00110456232f97552f7aa14f1255277076bfebe98d89129a79c9ddf1e2d9dafc4dc1dd11af24a62bfb6cb8c156d12f0af78f9ed3dd54e480c26419b6278add8e86f955cea0285334b8562700f3a5fa69b6bb4b057f5056610c8c720dad0dc304f3d7e18a413e2b8e1dfaf981464800ccf8bdcbe3e1dfa35a6a014048048ec322a7a0d8c0baf6a9c3bb3ef61a479bc9f068dc5f9930160a4a580a2a9103f26a17df6c3ba5f182c1d8c36b19498547b1bc3d54abbddedcf8b7b7027b52b44836edb11034efa7f233dfdc0028e1da24a9b31892928aec50161977131b9d8eac28ecc1a52fe52e91759a176786944a7341dad28c12ada6742b7b1ece73ca4b5acf7ff937f80cd74c3269cf89a08bd472c10cc7f676f82daecd49f8dfa3ea7b0442e41010dc8cbbb746e64808fa52ce26cffcd90703a29dc9d359ed62a2bedeededccb83c55995c98f60023a76eaab2aec35372ccdd5a6e71310b1f5c9625592b9e83ede2b14263b09bac691d27f5440b647ccbbcbfcf824311240bf4a6b10f6e3dfde76980ca70c8270b28010baa666fee9b0be98e984d50967b066eedd620d78d3e57f3597865a0d8a41aba55bb5e24526352c2d3e06f46e6607d120afeee921e005e8c16b92baf1a75ea6a5860d817c1f8468155d078257d9ecb0b54b9d4bc824f8930840208be1dd8ef9c36feca799aa77f4997a0dbb10ace1a75172916a2697e8c7498db1d759ad96"}) 11:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 11:52:35 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x21, 0x0, &(0x7f0000000000)="8ba6c5532a6626bb0126f29951fb2359a2c841d94be994ddf2def7ff0755b21363fd41aeaf30ad72dfb2689714e968c789a57547be01f2d2ce0eda91e0f01db465a1298ebd5952f543727fa1bd21488d89054723d31224c6734b88e4c99849c87e130f91bc1d8af167b5a13cc2ca3ea3a6fd7fc97b7539e522127d58f8ddbc6b0482ae37f8045570f0094f8960190faa425119f7a27a83539c27ceef783050dabd6bd32b0a7b35db998e665e3c78bada2a3b039492be1edbc9faa2ca0c229bdd3ad9f2074cc33e611ecb931d57c1abea3b16736060d970c9dbd44c60a88bb912ba2d50a80fc773885f435d3f49fd118a7eaa4400e4837e889743c06075e314b560800ab83466e56b9c6c8e7edf7f1e2f88dd6abc77e27e5fd2a70d30e8ce65767cd96fa5a1e5b6fd7d941edbf7c95afc142b3aed0169fe164579a8d28dc60c2a9c0524b80bd2050093af367a4c945539e945e9fe5951cd65ea25ec21d6dc03d7d32a355f5855389c168d0459b888d8b6aeb3f4480f2d26da5d627e17f7dc1bdb2d62523e33cfaee8e8287e280e6826958705dbfa28257f62ca1a20cb87fdf16adf9258315ea767c67b6a30e7d9757eacf2fc6185bfa9cad388ecebfbc3bef173b1f05d7588a9a908d4a55a0c5aed9df4c9324ca3deadbd1e72a0794e320c6e9bcd44013b29a4626bb0905544734cde8cc7ddb3cbf63533f00110456232f97552f7aa14f1255277076bfebe98d89129a79c9ddf1e2d9dafc4dc1dd11af24a62bfb6cb8c156d12f0af78f9ed3dd54e480c26419b6278add8e86f955cea0285334b8562700f3a5fa69b6bb4b057f5056610c8c720dad0dc304f3d7e18a413e2b8e1dfaf981464800ccf8bdcbe3e1dfa35a6a014048048ec322a7a0d8c0baf6a9c3bb3ef61a479bc9f068dc5f9930160a4a580a2a9103f26a17df6c3ba5f182c1d8c36b19498547b1bc3d54abbddedcf8b7b7027b52b44836edb11034efa7f233dfdc0028e1da24a9b31892928aec50161977131b9d8eac28ecc1a52fe52e91759a176786944a7341dad28c12ada6742b7b1ece73ca4b5acf7ff937f80cd74c3269cf89a08bd472c10cc7f676f82daecd49f8dfa3ea7b0442e41010dc8cbbb746e64808fa52ce26cffcd90703a29dc9d359ed62a2bedeededccb83c55995c98f60023a76eaab2aec35372ccdd5a6e71310b1f5c9625592b9e83ede2b14263b09bac691d27f5440b647ccbbcbfcf824311240bf4a6b10f6e3dfde76980ca70c8270b28010baa666fee9b0be98e984d50967b066eedd620d78d3e57f3597865a0d8a41aba55bb5e24526352c2d3e06f46e6607d120afeee921e005e8c16b92baf1a75ea6a5860d817c1f8468155d078257d9ecb0b54b9d4bc824f8930840208be1dd8ef9c36feca799aa77f4997a0dbb10ace1a75172916a2697e8c7498db1d759ad96"}) 11:52:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 11:52:35 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x21, 0x0, &(0x7f0000000000)="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"}) 11:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh, 0x8) 11:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh, 0x8) 11:52:35 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/201, 0xc9, 0x8001) 11:52:35 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x351}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 11:52:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 11:52:35 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000400)={0x0, 0x0, 0x8, 0x21, 0x0, &(0x7f0000000000)="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"}) 11:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/201, 0xc9, 0x8001) 11:52:35 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 11:52:35 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x351}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 135.103766] Bluetooth: hci0: command 0x0c1a tx timeout 11:52:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 11:52:35 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh, 0x8) 11:52:35 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/201, 0xc9, 0x8001) 11:52:35 executing program 6: perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:52:35 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x351}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:36 executing program 0: r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:36 executing program 3: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 11:52:36 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/201, 0xc9, 0x8001) 11:52:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x2, 0x4) 11:52:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5603, &(0x7f0000000000)) 11:52:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_thread_area(0x0) 11:52:36 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f0000000440)="19", 0x1}], 0x0, 0x0) 11:52:36 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:36 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"82b80c082b"}}, 0x0) 11:52:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_thread_area(0x0) 11:52:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@timestamp={0x8, 0x7}, @timestamp, @mss, @sack_perm, @sack_perm, @sack_perm, @timestamp, @window], 0x8) 11:52:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 11:52:36 executing program 0: r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5603, &(0x7f0000000000)) 11:52:36 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"82b80c082b"}}, 0x0) 11:52:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x3}]}) 11:52:36 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x0) fcntl$addseals(r0, 0x40a, 0x0) 11:52:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5603, &(0x7f0000000000)) 11:52:36 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"82b80c082b"}}, 0x0) 11:52:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_thread_area(0x0) 11:52:36 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x4008662c, 0x0) 11:52:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 11:52:36 executing program 0: r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) 11:52:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x3}]}) 11:52:36 executing program 2: r0 = getpid() r1 = pidfd_open(r0, 0x0) open_by_handle_at(r1, &(0x7f0000000140)=@raw={0x8, 0xfe, {"82b80c082b"}}, 0x0) 11:52:36 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_thread_area(0x0) 11:52:36 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RESIZE(r0, 0x5603, &(0x7f0000000000)) 11:52:36 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x4008662c, 0x0) 11:52:36 executing program 5: r0 = fsopen(&(0x7f00000034c0)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 11:52:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 11:52:36 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x4008662c, 0x0) 11:52:36 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/77, 0x4d, 0x0) flock(r0, 0x2) 11:52:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f00000000c0)='+', 0x1, 0x5}], 0x0, &(0x7f0000001540)={[{@numtail}, {@shortname_winnt}]}) 11:52:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x3}]}) 11:52:36 executing program 0: r0 = perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:36 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) 11:52:36 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0) [ 135.935883] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.936383] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.936823] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.937229] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.937653] Bluetooth: hci2: command 0x0c1a tx timeout 11:52:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x4b4c, &(0x7f0000000140)) 11:52:36 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11:52:36 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r2, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bind$bt_sco(r1, &(0x7f0000001380), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r3, 0xf505, 0x0) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x100800) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f00000000c0)={'veth1\x00', 0xbe}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r6 = dup2(r0, r0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x13, 0x0, &(0x7f0000000080)) shutdown(r5, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:52:36 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x4008662c, 0x0) [ 135.999637] Bluetooth: hci6: command 0x0c1a tx timeout [ 136.000511] Bluetooth: hci7: command 0x0c1a tx timeout 11:52:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x0, 0x3}]}) [ 136.035458] FAT-fs (loop5): bogus number of FAT structure [ 136.036097] FAT-fs (loop5): Can't find a valid FAT filesystem 11:52:36 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop2', 0x200000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000a}) read(r0, &(0x7f00000001c0)=""/82, 0x52) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private1, @mcast1, @loopback, 0x0, 0x4, 0x0, 0x0, 0x2, 0x10020a}) pwrite64(r1, &(0x7f0000000080)="76a33869282b70c9625915000bbce941335179c2192b6511e3893b73612ddbdb6d444766ef6a7b4ff0c612b6c5b34c625f496a6a6146bec9a2263034c991d39d1bf82190b584", 0x46, 0x8) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x3ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) [ 136.077850] FAT-fs (loop5): bogus number of FAT structure [ 136.078335] FAT-fs (loop5): Can't find a valid FAT filesystem 11:52:36 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xa) 11:52:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 11:52:36 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) ioprio_set$pid(0x3, 0x0, 0x0) 11:52:36 executing program 4: setresuid(0x0, 0xee01, 0x0) setfsgid(0xee01) 11:52:36 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) fsopen(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, 0x0, 0x0, 0x4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 11:52:36 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop2', 0x200000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000a}) read(r0, &(0x7f00000001c0)=""/82, 0x52) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private1, @mcast1, @loopback, 0x0, 0x4, 0x0, 0x0, 0x2, 0x10020a}) pwrite64(r1, &(0x7f0000000080)="76a33869282b70c9625915000bbce941335179c2192b6511e3893b73612ddbdb6d444766ef6a7b4ff0c612b6c5b34c625f496a6a6146bec9a2263034c991d39d1bf82190b584", 0x46, 0x8) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x3ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 11:52:36 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) 11:52:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f00000000c0)='+', 0x1, 0x5}], 0x0, &(0x7f0000001540)={[{@numtail}, {@shortname_winnt}]}) [ 136.309476] FAT-fs (loop5): bogus number of FAT structure [ 136.310033] FAT-fs (loop5): Can't find a valid FAT filesystem 11:52:37 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7437b8", 0x14, 0x2c, 0x0, @private2, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 11:52:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:52:37 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xa) 11:52:37 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) 11:52:37 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000003100)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x7, 0x0}}], 0x1, 0x0) 11:52:37 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 11:52:37 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) 11:52:37 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop2', 0x200000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000a}) read(r0, &(0x7f00000001c0)=""/82, 0x52) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private1, @mcast1, @loopback, 0x0, 0x4, 0x0, 0x0, 0x2, 0x10020a}) pwrite64(r1, &(0x7f0000000080)="76a33869282b70c9625915000bbce941335179c2192b6511e3893b73612ddbdb6d444766ef6a7b4ff0c612b6c5b34c625f496a6a6146bec9a2263034c991d39d1bf82190b584", 0x46, 0x8) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x3ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 11:52:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f00000000c0)='+', 0x1, 0x5}], 0x0, &(0x7f0000001540)={[{@numtail}, {@shortname_winnt}]}) 11:52:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 11:52:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 11:52:37 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xa) [ 136.531541] FAT-fs (loop5): bogus number of FAT structure [ 136.532046] FAT-fs (loop5): Can't find a valid FAT filesystem 11:52:37 executing program 4: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:37 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 11:52:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x40001) 11:52:37 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0) write$vga_arbiter(r0, &(0x7f0000000040), 0xa) 11:52:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001480)=[{&(0x7f00000000c0)='+', 0x1, 0x5}], 0x0, &(0x7f0000001540)={[{@numtail}, {@shortname_winnt}]}) 11:52:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 11:52:37 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop2', 0x200000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@private2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000a}) read(r0, &(0x7f00000001c0)=""/82, 0x52) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@private1, @mcast1, @loopback, 0x0, 0x4, 0x0, 0x0, 0x2, 0x10020a}) pwrite64(r1, &(0x7f0000000080)="76a33869282b70c9625915000bbce941335179c2192b6511e3893b73612ddbdb6d444766ef6a7b4ff0c612b6c5b34c625f496a6a6146bec9a2263034c991d39d1bf82190b584", 0x46, 0x8) readahead(0xffffffffffffffff, 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x3ff) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 11:52:37 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 136.657591] FAT-fs (loop5): bogus number of FAT structure [ 136.659573] FAT-fs (loop5): Can't find a valid FAT filesystem [ 136.665148] audit: type=1400 audit(1756727557.434:15): avc: denied { watch_reads } for pid=4944 comm="syz-executor.4" path="/syzkaller-testdir262302787/syzkaller.JhbH0N/55" dev="sda" ino=15971 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 11:52:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 11:52:37 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 11:52:37 executing program 1: setresuid(0xee01, 0xee00, 0x0) setreuid(0xee00, 0xffffffffffffffff) 11:52:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:37 executing program 4: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r1, 0x5, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 11:52:37 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pivot_root(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 11:52:37 executing program 7: socketpair(0x11, 0x0, 0x0, &(0x7f00000006c0)) 11:52:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 11:52:37 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 11:52:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 11:52:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 11:52:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:37 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:37 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "04e8ae0ef7169dad5af02dee1c9e67fb7ba33f"}) 11:52:37 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 11:52:37 executing program 4: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 137.151990] Bluetooth: hci0: command 0x0c1a tx timeout 11:52:38 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 11:52:38 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:38 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 11:52:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x9, 0x4) 11:52:38 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:38 executing program 4: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10000000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:38 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001180)={{0x2, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 11:52:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x0, @dev}}) 11:52:38 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x1277) 11:52:38 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0x2e) ioctl$SG_IO(r2, 0x227d, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 11:52:38 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x22b5c98, 0x0) llistxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 11:52:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x80802) write$sndseq(r0, &(0x7f00000018c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 11:52:38 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) r1 = dup(r0) recvmsg$unix(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0) 11:52:38 executing program 4: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) statx(r0, 0x0, 0x1000, 0xfeffffff, 0x0) 11:52:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:52:38 executing program 7: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x4bbe, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) 11:52:38 executing program 2: r0 = socket$inet(0x2, 0x3, 0x26) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) 11:52:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x80802) write$sndseq(r0, &(0x7f00000018c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 11:52:38 executing program 6: r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 11:52:38 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 11:52:38 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) 11:52:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) close(r0) 11:52:38 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 137.654786] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 11:52:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x80802) write$sndseq(r0, &(0x7f00000018c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 11:52:38 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:38 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 11:52:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:52:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) close(r0) 11:52:38 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x68) 11:52:38 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x80802) write$sndseq(r0, &(0x7f00000018c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 11:52:38 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) [ 137.876190] block device autoloading is deprecated and will be removed. [ 137.984658] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.985122] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.986452] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.986963] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.987393] Bluetooth: hci5: command 0x0c1a tx timeout [ 138.047618] Bluetooth: hci7: command 0x0c1a tx timeout [ 138.048103] Bluetooth: hci6: command 0x0c1a tx timeout 11:52:39 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:39 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3942", 0x7}], 0x1) 11:52:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 11:52:39 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADTOCHDR(r0, 0x5305, &(0x7f0000001900)) 11:52:39 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, 0x0) 11:52:39 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 11:52:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) close(r0) 11:52:39 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 11:52:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) close(r0) 11:52:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3942", 0x7}], 0x1) 11:52:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:39 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:39 executing program 1: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 11:52:39 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:39 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:39 executing program 1: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 11:52:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000000140)={"80eaffffffffffff030000ba", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:52:39 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3942", 0x7}], 0x1) 11:52:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x1, [{{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) 11:52:39 executing program 1: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 11:52:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000480)="8b68f60e9b3942", 0x7}], 0x1) 11:52:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) 11:52:39 executing program 1: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 11:52:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x1, [{{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) 11:52:39 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5327) 11:52:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) 11:52:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000000140)={"80eaffffffffffff030000ba", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:52:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @initdev}}) 11:52:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x1, [{{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) 11:52:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pcmcia', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/187, 0x18) getdents64(r0, &(0x7f0000000000)=""/36, 0x24) 11:52:39 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x4d, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 139.090758] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:52:39 executing program 1: pipe(&(0x7f00000001c0)) pipe(&(0x7f00000001c0)) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8e}, &(0x7f00000000c0), 0x0) 11:52:39 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 11:52:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x1, [{{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x110) 11:52:39 executing program 6: shmdt(0x0) 11:52:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000000140)={"80eaffffffffffff030000ba", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:52:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) 11:52:39 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x109902) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/95, 0x8}], 0x1) 11:52:39 executing program 1: r0 = gettid() rt_sigqueueinfo(r0, 0x17, &(0x7f0000000100)={0x0, 0x0, 0x1}) [ 139.199693] Bluetooth: hci0: command 0x0c1a tx timeout 11:52:39 executing program 7: prctl$PR_SET_FP_MODE(0x22, 0x0) 11:52:39 executing program 6: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x100000, 0x0, 0x0, {r0}}, 0x20) 11:52:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 11:52:40 executing program 4: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='-', 0x1}], 0x1) 11:52:40 executing program 1: syz_io_uring_setup(0x7fffffff, &(0x7f0000000780)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 11:52:40 executing program 6: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 11:52:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @initdev}}) 11:52:40 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000001500), 0x20) 11:52:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) 11:52:40 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000000140)={"80eaffffffffffff030000ba", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11:52:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 11:52:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, 0x0, 0x0) 11:52:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:40 executing program 1: syz_io_uring_setup(0x7fffffff, &(0x7f0000000780)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 11:52:40 executing program 7: io_setup(0x8, &(0x7f0000000040)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r0, 0x2, &(0x7f0000003400)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000001180)="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", 0x401}]) 11:52:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xa, 0x0, &(0x7f0000000240)) [ 139.565222] netlink: 'syz-executor.6': attribute type 16 has an invalid length. 11:52:40 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x40181, 0x0) r1 = dup2(r0, r0) write$cgroup_pid(r1, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 11:52:40 executing program 4: setresgid(0xee00, 0x0, 0x0) r0 = getpgid(0x0) prlimit64(r0, 0x0, 0x0, 0x0) 11:52:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 11:52:40 executing program 1: syz_io_uring_setup(0x7fffffff, &(0x7f0000000780)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 11:52:40 executing program 7: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) [ 139.649975] netlink: 'syz-executor.6': attribute type 16 has an invalid length. 11:52:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:40 executing program 1: syz_io_uring_setup(0x7fffffff, &(0x7f0000000780)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 11:52:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @initdev}}) 11:52:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$link(0x9, r1, r0) 11:52:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:40 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x40181, 0x0) r1 = dup2(r0, r0) write$cgroup_pid(r1, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 11:52:40 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "aa59a295b8abf010"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) statfs(0x0, 0x0) 11:52:40 executing program 7: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) [ 139.765853] netlink: 'syz-executor.6': attribute type 16 has an invalid length. [ 139.807671] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 11:52:40 executing program 1: syz_io_uring_setup(0x3470, &(0x7f0000002700), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002780), &(0x7f00000027c0)) 11:52:40 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="60bf59b0315a53aadca9d38d4eaf8de9b27d67e39d67182786231b13a19afc5588007060b911a0a192ffb7233de94fb6a0250492a9e2810b5b453b2b75ba13fcc81ae00b0a06e77716c3917dc14468aa1ec1cb819a429c771294634adc4c088d900fc6c139ef560dd403646afb63441f3ac026abd11662f7de08ba75e76a8822f9a5be590934da5e3b83abf2e0eea54805cb5c0bc386e888638237dae926e2b4592c732f66b9b019ee929c28af41bc218f2357e2007b6ef1983dcd6bc6c1018eb531f68a2356e429c91c780d347d9efcb45aa3e5e67f2f945cbc753d48e65d1d90d13c61203b99677e0fc9a4c2fbeb6b591d73145d494a1c4d10bf1006202b30d0b678344b22e6a6a7c6bc6b0895be033868eefaccf6d392ee51f550f740c464814077fc8c542207d2084bb7b8adaef731dc2f5bd8f7899e22367143deb533bba5b109dcbdd1eced9c49e580447ebbdd44da9feaf5cf08750de9093d57671ae108b7a50d1b20fe8f7bb893677c4b60e9a820cf3d061562aeb9b71c999395985c2d1546d4292907a28b8b56be2425e47e524fc7f724b7f86c72844d1448b72622a2a1adb7cd43d3154f5c67c6713a1757a4c2fb5acf6fa0a7c8676afb7eeb25097be483ec6e2024284c0105f4b9e20472ba9a981ced92327eb6a9df729c559e6c360481fbb30e376a54e37dac5b278db6559c", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:40 executing program 7: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 11:52:40 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x40181, 0x0) r1 = dup2(r0, r0) write$cgroup_pid(r1, &(0x7f0000000480)=0xffffffffffffffff, 0x12) 11:52:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:40 executing program 0: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1c, 0x0, 0x0) 11:52:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @initdev}}) 11:52:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2c, 0xe, {@with_ht={{{}, {}, @device_a, @broadcast}}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) [ 140.023601] netlink: 'syz-executor.6': attribute type 16 has an invalid length. [ 140.030636] Bluetooth: hci5: command 0x0c1a tx timeout [ 140.031118] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.031567] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.032028] Bluetooth: hci1: command 0x0c1a tx timeout [ 140.032461] Bluetooth: hci2: command 0x0c1a tx timeout 11:52:40 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_size', 0x40181, 0x0) r1 = dup2(r0, r0) write$cgroup_pid(r1, &(0x7f0000000480)=0xffffffffffffffff, 0x12) [ 140.088509] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 140.095668] Bluetooth: hci6: command 0x0c1a tx timeout [ 140.096299] Bluetooth: hci7: command 0x0c1a tx timeout [ 140.363943] loop4: detected capacity change from 0 to 264192 [ 140.454238] loop4: detected capacity change from 0 to 264192 11:52:41 executing program 7: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x22, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 11:52:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:41 executing program 0: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1c, 0x0, 0x0) 11:52:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 11:52:41 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 11:52:41 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x33) 11:52:41 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25090000004c0004803c00078008000300070000000800030007000000080002009f0100000800030000000000080003000300000008000400d2e2000008000200010001000900010073797a3000000000680007800c00030005000000000000000800010000000000080001001dda00000c000300070000000000000008000100010000000c000400aa7dbc50000000000c000400de0000000000000008000100040000000c000300060000000000000008000200212500000c0002800800020078df00008c0002803c000380080002000500000008000100cd0600000800020005000000080002000010000008000100d903000008000100040000000800010008000000080001000900000034000380080002000200000008000200040000000800010000000000080001003f0000000800010002000000080002008100000008000200a90200000800020000000000"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) [ 140.552544] netlink: 'syz-executor.6': attribute type 16 has an invalid length. [ 140.575973] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 11:52:41 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:41 executing program 0: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1c, 0x0, 0x0) 11:52:41 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="60bf59b0315a53aadca9d38d4eaf8de9b27d67e39d67182786231b13a19afc5588007060b911a0a192ffb7233de94fb6a0250492a9e2810b5b453b2b75ba13fcc81ae00b0a06e77716c3917dc14468aa1ec1cb819a429c771294634adc4c088d900fc6c139ef560dd403646afb63441f3ac026abd11662f7de08ba75e76a8822f9a5be590934da5e3b83abf2e0eea54805cb5c0bc386e888638237dae926e2b4592c732f66b9b019ee929c28af41bc218f2357e2007b6ef1983dcd6bc6c1018eb531f68a2356e429c91c780d347d9efcb45aa3e5e67f2f945cbc753d48e65d1d90d13c61203b99677e0fc9a4c2fbeb6b591d73145d494a1c4d10bf1006202b30d0b678344b22e6a6a7c6bc6b0895be033868eefaccf6d392ee51f550f740c464814077fc8c542207d2084bb7b8adaef731dc2f5bd8f7899e22367143deb533bba5b109dcbdd1eced9c49e580447ebbdd44da9feaf5cf08750de9093d57671ae108b7a50d1b20fe8f7bb893677c4b60e9a820cf3d061562aeb9b71c999395985c2d1546d4292907a28b8b56be2425e47e524fc7f724b7f86c72844d1448b72622a2a1adb7cd43d3154f5c67c6713a1757a4c2fb5acf6fa0a7c8676afb7eeb25097be483ec6e2024284c0105f4b9e20472ba9a981ced92327eb6a9df729c559e6c360481fbb30e376a54e37dac5b278db6559c", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:41 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x33) 11:52:41 executing program 6: syz_io_uring_setup(0x6de9, &(0x7f00000007c0)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 11:52:41 executing program 0: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x1c, 0x0, 0x0) 11:52:41 executing program 2: syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[], [], 0x3d}) 11:52:41 executing program 6: io_setup(0x8, &(0x7f0000000080)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) io_destroy(r0) 11:52:41 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x33) 11:52:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x2000) 11:52:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:41 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x33) 11:52:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 11:52:41 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x5, 0x0, 0x0) [ 141.089161] loop4: detected capacity change from 0 to 264192 11:52:41 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="60bf59b0315a53aadca9d38d4eaf8de9b27d67e39d67182786231b13a19afc5588007060b911a0a192ffb7233de94fb6a0250492a9e2810b5b453b2b75ba13fcc81ae00b0a06e77716c3917dc14468aa1ec1cb819a429c771294634adc4c088d900fc6c139ef560dd403646afb63441f3ac026abd11662f7de08ba75e76a8822f9a5be590934da5e3b83abf2e0eea54805cb5c0bc386e888638237dae926e2b4592c732f66b9b019ee929c28af41bc218f2357e2007b6ef1983dcd6bc6c1018eb531f68a2356e429c91c780d347d9efcb45aa3e5e67f2f945cbc753d48e65d1d90d13c61203b99677e0fc9a4c2fbeb6b591d73145d494a1c4d10bf1006202b30d0b678344b22e6a6a7c6bc6b0895be033868eefaccf6d392ee51f550f740c464814077fc8c542207d2084bb7b8adaef731dc2f5bd8f7899e22367143deb533bba5b109dcbdd1eced9c49e580447ebbdd44da9feaf5cf08750de9093d57671ae108b7a50d1b20fe8f7bb893677c4b60e9a820cf3d061562aeb9b71c999395985c2d1546d4292907a28b8b56be2425e47e524fc7f724b7f86c72844d1448b72622a2a1adb7cd43d3154f5c67c6713a1757a4c2fb5acf6fa0a7c8676afb7eeb25097be483ec6e2024284c0105f4b9e20472ba9a981ced92327eb6a9df729c559e6c360481fbb30e376a54e37dac5b278db6559c", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:41 executing program 1: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x0) [ 141.194247] loop5: detected capacity change from 0 to 264192 [ 141.253899] loop7: detected capacity change from 0 to 264192 [ 141.435351] loop4: detected capacity change from 0 to 264192 11:52:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5421, 0xffffffffffffffff) 11:52:42 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25090000004c0004803c00078008000300070000000800030007000000080002009f0100000800030000000000080003000300000008000400d2e2000008000200010001000900010073797a3000000000680007800c00030005000000000000000800010000000000080001001dda00000c000300070000000000000008000100010000000c000400aa7dbc50000000000c000400de0000000000000008000100040000000c000300060000000000000008000200212500000c0002800800020078df00008c0002803c000380080002000500000008000100cd0600000800020005000000080002000010000008000100d903000008000100040000000800010008000000080001000900000034000380080002000200000008000200040000000800010000000000080001003f0000000800010002000000080002008100000008000200a90200000800020000000000"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:42 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="60bf59b0315a53aadca9d38d4eaf8de9b27d67e39d67182786231b13a19afc5588007060b911a0a192ffb7233de94fb6a0250492a9e2810b5b453b2b75ba13fcc81ae00b0a06e77716c3917dc14468aa1ec1cb819a429c771294634adc4c088d900fc6c139ef560dd403646afb63441f3ac026abd11662f7de08ba75e76a8822f9a5be590934da5e3b83abf2e0eea54805cb5c0bc386e888638237dae926e2b4592c732f66b9b019ee929c28af41bc218f2357e2007b6ef1983dcd6bc6c1018eb531f68a2356e429c91c780d347d9efcb45aa3e5e67f2f945cbc753d48e65d1d90d13c61203b99677e0fc9a4c2fbeb6b591d73145d494a1c4d10bf1006202b30d0b678344b22e6a6a7c6bc6b0895be033868eefaccf6d392ee51f550f740c464814077fc8c542207d2084bb7b8adaef731dc2f5bd8f7899e22367143deb533bba5b109dcbdd1eced9c49e580447ebbdd44da9feaf5cf08750de9093d57671ae108b7a50d1b20fe8f7bb893677c4b60e9a820cf3d061562aeb9b71c999395985c2d1546d4292907a28b8b56be2425e47e524fc7f724b7f86c72844d1448b72622a2a1adb7cd43d3154f5c67c6713a1757a4c2fb5acf6fa0a7c8676afb7eeb25097be483ec6e2024284c0105f4b9e20472ba9a981ced92327eb6a9df729c559e6c360481fbb30e376a54e37dac5b278db6559c", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}}) 11:52:42 executing program 3: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:42 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="60bf59b0315a53aadca9d38d4eaf8de9b27d67e39d67182786231b13a19afc5588007060b911a0a192ffb7233de94fb6a0250492a9e2810b5b453b2b75ba13fcc81ae00b0a06e77716c3917dc14468aa1ec1cb819a429c771294634adc4c088d900fc6c139ef560dd403646afb63441f3ac026abd11662f7de08ba75e76a8822f9a5be590934da5e3b83abf2e0eea54805cb5c0bc386e888638237dae926e2b4592c732f66b9b019ee929c28af41bc218f2357e2007b6ef1983dcd6bc6c1018eb531f68a2356e429c91c780d347d9efcb45aa3e5e67f2f945cbc753d48e65d1d90d13c61203b99677e0fc9a4c2fbeb6b591d73145d494a1c4d10bf1006202b30d0b678344b22e6a6a7c6bc6b0895be033868eefaccf6d392ee51f550f740c464814077fc8c542207d2084bb7b8adaef731dc2f5bd8f7899e22367143deb533bba5b109dcbdd1eced9c49e580447ebbdd44da9feaf5cf08750de9093d57671ae108b7a50d1b20fe8f7bb893677c4b60e9a820cf3d061562aeb9b71c999395985c2d1546d4292907a28b8b56be2425e47e524fc7f724b7f86c72844d1448b72622a2a1adb7cd43d3154f5c67c6713a1757a4c2fb5acf6fa0a7c8676afb7eeb25097be483ec6e2024284c0105f4b9e20472ba9a981ced92327eb6a9df729c559e6c360481fbb30e376a54e37dac5b278db6559c", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fspick(0xffffffffffffff9c, 0x0, 0x0) [ 141.570224] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 141.571279] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.572105] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 141.572216] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.576487] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.583681] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.584325] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 141.633377] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 141.636542] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.637276] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 141.637383] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.638883] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.645637] Bluetooth: hci1: ACL packet for unknown connection handle 201 11:52:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400006}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='c', 0x1}], 0x1, 0x498a, 0x0) pwritev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="85", 0x1}], 0x1, 0x1000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 11:52:42 executing program 3: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 141.646362] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 141.829040] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 141.830289] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.832718] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 141.832750] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.835634] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 141.840810] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 141.841694] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 141.844508] loop7: detected capacity change from 0 to 264192 [ 142.017480] loop4: detected capacity change from 0 to 264192 [ 142.062776] loop5: detected capacity change from 0 to 264192 11:52:42 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @broadcast}}, 0x0, 0x2, [{{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}]}, 0x20002) 11:52:42 executing program 3: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:42 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x4ac0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000016c0)={0x0, @ethernet={0x0, @multicast}, @phonet, @xdp}) fcntl$dupfd(r1, 0x406, r0) ioctl$FIBMAP(r0, 0x125d, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='FROZEN\x00', 0x7) r2 = socket(0x2a, 0x2, 0x94f0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20}, @in={0x2, 0x4e20, @multicast1}, @rc={0x1f, @any, 0xac}, 0x0, 0x0, 0x0, 0x0, 0xfff, &(0x7f00000006c0)='ip6tnl0\x00', 0x8, 0xd29, 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x323) syz_read_part_table(0x800000000004, 0x3, &(0x7f0000000480)=[{&(0x7f0000000280)="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", 0xfffffdb7, 0x4}, {&(0x7f00000000c0)="b1af108f16238885d7726e02501bb606592305b4e53a9bd819ec9b1c14f49e5511e0b5e4259ac399b397bf6234a8485ca821847b73d312a84dbb3c12ed0e75250bb1a31d6b39609651b1981941a414b7ada5148e604e79cb58151ca9e4929b2ffbb2885e4305735c921409e4d8f60f05f6c51cca7acc4020a98f131a4126154d030ad2a3b9fb5da5586def1193a54c9df4480b89aa18c623", 0x98, 0x4}, {&(0x7f0000000180)="52dc0c6e7fbbf942278f1f38e172720774b949037629f4a43625f2ad649a4da1c09cd214dcff9b4fc5aa4d9867f6a72288a015c224fa3a61e11ef16bceb224ae3367169df18c1a75141c51ca50076a79dc4034d07e5ce76afa247607a41c16fd32e08ce707353bf75ea5381fd6459f48c20fc9d1319d2d5ff8cf0b9c4237cd58e112ff8fe237194b134cf60519fbed546e1b859f2e9385", 0x97, 0x1}]) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$FIBMAP(r3, 0x125d, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="60c269544898923c", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x4) 11:52:42 executing program 4: rt_sigprocmask(0x2, &(0x7f0000000000), 0x0, 0x8) 11:52:42 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5421, 0xffffffffffffffff) 11:52:42 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}}) 11:52:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) read(r1, 0x0, 0x1a76) 11:52:42 executing program 4: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) [ 142.176497] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 142.178645] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 142.179293] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 142.179332] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 142.180836] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 142.185511] Bluetooth: hci1: ACL packet for unknown connection handle 201 11:52:43 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x30b8, &(0x7f0000000000), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r0, 0x7170, 0x0, 0x0, 0x0, 0x0) 11:52:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@link_local, @remote, @val={@void, {0x500}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @multicast}}}}, 0x0) 11:52:43 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}}) 11:52:43 executing program 2: r0 = syz_io_uring_setup(0x6561, &(0x7f0000000400), &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x10, 0x0, 0x0) [ 142.186187] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 142.581637] loop5: detected capacity change from 0 to 264192 [ 142.650480] loop7: detected capacity change from 0 to 264192 11:52:43 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5421, 0xffffffffffffffff) 11:52:43 executing program 3: syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x7f}, {0x9, [{@none, 0x80, 0x2, "2571ac", 0x6, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x40, "f3e2f6", 0x69, 0x8}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xfc, "3a4303", 0x800, 0x5}, {@any, 0x3, 0x9, "d597d2", 0x6, 0x13}, {@any, 0x20, 0x0, "acc749", 0x5, 0x5a}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x2, "b88488", 0xa8c, 0x3}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6, 0x1f, "cfc133", 0xa60e, 0x1}, {@any, 0x4, 0x5, "f76e7a", 0x2, 0xff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x67, "a58ea6", 0xff, 0x6}]}}}, 0x82) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x81, 0x0, 0x804}}}, 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x3, 0xc}, {0x401, 0x6a7, 0x4, 0xff, [0x1, 0x6]}}}}, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="030000502bbbe9325c2f4825ed4e2e792fdda73f228ffd7503c16d40f44ecf7770235540cb73eb566be07629ad9d0d92926932bbae11c89a05bab2b57521c5d80fdc4c248dbc73be336b0e1cb2cf1f2859a4c280e00466"], 0x54) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c91014001000050017000ce4bd85cf500772f10001800400ccc3cf49b6000300"], 0x19) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x14}, @l2cap_cid_signaling={{0x10}, [@l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x8, 0xfe00}}, @l2cap_disconn_req={{0x6, 0x3, 0x4}, {0xfff8, 0x1}}]}}, 0x19) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x12) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b42038000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') ioctl$TUNSETIFF(r0, 0xc0606610, 0x0) 11:52:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="401c6d6b616ff3668fed23982c20ef350400004000f8", 0x16}], 0x0, &(0x7f0000000680)=ANY=[]) 11:52:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@link_local, @remote, @val={@void, {0x500}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @multicast}}}}, 0x0) 11:52:43 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}]}}) 11:52:43 executing program 5: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000e80)) 11:52:43 executing program 7: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) [ 142.842795] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 142.849493] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 142.852631] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 142.852708] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 142.854336] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 142.855255] Bluetooth: hci1: ACL packet for unknown connection handle 201 11:52:43 executing program 7: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 11:52:43 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3305) 11:52:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@link_local, @remote, @val={@void, {0x500}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @multicast}}}}, 0x0) 11:52:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') ioctl$TUNSETIFF(r0, 0xc0606610, 0x0) 11:52:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xe) [ 142.855982] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 142.919094] random: crng reseeded on system resumption 11:52:43 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x5421, 0xffffffffffffffff) [ 142.938004] Restarting kernel threads ... [ 142.938993] Done restarting kernel threads. [ 142.949633] random: crng reseeded on system resumption 11:52:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') ioctl$TUNSETIFF(r0, 0xc0606610, 0x0) 11:52:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@link_local, @remote, @val={@void, {0x500}}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @multicast}}}}, 0x0) 11:52:43 executing program 1: fork() fork() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002ac0)) r0 = fork() r1 = geteuid() r2 = fork() r3 = getgid() r4 = fork() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002d40)=[{0x0}, {0x0}], 0x2, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x10}}], 0x90, 0x40480d4}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000003000)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f40)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x52}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_PID={0x8, 0x52, r0}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040800) move_pages(r4, 0x3, &(0x7f0000003040)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000003080)=[0x8, 0x6, 0x5535], &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0], 0x4) move_pages(r4, 0x4, &(0x7f0000003100)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000003140)=[0x4, 0x40, 0x3ff, 0x7ff], &(0x7f0000003180)=[0x0], 0x6) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000003200)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4004850) 11:52:43 executing program 7: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 11:52:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xe) 11:52:43 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='pagemap\x00') ioctl$TUNSETIFF(r0, 0xc0606610, 0x0) 11:52:43 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x4, 0x0, @fixed}}}, 0xe) 11:52:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086607, &(0x7f0000002a00)) 11:52:43 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xcdb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 11:52:43 executing program 1: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11:52:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x24}}, 0x0) 11:52:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xe) 11:52:44 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0xffffffff, 0x400}, 0x1c) 11:52:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) 11:52:44 executing program 2: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) sendfile(r1, r1, 0x0, 0x0) 11:52:44 executing program 7: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 11:52:44 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x4, 0x0, @fixed}}}, 0xe) 11:52:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xe) 11:52:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086607, &(0x7f0000002a00)) 11:52:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f0000000840)=@alg, &(0x7f00000006c0)=0x80) 11:52:44 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x4, 0x0, @fixed}}}, 0xe) 11:52:44 executing program 5: keyctl$chown(0x2, 0x0, 0x0, 0xee01) 11:52:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x1) 11:52:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 11:52:44 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001d40)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "b14868", 0x8, 0x2f, 0x0, @mcast1, @private1, {[@fragment={0x73}]}}}}}, 0x0) 11:52:44 executing program 4: unshare(0x20080) unshare(0x6020400) unshare(0x4a000080) 11:52:44 executing program 5: keyctl$chown(0x2, 0x0, 0x0, 0xee01) 11:52:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086607, &(0x7f0000002a00)) 11:52:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1=0xe0000002, @local, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1=0xe0000002, @local, @empty}, 0xc) 11:52:44 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x4, 0x0, @fixed}}}, 0xe) 11:52:44 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001d40)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "b14868", 0x8, 0x2f, 0x0, @mcast1, @private1, {[@fragment={0x73}]}}}}}, 0x0) 11:52:44 executing program 5: keyctl$chown(0x2, 0x0, 0x0, 0xee01) 11:52:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x1) 11:52:44 executing program 7: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8d) 11:52:44 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) setgroups(0x0, 0x0) 11:52:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001d40)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "b14868", 0x8, 0x2f, 0x0, @mcast1, @private1, {[@fragment={0x73}]}}}}}, 0x0) 11:52:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086607, &(0x7f0000002a00)) 11:52:44 executing program 4: unshare(0x20080) unshare(0x6020400) unshare(0x4a000080) 11:52:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 11:52:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x1) 11:52:44 executing program 3: syz_emit_ethernet(0x42, &(0x7f0000001d40)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "b14868", 0x8, 0x2f, 0x0, @mcast1, @private1, {[@fragment={0x73}]}}}}}, 0x0) 11:52:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 5: keyctl$chown(0x2, 0x0, 0x0, 0xee01) 11:52:44 executing program 7: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8d) 11:52:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 5: init_module(&(0x7f0000000080)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,', 0xffc85, 0x0) 11:52:44 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x1) 11:52:44 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) [ 143.998979] Invalid ELF header magic: != ELF [ 144.002507] Invalid ELF header magic: != ELF 11:52:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 11:52:44 executing program 7: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8d) 11:52:44 executing program 5: init_module(&(0x7f0000000080)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,', 0xffc85, 0x0) 11:52:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 4: unshare(0x20080) unshare(0x6020400) unshare(0x4a000080) 11:52:44 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f0000001840)='9', 0xfdef}, {0x0}], 0x2, 0x6, 0x0, 0x0) 11:52:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semget$private(0x0, 0x5, 0x0) [ 144.103284] Invalid ELF header magic: != ELF 11:52:44 executing program 7: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x8d) 11:52:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 11:52:44 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f0000001840)='9', 0xfdef}, {0x0}], 0x2, 0x6, 0x0, 0x0) 11:52:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 5: init_module(&(0x7f0000000080)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,', 0xffc85, 0x0) 11:52:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) close(r0) 11:52:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0) [ 144.204785] audit: type=1326 audit(1756727564.971:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5579 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc07b4fb19 code=0x0 11:52:45 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f0000001840)='9', 0xfdef}, {0x0}], 0x2, 0x6, 0x0, 0x0) 11:52:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000300)=""/173, 0xad, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x10, 0xffffffffffffffff, 0x0) 11:52:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 11:52:45 executing program 4: unshare(0x20080) unshare(0x6020400) unshare(0x4a000080) 11:52:45 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 11:52:45 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001800), 0x1, 0x0) pwritev2(r0, &(0x7f0000001b00)=[{&(0x7f0000001840)='9', 0xfdef}, {0x0}], 0x2, 0x6, 0x0, 0x0) [ 144.367743] Invalid ELF header magic: != ELF [ 144.449259] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO 11:52:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}}}, 0x7) creat(0x0, 0x0) 11:52:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 11:52:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1f, 0x80000, 0x26da, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0xf785e5d6c68bea2c, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) recvmmsg(r1, &(0x7f00000056c0)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000540)=""/13, 0xd}], 0x5, &(0x7f0000000580)=""/36, 0x24}, 0x7ff}, {{&(0x7f00000007c0)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)}, {&(0x7f0000000980)=""/131, 0x83}, {&(0x7f0000000a40)=""/201, 0xc9}], 0x4, &(0x7f0000000b80)=""/4096, 0x1000}, 0x10000}, {{&(0x7f0000001b80)=@un=@abs, 0x80, &(0x7f0000003e80)=[{&(0x7f0000001c00)=""/134, 0x86}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/74, 0x4a}, {&(0x7f0000002d40)=""/106, 0x6a}, {&(0x7f0000002dc0)=""/1, 0x1}, {&(0x7f0000002e00)=""/6, 0x6}, {&(0x7f0000002e40)=""/49, 0x31}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x8, &(0x7f0000003f00)=""/226, 0xe2}, 0x3}, {{0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000004000)=""/1, 0x1}, {&(0x7f0000004040)=""/9, 0x9}, {&(0x7f0000004080)=""/8, 0x8}, {&(0x7f00000040c0)=""/108, 0x6c}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x5, &(0x7f00000051c0)=""/115, 0x73}, 0xc4}, {{&(0x7f0000005240)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000005600)=[{&(0x7f00000052c0)=""/253, 0xfd}, {&(0x7f00000053c0)=""/35, 0x23}, {&(0x7f0000005400)=""/164, 0xa4}, {&(0x7f00000054c0)=""/47, 0x2f}, {&(0x7f0000005500)=""/56, 0x38}, {&(0x7f0000005540)=""/139, 0x8b}], 0x6, &(0x7f0000005680)=""/53, 0x35}, 0x3}], 0x5, 0x0, &(0x7f0000005800)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005a00)={0xc4, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x88, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x23, 0x0, @random="40d20de5dc17b70e4010f300c0e520b0afecdaaa4214b8321755f94fd49533"}, {0x21, 0x0, @random="df09cc20fa54e490faba5d21f8c8bed6367648d006833c5cd6c0df8d17"}, {0xc, 0x0, @random="c0433ba12178053d"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x1}}]}, 0xc4}}, 0x0) 11:52:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x4, &(0x7f0000000080), 0x4) 11:52:45 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/105) 11:52:45 executing program 5: init_module(&(0x7f0000000080)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,', 0xffc85, 0x0) 11:52:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x14}, 0x14}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000003940)='./file0\x00', 0x0, 0x0, 0x800) [ 144.557825] Invalid ELF header magic: != ELF 11:52:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0xa, 0x0) 11:52:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x14}, 0x14}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000003940)='./file0\x00', 0x0, 0x0, 0x800) 11:52:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 11:52:45 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000100)=""/214, 0xd6) 11:52:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x14}, 0x14}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000003940)='./file0\x00', 0x0, 0x0, 0x800) 11:52:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) write(r0, &(0x7f0000000400)='1', 0x80000) 11:52:45 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x572, &(0x7f0000000140)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 11:52:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}}, 0x0) 11:52:45 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/virtio_blk', 0x40040, 0x0) 11:52:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0xa, 0x0) 11:52:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x14}, 0x14}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000003940)='./file0\x00', 0x0, 0x0, 0x800) 11:52:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1d, 0x0, &(0x7f0000001180)) 11:52:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}}, 0x0) [ 145.438598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.440056] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.441362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.442774] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.444102] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.445398] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 145.446890] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 145.448254] Bluetooth: hci6: Opcode 0x0c1a failed: -4 11:52:46 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/105) 11:52:46 executing program 3: perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000000c0)) 11:52:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0xa, 0x0) 11:52:46 executing program 4: creat(&(0x7f00000003c0)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xd400080b) 11:52:46 executing program 7: r0 = memfd_create(&(0x7f0000000740)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85P\x89*\xd4\xdd\xdd\x03!\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw<\xc6F\bz\xb8\x91\x13\xf2\xe32\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xec{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\x9fz\x85\xc1\xd5R\x82\v\x1b\xea\x8fq\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\xcd\xa1\x93}\xc3\xd1\xc7\xd3\x18\xd5\xe3\xee\xe3\xcc:\xe5_\x80\xb3xd\x91.}\xd7\xf1L<,\xbfj2\'n\xf1D\xd4\xdf\xb3\xc6\xb8\xc0\x93\xado\x85\xec#Y\x81\xa2o\xf1G\xb1Fk\xe87\x84j\xe3Y\xf3\xce yD\x9c\xad\xd7\xcf\x9e\xb2~\xb0\xf7\xc8\x1e\xe1`\x9f \xbb\xfaC\xa8@\xf1\x00\xff\x7f\x19\xf3~\xa0=\x89\xd8\x94\xae\x87n\x05e\x82\xfe\xa6#\x9dy\n\xae\xde+\x8f\xa1\xe91,\x1b\r\\Z\xbf\x9e7k\x03\x00\xf9Bi\xd1\"-\xd8z|\xca\x911\v\xbc\x85\xc2\x96\x8b\xe5\xd7\x01\x00\x00\x00\xa4\xcf\x9b\x05\xe5b\xb2\x18\v\aS4\n\x10^\xb9\xe5\xff\x16', 0x2) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$addseals(r0, 0x409, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:52:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001ac0)) 11:52:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}}, 0x0) 11:52:46 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24084005) 11:52:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}}, 0x0) 11:52:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000003c0)=""/4063, 0xfdf, 0x4) 11:52:46 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0xa, 0x0) 11:52:46 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 11:52:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 11:52:46 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24084005) 11:52:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x0, 0x80000000, 0xd8}) [ 146.410172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 146.412733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 146.413898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 146.415131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 146.416179] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 146.417271] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 146.418335] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 146.419403] Bluetooth: hci6: Opcode 0x0c1a failed: -4 11:52:47 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/105) 11:52:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000300), 0x31) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) 11:52:47 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 11:52:47 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="0100", @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast}}}}, 0x0) 11:52:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 11:52:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 11:52:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24084005) 11:52:47 executing program 7: r0 = memfd_create(&(0x7f0000000740)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85P\x89*\xd4\xdd\xdd\x03!\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw<\xc6F\bz\xb8\x91\x13\xf2\xe32\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xec{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\x9fz\x85\xc1\xd5R\x82\v\x1b\xea\x8fq\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\xcd\xa1\x93}\xc3\xd1\xc7\xd3\x18\xd5\xe3\xee\xe3\xcc:\xe5_\x80\xb3xd\x91.}\xd7\xf1L<,\xbfj2\'n\xf1D\xd4\xdf\xb3\xc6\xb8\xc0\x93\xado\x85\xec#Y\x81\xa2o\xf1G\xb1Fk\xe87\x84j\xe3Y\xf3\xce yD\x9c\xad\xd7\xcf\x9e\xb2~\xb0\xf7\xc8\x1e\xe1`\x9f \xbb\xfaC\xa8@\xf1\x00\xff\x7f\x19\xf3~\xa0=\x89\xd8\x94\xae\x87n\x05e\x82\xfe\xa6#\x9dy\n\xae\xde+\x8f\xa1\xe91,\x1b\r\\Z\xbf\x9e7k\x03\x00\xf9Bi\xd1\"-\xd8z|\xca\x911\v\xbc\x85\xc2\x96\x8b\xe5\xd7\x01\x00\x00\x00\xa4\xcf\x9b\x05\xe5b\xb2\x18\v\aS4\n\x10^\xb9\xe5\xff\x16', 0x2) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$addseals(r0, 0x409, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:52:47 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 11:52:47 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24084005) 11:52:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 11:52:47 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb14, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) 11:52:47 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mlock2(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x0) mbind(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 11:52:47 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 11:52:47 executing program 3: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') 11:52:47 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) [ 147.397326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.399512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.401115] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.403123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.404827] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.406689] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 147.409400] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 147.420881] Bluetooth: hci6: Opcode 0x0c1a failed: -4 11:52:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x0) 11:52:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb14, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) 11:52:48 executing program 6: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000180)=""/105) 11:52:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x3, 0x0, &(0x7f0000000980)) 11:52:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2282, &(0x7f0000000000)) 11:52:48 executing program 7: r0 = memfd_create(&(0x7f0000000740)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85P\x89*\xd4\xdd\xdd\x03!\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw<\xc6F\bz\xb8\x91\x13\xf2\xe32\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xec{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\x9fz\x85\xc1\xd5R\x82\v\x1b\xea\x8fq\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\xcd\xa1\x93}\xc3\xd1\xc7\xd3\x18\xd5\xe3\xee\xe3\xcc:\xe5_\x80\xb3xd\x91.}\xd7\xf1L<,\xbfj2\'n\xf1D\xd4\xdf\xb3\xc6\xb8\xc0\x93\xado\x85\xec#Y\x81\xa2o\xf1G\xb1Fk\xe87\x84j\xe3Y\xf3\xce yD\x9c\xad\xd7\xcf\x9e\xb2~\xb0\xf7\xc8\x1e\xe1`\x9f \xbb\xfaC\xa8@\xf1\x00\xff\x7f\x19\xf3~\xa0=\x89\xd8\x94\xae\x87n\x05e\x82\xfe\xa6#\x9dy\n\xae\xde+\x8f\xa1\xe91,\x1b\r\\Z\xbf\x9e7k\x03\x00\xf9Bi\xd1\"-\xd8z|\xca\x911\v\xbc\x85\xc2\x96\x8b\xe5\xd7\x01\x00\x00\x00\xa4\xcf\x9b\x05\xe5b\xb2\x18\v\aS4\n\x10^\xb9\xe5\xff\x16', 0x2) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$addseals(r0, 0x409, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:52:48 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@ipv4}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:48 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb14, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) 11:52:48 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) 11:52:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f0000000080)="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", 0xa40) [ 148.396975] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 148.398490] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 148.400855] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 148.402298] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 148.403767] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 148.405585] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 148.407148] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 148.408721] Bluetooth: hci6: Opcode 0x0c1a failed: -4 11:52:49 executing program 7: r0 = memfd_create(&(0x7f0000000740)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85P\x89*\xd4\xdd\xdd\x03!\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw<\xc6F\bz\xb8\x91\x13\xf2\xe32\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xec{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\x9fz\x85\xc1\xd5R\x82\v\x1b\xea\x8fq\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc\xcd\xa1\x93}\xc3\xd1\xc7\xd3\x18\xd5\xe3\xee\xe3\xcc:\xe5_\x80\xb3xd\x91.}\xd7\xf1L<,\xbfj2\'n\xf1D\xd4\xdf\xb3\xc6\xb8\xc0\x93\xado\x85\xec#Y\x81\xa2o\xf1G\xb1Fk\xe87\x84j\xe3Y\xf3\xce yD\x9c\xad\xd7\xcf\x9e\xb2~\xb0\xf7\xc8\x1e\xe1`\x9f \xbb\xfaC\xa8@\xf1\x00\xff\x7f\x19\xf3~\xa0=\x89\xd8\x94\xae\x87n\x05e\x82\xfe\xa6#\x9dy\n\xae\xde+\x8f\xa1\xe91,\x1b\r\\Z\xbf\x9e7k\x03\x00\xf9Bi\xd1\"-\xd8z|\xca\x911\v\xbc\x85\xc2\x96\x8b\xe5\xd7\x01\x00\x00\x00\xa4\xcf\x9b\x05\xe5b\xb2\x18\v\aS4\n\x10^\xb9\xe5\xff\x16', 0x2) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfffffd1f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) fcntl$addseals(r0, 0x409, 0x0) fcntl$addseals(r0, 0x409, 0x0) 11:52:49 executing program 5: io_setup(0x8, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r2, 0x0) io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}]) 11:52:49 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb14, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4) 11:52:49 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 11:52:49 executing program 1: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 11:52:49 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@ipv4}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:49 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 11:52:49 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:49 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 11:52:49 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 11:52:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) 11:52:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0xd) [ 148.701557] audit: type=1400 audit(1756727569.470:17): avc: denied { watch_reads } for pid=5779 comm="syz-executor.0" path="/syzkaller-testdir024785754/syzkaller.mcVXTa/102/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1 11:52:49 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@ipv4}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:49 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 11:52:49 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 11:52:49 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 11:52:49 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x3, 0x2f) sendmsg$802154_dgram(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)="a85cf4", 0x3}}, 0x0) 11:52:49 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) 11:52:49 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) [ 149.157632] ieee802154 phy0 wpan0: encryption failed: -22 11:52:49 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) 11:52:49 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x0, @in6=@ipv4}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:49 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) 11:52:50 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:50 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 11:52:50 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 11:52:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) [ 149.382985] loop5: detected capacity change from 0 to 6 [ 149.399464] FAT-fs (loop5): Directory bread(block 6) failed [ 149.404771] FAT-fs (loop5): Directory bread(block 7) failed 11:52:50 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)) [ 149.411997] FAT-fs (loop5): Directory bread(block 8) failed [ 149.414052] FAT-fs (loop5): Directory bread(block 9) failed [ 149.469360] FAT-fs (loop5): Directory bread(block 138) failed [ 149.474614] FAT-fs (loop5): Directory bread(block 139) failed [ 149.475616] FAT-fs (loop5): Directory bread(block 140) failed [ 149.484170] FAT-fs (loop5): Directory bread(block 141) failed [ 149.488249] FAT-fs (loop5): Directory bread(block 142) failed [ 149.501601] FAT-fs (loop5): Directory bread(block 143) failed [ 149.510099] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 149.511128] FAT-fs (loop5): Filesystem has been set read-only 11:52:50 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 11:52:50 executing program 7: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)='T\f', 0x2}], 0x1}, 0x20008000) sendmmsg$inet(r0, &(0x7f0000001fc0)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000240)="06d5", 0x2}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}}, {{&(0x7f0000000a40)={0x2, 0x0, @dev}, 0x10, 0x0}}], 0x2, 0x0) 11:52:50 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[]) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b) inotify_rm_watch(r1, r2) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 11:52:50 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 11:52:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 11:52:50 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000a40)=@md0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='hugetlbfs\x00', 0x0, 0x0) 11:52:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) getsockopt$packet_buf(r0, 0x107, 0x12, 0x0, &(0x7f0000000240)) [ 149.630615] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.632624] loop5: detected capacity change from 0 to 6 [ 149.645790] FAT-fs (loop5): Directory bread(block 6) failed [ 149.646357] FAT-fs (loop5): Directory bread(block 7) failed [ 149.648361] FAT-fs (loop5): Directory bread(block 8) failed [ 149.650577] FAT-fs (loop5): Directory bread(block 9) failed [ 149.675088] loop4: detected capacity change from 0 to 6 [ 149.680520] FAT-fs (loop5): Directory bread(block 138) failed [ 149.685739] FAT-fs (loop5): Directory bread(block 139) failed [ 149.686334] FAT-fs (loop5): Directory bread(block 140) failed [ 149.692855] FAT-fs (loop5): Directory bread(block 141) failed [ 149.693480] FAT-fs (loop5): Directory bread(block 142) failed 11:52:50 executing program 0: syz_emit_ethernet(0xfc0, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0xf8a, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @loopback, [{0x0, 0x3, "3a2af52908548e916284cd8daa1919f66398a9a69bd2e9"}, {0x0, 0x1eb, "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"}]}}}}}}, 0x0) [ 149.698570] FAT-fs (loop5): Directory bread(block 143) failed [ 149.699823] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 149.700800] FAT-fs (loop5): Filesystem has been set read-only 11:52:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) [ 149.734805] FAT-fs (loop4): Directory bread(block 6) failed [ 149.735614] FAT-fs (loop4): Directory bread(block 7) failed 11:52:50 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) [ 149.747765] FAT-fs (loop4): Directory bread(block 8) failed [ 149.748338] FAT-fs (loop4): Directory bread(block 9) failed 11:52:50 executing program 7: r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x7) lseek(r0, 0x0, 0x3) 11:52:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 11:52:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x10000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3910, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) 11:52:50 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x127800, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x200, 0x600}, {&(0x7f0000010400)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010a00)="ff43443030310100"/32, 0x20, 0x8800}, {&(0x7f0000010b00)="01001700000001000000050018000000010046494c4530000000000000000000", 0x20, 0x9800}, {&(0x7f0000010c00)="01000000001700010000050000000018000146494c4530000000000000000000", 0x20, 0xa800}, {&(0x7f0000010d00)="2200170000000000001700080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012c00190000000000001964000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600180000000000001800080000000008007809140b2a3a08020000010000010546494c45302a001a0000000000001a0a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001b0000000000001b28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a00200000000000002028230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0xb800}, {&(0x7f0000010f00)="2200180000000000001800080000000008007809140b2a3a080200000100000101002200170000000000001700080000000008007809140b2a3a080200000100000101012a0025000000000000251a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0xc000}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xc800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0xd000}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12800}, {&(0x7f0000011700)="000000000000000001000003000000000000000000000000000000000000000002000007000000300000002f00"/64, 0x40, 0xc8000}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xc80e0}, {&(0x7f0000011900)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xc81e0}, {&(0x7f0000011a00)="00000000000000000100000300000002000000030000000b000000010000000402000025000000600000005b00"/64, 0x40, 0xce000}, {&(0x7f0000011b00)="000000000000000000000000000000000000000000000000f800000000000000", 0x20, 0xce0e0}, {&(0x7f0000011c00)="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"/1216, 0x4c0, 0xce1e0}, {&(0x7f0000012100)="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", 0x220, 0xce7e0}, {&(0x7f0000012400)="00000000000000000000000000000000000000000000000041e1000000000000", 0x20, 0xcfbc0}, {&(0x7f0000012500)="000000000000000001000003000000000000000000000000000000000000000002000025000000100000000f00000000200000ff00"/64, 0x40, 0xda000}, {&(0x7f0000012600)="000000000000000000000000000000000000000000000000020a010000000000", 0x20, 0xda060}, {&(0x7f0000012700)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xda0e0}, {&(0x7f0000012800)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xda1e0}, {&(0x7f0000012900)="4244db8cf0c2db8cf0c2010000000003002401b800000800000020000004000000100194054344524f4d0000000000000000000000000000000000000000000000000000000000000005000060000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000c00000000000000000000c000000c0018000000000000", 0xa0, 0xdc000}], 0x0, &(0x7f0000012a00)) [ 149.801229] FAT-fs (loop4): Directory bread(block 138) failed [ 149.802173] FAT-fs (loop4): Directory bread(block 139) failed [ 149.805929] FAT-fs (loop4): Directory bread(block 140) failed [ 149.811607] FAT-fs (loop4): Directory bread(block 141) failed [ 149.813325] FAT-fs (loop4): Directory bread(block 142) failed [ 149.813943] FAT-fs (loop4): Directory bread(block 143) failed [ 149.823628] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 149.824324] FAT-fs (loop4): Filesystem has been set read-only [ 149.874223] loop5: detected capacity change from 0 to 6 [ 149.883686] FAT-fs (loop5): Directory bread(block 6) failed [ 149.885492] FAT-fs (loop5): Directory bread(block 7) failed [ 149.886508] FAT-fs (loop5): Directory bread(block 8) failed [ 149.890623] FAT-fs (loop5): Directory bread(block 9) failed [ 149.907004] FAT-fs (loop5): Directory bread(block 138) failed [ 149.909604] FAT-fs (loop5): Directory bread(block 139) failed [ 149.911267] FAT-fs (loop5): Directory bread(block 140) failed [ 149.912033] FAT-fs (loop5): Directory bread(block 141) failed [ 149.914650] FAT-fs (loop5): Directory bread(block 142) failed [ 149.916463] FAT-fs (loop5): Directory bread(block 143) failed [ 149.918013] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 149.918664] FAT-fs (loop5): Filesystem has been set read-only 11:52:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000001ac0)={0x2, 0x200, @broadcast}, 0x10) 11:52:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 11:52:50 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 11:52:50 executing program 7: clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, r0/1000+60000}}, 0x0) 11:52:50 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) 11:52:50 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 11:52:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x10000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3910, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) 11:52:50 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) [ 150.248790] loop4: detected capacity change from 0 to 6 [ 150.252380] loop5: detected capacity change from 0 to 6 [ 150.260173] FAT-fs (loop4): Directory bread(block 6) failed [ 150.263134] FAT-fs (loop4): Directory bread(block 7) failed [ 150.266894] FAT-fs (loop4): Directory bread(block 8) failed [ 150.267428] FAT-fs (loop4): Directory bread(block 9) failed [ 150.275098] FAT-fs (loop5): Directory bread(block 6) failed [ 150.275631] FAT-fs (loop5): Directory bread(block 7) failed [ 150.276283] FAT-fs (loop5): Directory bread(block 8) failed [ 150.290097] FAT-fs (loop5): Directory bread(block 9) failed [ 150.296296] FAT-fs (loop4): Directory bread(block 138) failed [ 150.307259] FAT-fs (loop4): Directory bread(block 139) failed [ 150.308155] FAT-fs (loop5): Directory bread(block 138) failed [ 150.308191] FAT-fs (loop5): Directory bread(block 139) failed [ 150.308204] FAT-fs (loop5): Directory bread(block 140) failed [ 150.310314] FAT-fs (loop5): Directory bread(block 141) failed 11:52:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 11:52:51 executing program 7: syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@journal_path={'journal_path', 0x3d, './file1'}}]}) 11:52:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) 11:52:51 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) [ 150.314440] FAT-fs (loop5): Directory bread(block 142) failed [ 150.314950] FAT-fs (loop5): Directory bread(block 143) failed [ 150.316563] FAT-fs (loop4): Directory bread(block 140) failed [ 150.318006] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 150.318580] FAT-fs (loop5): Filesystem has been set read-only [ 150.321591] FAT-fs (loop4): Directory bread(block 141) failed [ 150.322138] FAT-fs (loop4): Directory bread(block 142) failed [ 150.323633] FAT-fs (loop4): Directory bread(block 143) failed [ 150.329109] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 150.329771] FAT-fs (loop4): Filesystem has been set read-only [ 150.340028] journal_path: Lookup failure for './file1' [ 150.340672] EXT4-fs: error: could not find journal device path 11:52:51 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 150.349863] journal_path: Lookup failure for './file1' [ 150.350330] EXT4-fs: error: could not find journal device path [ 150.399079] Bluetooth: hci2: command 0x0c1a tx timeout 11:52:51 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8fffffff0ff", 0x26, 0x1e0}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010000ee870325132510000e870325103", 0x5b, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) 11:52:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 11:52:51 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) 11:52:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@polexpire={0xc0, 0x1b, 0x3, 0x0, 0x0, {{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0xc0}}, 0x0) [ 150.462668] Bluetooth: hci6: command 0x0c1a tx timeout [ 150.463168] Bluetooth: hci7: command 0x0c1a tx timeout [ 150.463688] Bluetooth: hci5: command 0x0c1a tx timeout [ 150.464110] Bluetooth: hci4: command 0x0c1a tx timeout [ 150.464558] Bluetooth: hci3: command 0x0c1a tx timeout [ 150.464969] Bluetooth: hci1: command 0x0c1a tx timeout 11:52:51 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 11:52:51 executing program 0: timerfd_create(0x0, 0x0) 11:52:51 executing program 4: kexec_load(0x0, 0x0, 0x0, 0x3e0000) 11:52:51 executing program 6: syz_mount_image$nfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@reiserfs_2={0x8}, &(0x7f0000000180), 0x3) 11:52:51 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 11:52:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15, 0x0, 0x0, 0x2}, {0x6}]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:52:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1f) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5b1b9ca02e3538d0f1ccdd3a8f1f0e69831a50"}) 11:52:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x10000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3910, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) [ 150.628483] audit: type=1326 audit(1756727571.397:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5912 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef74f78b19 code=0x0 11:52:51 executing program 4: kexec_load(0x0, 0x0, 0x0, 0x3e0000) 11:52:51 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) splice(r3, 0x0, r1, 0x0, 0x801, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 151.460721] audit: type=1326 audit(1756727572.229:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5912 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef74f78b19 code=0x0 11:52:52 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x40800) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 11:52:52 executing program 1: setpriority(0x3, 0x0, 0x0) 11:52:52 executing program 0: r0 = msgget$private(0x0, 0x400) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/4096) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001000)=""/108) r1 = msgget(0x0, 0x100) msgrcv(r1, &(0x7f0000001300)={0x0, ""/150}, 0x9e, 0x3, 0x3000) 11:52:52 executing program 4: kexec_load(0x0, 0x0, 0x0, 0x3e0000) 11:52:52 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 11:52:52 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) getdents64(r0, 0x0, 0x0) 11:52:52 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) splice(r3, 0x0, r1, 0x0, 0x801, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0x10000, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3910, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) truncate(&(0x7f00000001c0)='./file0\x00', 0x1) 11:52:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 11:52:52 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 11:52:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) accept(r0, 0x0, 0x0) 11:52:52 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) splice(r3, 0x0, r1, 0x0, 0x801, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:52 executing program 4: kexec_load(0x0, 0x0, 0x0, 0x3e0000) 11:52:52 executing program 1: setpriority(0x3, 0x0, 0x0) 11:52:52 executing program 2: semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000000000)=""/4096) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000001000)=""/110) r0 = semget(0x2, 0x3, 0x200) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000001080)=[0x5, 0x3, 0x3, 0x5]) r1 = semget$private(0x0, 0x4, 0x92) semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f00000010c0)=""/48) r2 = semget$private(0x0, 0x4, 0x100) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000001100)=""/185) semctl$GETNCNT(r1, 0x4, 0xe, &(0x7f00000011c0)=""/48) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000001200)=""/199) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000001300)=""/253) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000001400)) r3 = semget(0x2, 0x4, 0x18) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000001440)=[0x8001, 0x5, 0x2, 0x8, 0x7200]) r4 = semget(0x0, 0x3, 0x290) semctl$IPC_RMID(r4, 0x0, 0x0) 11:52:52 executing program 5: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) 11:52:52 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) splice(r3, 0x0, r1, 0x0, 0x801, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11:52:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8912, &(0x7f00000002c0)) 11:52:53 executing program 1: setpriority(0x3, 0x0, 0x0) 11:52:53 executing program 7: r0 = inotify_init() r1 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x400) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8912, &(0x7f00000002c0)) 11:52:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) 11:52:53 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 11:52:53 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 11:52:53 executing program 0: pselect6(0x2a, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 11:52:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 11:52:53 executing program 1: setpriority(0x3, 0x0, 0x0) 11:52:53 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 11:52:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 11:52:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8912, &(0x7f00000002c0)) 11:52:53 executing program 7: r0 = inotify_init() r1 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x400) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/sockstat6\x00') sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 11:52:53 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 11:52:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}], 0x0, &(0x7f0000010d00)) 11:52:53 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 11:52:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 11:52:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8912, &(0x7f00000002c0)) 11:52:53 executing program 0: semtimedop(0x0, &(0x7f0000000100)=[{}, {0x3}], 0x2, 0x0) 11:52:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/sockstat6\x00') sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 11:52:53 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 11:52:53 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 11:52:53 executing program 7: r0 = inotify_init() r1 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x400) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 11:52:53 executing program 1: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8100) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0xfffffffc) openat$autofs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000580)={{0x80, 0x3}, 0x100, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x559e82, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 11:52:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/sockstat6\x00') sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 11:52:53 executing program 7: r0 = inotify_init() r1 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x400) creat(&(0x7f0000000040)='./file0\x00', 0x0) 11:52:53 executing program 2: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 11:52:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 11:52:53 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0910ed28a8069eee8d5ec63ec962de8a31bc27ff8a659465544ce3e6ae6cc95155f6ed48e0d0452c28ba120aecaf5a7c0e52d363ccbd6ca29bdcb0bd0c69a509"}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 11:52:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 11:52:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/sockstat6\x00') sendmsg$SMC_PNETID_FLUSH(r0, 0x0, 0x0) 11:52:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:52:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f00000003c0)="9ce37444571605a999f5e8d75d62c8eee012b4b3061ca412211098d885b04a8928f7cd182aa898e41d705af62ccdf20880131b0caef0e1b71b44fbf5834753b0d619e3b470aa23c2478f982026958123cd8bf045b78bdb27c0e1d229b7ddec5b5737c59a485643c61827c2cdf161dacf00a57374966885e346434dd0eae1f4d328ec30db0ea92ae2a80d58b46ec41333792e0ad5d7cb0ec900da42d99819917e7b03c17fdbeb23b761d635b446769d0ec4d9e4236440898fa257e336b3bbea242c191fa6afaf86ba1a04769783589256f7d2f1c05243ddc5c383b0d6eb8e60bf70c61fe39b6c7caa88525197f32545030be28f5e4fa0f46b0f7a0d3ae03d7d92", 0x100) 11:52:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 11:52:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 11:52:54 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) 11:52:54 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f00000004c0), &(0x7f0000000500)=@v3={0x3000000, [], 0xffffffffffffffff}, 0x18, 0x0) 11:52:54 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0910ed28a8069eee8d5ec63ec962de8a31bc27ff8a659465544ce3e6ae6cc95155f6ed48e0d0452c28ba120aecaf5a7c0e52d363ccbd6ca29bdcb0bd0c69a509"}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 11:52:54 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000004780)) 11:52:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 11:52:54 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0910ed28a8069eee8d5ec63ec962de8a31bc27ff8a659465544ce3e6ae6cc95155f6ed48e0d0452c28ba120aecaf5a7c0e52d363ccbd6ca29bdcb0bd0c69a509"}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 11:52:54 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) 11:52:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) 11:52:54 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000004780)) 11:52:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mprotect(&(0x7f0000401000/0x2000)=nil, 0x2000, 0x0) 11:52:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:52:54 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000004780)) 11:52:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) 11:52:54 executing program 6: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "0910ed28a8069eee8d5ec63ec962de8a31bc27ff8a659465544ce3e6ae6cc95155f6ed48e0d0452c28ba120aecaf5a7c0e52d363ccbd6ca29bdcb0bd0c69a509"}, 0x48, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 11:52:54 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) 11:52:54 executing program 3: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="03c900009e14e837273701de118d8aad382a2ee9f865767a450b0ce0497a1c7e0977a673802bf56b874c3aea0b1fe4876f06be57ef79f965a7f1cd1fe1bf9d46e29255c8a58c47488ca00c00eba31c89ba1c40cc01a08ed8d37aee0b442f5785ab6dc4342378839eccb5677f44a43dbfcc9bb9375ab873a1cd04b29c15780d1823f686e4bdb209c750cade7ba758bd4f6520c2fd1f9d427d54142daacb9c16270cfa6d8599d58c72f2a4629f75fb238c3929315cca3b888643088fe02670d8c07a5a06e7e8d1ee8ff9a20b5da168f7d6737e0a5d0583471a33fad62a4e3f0a01c8a65466d810ef3d82a57e4c196a2ea8f477fb59036f1e1616cfaa68735835dfdd644f144f4d78da2edb3a32707d1816baa4c603a978c9446174a83b460b157556bfb4dd1204f0aead"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mprotect(&(0x7f0000401000/0x2000)=nil, 0x2000, 0x0) 11:52:54 executing program 1: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) 11:52:54 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000004780)) 11:52:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:52:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:52:54 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7fff, 0x5, 0x0, 0x8, 0x0, "1255f7597ab49bf8"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) [ 153.815869] Bluetooth: hci1: unexpected event for opcode 0x100c [ 153.820619] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 153.822701] Bluetooth: hci1: unexpected event for opcode 0x0400 [ 153.824864] Bluetooth: hci1: SCO packet for unknown connection handle 200 11:52:54 executing program 5: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6002, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)={0xffffffffffffb7a2, 0x1, 0x3, 0x7, 0x7, [{0x10000, 0x80, 0x401, '\x00', 0x1301}, {0xfffffffffffffffe, 0x6, 0x8, '\x00', 0x1}, {0x7, 0x5, 0x9, '\x00', 0x800}, {0xffffffffffffffff, 0x0, 0x6, '\x00', 0x2400}, {0xffffffff, 0xffffffffffff0000, 0x1, '\x00', 0x2085}, {0x81, 0x6, 0x8, '\x00', 0x2980}, {0x3, 0x101, 0x0, '\x00', 0x80}]}) [ 153.825439] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 153.831056] Bluetooth: hci1: ACL packet for unknown connection handle 201 11:52:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:52:54 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 153.832448] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 153.979820] Bluetooth: hci1: unexpected event for opcode 0x100c [ 153.987192] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 153.987843] Bluetooth: hci1: unexpected event for opcode 0x0400 [ 153.988358] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 153.988416] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 153.989040] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 153.990495] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 154.047626] unregister_netdevice: waiting for lo to become free. Usage count = 0 11:52:54 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7fff, 0x5, 0x0, 0x8, 0x0, "1255f7597ab49bf8"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 11:52:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mprotect(&(0x7f0000401000/0x2000)=nil, 0x2000, 0x0) 11:52:54 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x200000, 0x0) bind$inet6(r0, 0x0, 0x0) 11:52:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 11:52:54 executing program 3: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:54 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 11:52:54 executing program 7: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:54 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 154.109627] Bluetooth: hci1: unexpected event for opcode 0x100c [ 154.110359] Bluetooth: hci5: unexpected event for opcode 0x100c [ 154.110403] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 154.110455] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 154.111338] Bluetooth: hci5: unexpected event for opcode 0x0400 [ 154.115558] Bluetooth: hci1: unexpected event for opcode 0x0400 [ 154.116180] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 154.118637] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 154.119714] Bluetooth: hci5: SCO packet for unknown connection handle 201 [ 154.126704] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 154.136714] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 154.138597] Bluetooth: hci5: ACL packet for unknown connection handle 201 11:52:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r0, &(0x7f0000000200)) 11:52:54 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7fff, 0x5, 0x0, 0x8, 0x0, "1255f7597ab49bf8"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 11:52:54 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) mprotect(&(0x7f0000401000/0x2000)=nil, 0x2000, 0x0) 11:52:54 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 11:52:55 executing program 0: umount2(0x0, 0xf6f47599233e8506) 11:52:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x572, &(0x7f0000000140)=0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)="c9", 0x1}]) 11:52:55 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 11:52:55 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7fff, 0x5, 0x0, 0x8, 0x0, "1255f7597ab49bf8"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 11:52:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:52:55 executing program 3: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 154.447932] Bluetooth: hci1: unexpected event for opcode 0x100c [ 154.450286] Bluetooth: hci1: ACL packet for unknown connection handle 200 11:52:55 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) [ 154.453611] Bluetooth: hci1: unexpected event for opcode 0x0400 11:52:55 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1021085, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x28000, 0x0) 11:52:55 executing program 7: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:55 executing program 6: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) [ 154.471576] Bluetooth: hci1: ACL packet for unknown connection handle 201 11:52:55 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 11:52:55 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) 11:52:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0x8001) [ 154.566022] Bluetooth: hci5: unexpected event for opcode 0x100c [ 154.567224] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 154.571558] Bluetooth: hci5: unexpected event for opcode 0x0400 [ 154.586925] Bluetooth: hci5: ACL packet for unknown connection handle 201 11:52:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0x8001) 11:52:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:52:55 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/18) 11:52:55 executing program 2: syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@block}]}) 11:52:55 executing program 7: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 11:52:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000080)="add176fd18e8d85c98cf9586689cb0c6472de50db9306a43f1a0f561cde9ce1524df0d44a17877e54d7a19bfb7b81e2a6d955dcc9ee40efa03b6ca85edafbe67554d9f0997c720db58d1daf4bc2ccadf65b14022e56f9275edcc44f8d578119f", 0x60}, {&(0x7f0000000700)="63a8544c060000001a49ad1dd5fbc344b1ef32463c9cc29ae63d360e894327d3825a0adee47e1a21da1b8a21c09017493959a73a9f21f8810f82b885f0088d1d97832f11661fb66f5a093fd7f1d1db85cea3aec5e28c463a2f6e2cc6507d1bde945e95986ced97f07a14f66ee1473cc9dc4322aa865c3d739a065db09a007bfb46be6c04c50efcba99d42ebd165094ab0307b6626100eaddf7c22e6f8c9ee0a456a1523d1251cf6daa36e95fe32b72b5cfe98c324f1a8d4da6df5b0ec0167830ab9127ef144bb397c5e8ad4cf0e170a36ef360490893e83b5a4b59f5b990875a382dc6b0b5ad59f552a44161e3f384", 0xef}, {&(0x7f0000000100)="011b0bc7fc29ce89ef6f206adf67cad40912e17ebe9578b8963a", 0x1a}, {&(0x7f0000000280)="eb1f30142ba292c625d3e7fa5fd720beb44301aa5dec5340b54263df8466204926321ed7375fdb498a7bd4d5e1808d2805033f77aadd9ae64c4991fde2575d0f633ecd8d4c689c11c31a30cc58e0441e3ad63a3a1472cfb1e5e99ba189cf9099e6a1e63d5b51d44dac74b995617664daead3de3ed77277f6887e8d864b0ebb93fde208a82ec081d6bbc372c109d25756d580e9451114dd25d072a7de93f5af5605ba03551097825d024f1c29add179a20f3bfdef5bcff534927f92c9830ad55e1b58c3be458a2b2ae7cedf3bff3a7e7765f4d6c84e2885806e06efcc08ee03e23bf165490e41cd41de0b0cb48618e51fe7b7f4c111ff982860b70829a4fa971130b585d2b410200917303618060f9187b0bd952d2d147aef5ff4696d63fb87e606e1290e638d5796315638c4ad6d34366e053f6379b0d7c1960594948d9a9fb7959b610b168feb95ea021417eb9115c464b1ddd7251489776a94f4248885ab2383ec175d208304459fb12d937602e0308dd36d49e5b09e4f9b7801d4df0f9339d5ae17902e09b8b4934b1873c4821c45d625b58b03389f6555d5e54ddc94f318e7ecc9229fb94e7c47c9f3b7604c7a9f5e92d79ad840a8e87db9bf7632eda96a74ebc1cc930a94d7c0d9bac238afd126dc3637571ddb2397177fbf5a4ff5a960bea2bdb20b71d30cddac7989d3659f9de2b6edac077b300d50dac5c9cad7ad9122ef6e572212ea752022e578b542db3b68d208c3e505e08eb44e1a95fb31814656994ac87d48a1c7953e50772e7974b89297091823af40ee5c1a0485b58fde537388065b6e41ac009020f404b5f77a068269a574ed954e810da2984fa6129401e395c50979b8dbae4b518f54fca84360678497744a74c4ba880291b2fa974c0662acaba5a9c0fa28cb704ee3556c37993d1525c26dc9f004fe2449facb21928083a4b302f3a04a638085a13e2d21b22eee2127dd956f6b3466e26a7d86f1e5614145cf33ecad8d545c364e20ed97c7933e522a983e0a011d564e6006d0f343ce08e5de65189eb2de5b8a40c82da74c7ee0a7e7cfc7e996a37e848a0d7e82bca457e60bfd4389d9335c6c03739b4479bdcc1fdfc92618467cf4b2ec68828aa1f6942b904e4e102fc85c94891ad07aa8e63a2d6298f103c810ce840b5965315bb0a9f8e1185af0f11ff968ce8a9e9aaec60b684a175a06690db7994998fe4c09aabc073c59840e9f65b144bb9e5e379a44bf79c3f31df4a73aa3b4bff250848f4a429093fb02a10af511c0c63e202fcdba0ba20f24568082902e6005dc7ef423cc359f203c51595eda07133c348ce0e5f731617cd9177d17b4f875aa2ac3d944351b067f476199b40ae69476e17f67217335af8eb4e38afd29cd5e0a2e3081d19d4255e259a1f6be94686fc12488ec391af4be70e29eb70307b441d71c5c21bf336ba9ca86891665de6c723ceb5af9221b362f81e43eec7256ec1ce3366044afeda98eeb72d3baf00755af74241853b07d2ccb83ad2971a847471befd81079da6688f8df6d", 0x444}], 0x4}}], 0x1, 0x0) 11:52:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="ff", 0x1}], 0x1}, 0x0) readv(r1, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/210, 0xd2}], 0x1) 11:52:55 executing program 3: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x8, 0x4, 0x7, 0xffff}}]}}, 0x15) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa2}, "3b9d1d50823db5e2e49ba1f7c2a596412882a4a358c2aadd49ebbc0ac1086a7fd8d8a2ce0e22630aca0a5a00a708b5785800dc05cbd28b2f73d04ea40222b037b3f53c82bee4a2c5a30c7afbe4259ace371f82e3a651cf064f90a3b1d64cee29c1e1c666def7bc6ee3c62ffbbfa31f6b97f5ea0a3dd6597d746320e598031b2cceddb4adc829a1ee1c1119d4eb41939be2f9c119b1c38aef5742e35b2b5de861e4da"}, 0xa6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f0000000740)=ANY=[@ANYBLOB="fd7ea2ae431801ca0fe5d5c51f9d4dfcb43d73de5b3dac2d50f528007eb52b8ecdef2d4fa6910711f969346060f1a2750350be4a656348f24f00f5b33119828ef18a5ed3d65488539f7db93908d9b0a695193951648af11df5f28807f2a4224beee75beb63bd391060f79d40d284cd75d9581334fb07"], 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1fb, 0x2000) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c9e00a8da2fc2600131b02008000"], 0xf) syz_emit_vhci(&(0x7f0000000500)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "b85bd39cdd9c8132caf9a52aaed54f1beac66b0d20609795f390b6e6bd67517df18abe884c05ed0745a531794b2f525f129dab6f54a99c60c7e214bf21b034e69f08e326aef661b51cb4e9cd7eeb3572dd65d0bb6a60899dde430f28eb92f08f1a14ea87df5dec048a0b787386a6a3b5216632f1f1a8f5be29ffb813b5b0c5905eb9d38e163ef73386531ce3"}, 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) [ 154.824333] Bluetooth: hci1: unexpected event for opcode 0x100c [ 154.825630] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 154.826340] Bluetooth: hci1: unexpected event for opcode 0x0400 [ 154.833775] Bluetooth: hci5: unexpected event for opcode 0x100c [ 154.834384] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 154.835222] Bluetooth: hci5: unexpected event for opcode 0x0400 [ 154.836004] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 154.846337] Bluetooth: hci5: ACL packet for unknown connection handle 201 11:52:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000080)="add176fd18e8d85c98cf9586689cb0c6472de50db9306a43f1a0f561cde9ce1524df0d44a17877e54d7a19bfb7b81e2a6d955dcc9ee40efa03b6ca85edafbe67554d9f0997c720db58d1daf4bc2ccadf65b14022e56f9275edcc44f8d578119f", 0x60}, {&(0x7f0000000700)="63a8544c060000001a49ad1dd5fbc344b1ef32463c9cc29ae63d360e894327d3825a0adee47e1a21da1b8a21c09017493959a73a9f21f8810f82b885f0088d1d97832f11661fb66f5a093fd7f1d1db85cea3aec5e28c463a2f6e2cc6507d1bde945e95986ced97f07a14f66ee1473cc9dc4322aa865c3d739a065db09a007bfb46be6c04c50efcba99d42ebd165094ab0307b6626100eaddf7c22e6f8c9ee0a456a1523d1251cf6daa36e95fe32b72b5cfe98c324f1a8d4da6df5b0ec0167830ab9127ef144bb397c5e8ad4cf0e170a36ef360490893e83b5a4b59f5b990875a382dc6b0b5ad59f552a44161e3f384", 0xef}, {&(0x7f0000000100)="011b0bc7fc29ce89ef6f206adf67cad40912e17ebe9578b8963a", 0x1a}, {&(0x7f0000000280)="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", 0x444}], 0x4}}], 0x1, 0x0) 11:52:55 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/18) 11:52:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 11:52:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:52:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0x8001) 11:52:55 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/18) 11:52:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000080)="add176fd18e8d85c98cf9586689cb0c6472de50db9306a43f1a0f561cde9ce1524df0d44a17877e54d7a19bfb7b81e2a6d955dcc9ee40efa03b6ca85edafbe67554d9f0997c720db58d1daf4bc2ccadf65b14022e56f9275edcc44f8d578119f", 0x60}, {&(0x7f0000000700)="63a8544c060000001a49ad1dd5fbc344b1ef32463c9cc29ae63d360e894327d3825a0adee47e1a21da1b8a21c09017493959a73a9f21f8810f82b885f0088d1d97832f11661fb66f5a093fd7f1d1db85cea3aec5e28c463a2f6e2cc6507d1bde945e95986ced97f07a14f66ee1473cc9dc4322aa865c3d739a065db09a007bfb46be6c04c50efcba99d42ebd165094ab0307b6626100eaddf7c22e6f8c9ee0a456a1523d1251cf6daa36e95fe32b72b5cfe98c324f1a8d4da6df5b0ec0167830ab9127ef144bb397c5e8ad4cf0e170a36ef360490893e83b5a4b59f5b990875a382dc6b0b5ad59f552a44161e3f384", 0xef}, {&(0x7f0000000100)="011b0bc7fc29ce89ef6f206adf67cad40912e17ebe9578b8963a", 0x1a}, {&(0x7f0000000280)="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", 0x444}], 0x4}}], 0x1, 0x0) 11:52:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="ff", 0x1}], 0x1}, 0x0) readv(r1, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/210, 0xd2}], 0x1) 11:52:55 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000080)="add176fd18e8d85c98cf9586689cb0c6472de50db9306a43f1a0f561cde9ce1524df0d44a17877e54d7a19bfb7b81e2a6d955dcc9ee40efa03b6ca85edafbe67554d9f0997c720db58d1daf4bc2ccadf65b14022e56f9275edcc44f8d578119f", 0x60}, {&(0x7f0000000700)="63a8544c060000001a49ad1dd5fbc344b1ef32463c9cc29ae63d360e894327d3825a0adee47e1a21da1b8a21c09017493959a73a9f21f8810f82b885f0088d1d97832f11661fb66f5a093fd7f1d1db85cea3aec5e28c463a2f6e2cc6507d1bde945e95986ced97f07a14f66ee1473cc9dc4322aa865c3d739a065db09a007bfb46be6c04c50efcba99d42ebd165094ab0307b6626100eaddf7c22e6f8c9ee0a456a1523d1251cf6daa36e95fe32b72b5cfe98c324f1a8d4da6df5b0ec0167830ab9127ef144bb397c5e8ad4cf0e170a36ef360490893e83b5a4b59f5b990875a382dc6b0b5ad59f552a44161e3f384", 0xef}, {&(0x7f0000000100)="011b0bc7fc29ce89ef6f206adf67cad40912e17ebe9578b8963a", 0x1a}, {&(0x7f0000000280)="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", 0x444}], 0x4}}], 0x1, 0x0) 11:52:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {0x14}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:52:55 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/18) 11:52:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="ff", 0x1}], 0x1}, 0x0) readv(r1, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/210, 0xd2}], 0x1) 11:52:55 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./cgroup/pids.max\x00', 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0x8001) 11:52:55 executing program 7: rt_sigaction(0x1e, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) 11:52:55 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x324, 0x0) 11:52:56 executing program 3: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 11:52:56 executing program 7: rt_sigaction(0x1e, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) 11:52:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="1d", 0x1}], 0x1}, 0x40011) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001040)="ff", 0x1}], 0x1}, 0x0) readv(r1, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/210, 0xd2}], 0x1) 11:52:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x10, 0x7, 0x0, {{0x3, '$)}'}}}, 0xfdef) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) 11:52:56 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) clock_gettime(0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000580)={0xdf}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_mount_image$msdos(&(0x7f0000000640), &(0x7f0000000680)='./file2\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}, {&(0x7f0000000740)="4aae4f72e5b4f5", 0x7}], 0x1208021, &(0x7f00000007c0)={[{@dots}, {@fat=@dmask}], [{@uid_gt}, {@obj_type={'obj_type', 0x3d, '#^[\x00'}}]}) syz_open_dev$loop(0x0, 0x0, 0x402000) 11:52:56 executing program 3: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 11:52:56 executing program 7: rt_sigaction(0x1e, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) 11:52:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000000)='\a', 0x1}], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x802, 0xf) 11:52:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x324, 0x0) 11:52:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000013500)=ANY=[]) 11:52:56 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) [ 155.433031] tmpfs: Bad value for 'mpol' 11:52:56 executing program 7: rt_sigaction(0x1e, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000180)) [ 155.437856] tmpfs: Bad value for 'mpol' 11:52:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS2(r0, 0x80111500, &(0x7f0000000080)) 11:52:56 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) 11:52:56 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) clock_gettime(0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000580)={0xdf}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_mount_image$msdos(&(0x7f0000000640), &(0x7f0000000680)='./file2\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}, {&(0x7f0000000740)="4aae4f72e5b4f5", 0x7}], 0x1208021, &(0x7f00000007c0)={[{@dots}, {@fat=@dmask}], [{@uid_gt}, {@obj_type={'obj_type', 0x3d, '#^[\x00'}}]}) syz_open_dev$loop(0x0, 0x0, 0x402000) 11:52:56 executing program 3: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 11:52:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1=0xac141400}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="be61", 0x2}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}}], 0x40000000000039e, 0x0) 11:52:56 executing program 1: pipe2(&(0x7f0000001840), 0x4000) [ 155.513365] tmpfs: Bad value for 'mpol' 11:52:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x10008e, 0x0, 0x0, {r0}}, 0x20) [ 155.570944] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 11:52:56 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) 11:52:56 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x92, 0x5}) 11:52:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x324, 0x0) 11:52:56 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) clock_gettime(0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000580)={0xdf}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_mount_image$msdos(&(0x7f0000000640), &(0x7f0000000680)='./file2\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}, {&(0x7f0000000740)="4aae4f72e5b4f5", 0x7}], 0x1208021, &(0x7f00000007c0)={[{@dots}, {@fat=@dmask}], [{@uid_gt}, {@obj_type={'obj_type', 0x3d, '#^[\x00'}}]}) syz_open_dev$loop(0x0, 0x0, 0x402000) 11:52:56 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={0x1}, 0x20) 11:52:56 executing program 3: keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) 11:52:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x3, 0x0, &(0x7f0000000700)) 11:52:56 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) chroot(&(0x7f00000004c0)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@random={'system.', 'unconfined_u'}) [ 155.758069] tmpfs: Bad value for 'mpol' 11:52:56 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]}) 11:52:56 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={0x1}, 0x20) 11:52:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 11:52:56 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$CDROMREADMODE1(r0, 0x324, 0x0) 11:52:56 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 11:52:56 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x92, 0x5}) [ 155.964048] tmpfs: Bad value for 'mpol' 11:52:56 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000), 0x4) 11:52:56 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) clock_gettime(0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000580)={0xdf}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_mount_image$msdos(&(0x7f0000000640), &(0x7f0000000680)='./file2\x00', 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}, {&(0x7f0000000740)="4aae4f72e5b4f5", 0x7}], 0x1208021, &(0x7f00000007c0)={[{@dots}, {@fat=@dmask}], [{@uid_gt}, {@obj_type={'obj_type', 0x3d, '#^[\x00'}}]}) syz_open_dev$loop(0x0, 0x0, 0x402000) 11:52:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0xe01, 0x0, 0x0, "", [@address_filter={0x28, 0x21, {@in=@multicast2, @in=@broadcast}}]}, 0x38}}, 0x0) [ 156.152326] netlink: 'syz-executor.0': attribute type 33 has an invalid length. 11:52:57 executing program 5: r0 = fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0) 11:52:57 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={0x1}, 0x20) 11:52:57 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 11:52:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0xe01, 0x0, 0x0, "", [@address_filter={0x28, 0x21, {@in=@multicast2, @in=@broadcast}}]}, 0x38}}, 0x0) 11:52:57 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x92, 0x5}) 11:52:57 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 11:52:57 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r0, r1, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 156.329239] netlink: 'syz-executor.0': attribute type 33 has an invalid length. 11:52:57 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 11:52:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0xe01, 0x0, 0x0, "", [@address_filter={0x28, 0x21, {@in=@multicast2, @in=@broadcast}}]}, 0x38}}, 0x0) 11:52:57 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)='\\', 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)={0x0, 0x92, 0x5}) 11:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 11:52:57 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) [ 156.439586] netlink: 'syz-executor.0': attribute type 33 has an invalid length. 11:52:57 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={0x1}, 0x20) 11:52:57 executing program 2: setresgid(0x0, 0x0, 0x0) 11:52:57 executing program 4: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 11:52:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x38, 0x12, 0xe01, 0x0, 0x0, "", [@address_filter={0x28, 0x21, {@in=@multicast2, @in=@broadcast}}]}, 0x38}}, 0x0) 11:52:57 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$getflags(r0, 0x40a) [ 156.572007] netlink: 'syz-executor.0': attribute type 33 has an invalid length. 11:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 11:52:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00') pread64(r0, &(0x7f0000000240)=""/168, 0xf2, 0x2000005) 11:52:57 executing program 3: setresuid(0xee01, 0xee00, 0x0) r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmctl$SHM_LOCK(r0, 0xb) 11:52:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 11:52:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) listen(r0, 0x0) 11:52:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 11:52:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) listen(r0, 0x0) 11:52:57 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 11:52:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) listen(r0, 0x0) 11:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 11:52:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 11:52:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short}, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000040}, 0x4000) dup3(0xffffffffffffffff, r0, 0x80000) [ 156.875819] syz_tun: refused to change device tx_queue_len 11:52:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) [ 156.887899] syz_tun: refused to change device tx_queue_len 11:52:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short}, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000040}, 0x4000) dup3(0xffffffffffffffff, r0, 0x80000) 11:52:57 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 11:52:57 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000080), 0x0, 0x8) 11:52:57 executing program 3: socketpair(0x10, 0x2, 0x0, &(0x7f0000000040)) 11:52:57 executing program 7: io_uring_setup(0x7b5c, &(0x7f0000000340)) [ 157.018082] syz_tun: refused to change device tx_queue_len 11:52:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) listen(r0, 0x0) 11:52:57 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 11:52:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 11:52:57 executing program 7: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:57 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 11:52:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short}, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000040}, 0x4000) dup3(0xffffffffffffffff, r0, 0x80000) 11:52:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 11:52:57 executing program 5: syslog(0x9, 0x0, 0x0) [ 157.207019] syz_tun: refused to change device tx_queue_len 11:52:58 executing program 7: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 6: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 11:52:58 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 11:52:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@ieee802154={0x24, @short}, 0x0, 0x80800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000040}, 0x4000) dup3(0xffffffffffffffff, r0, 0x80000) [ 157.378795] syz_tun: refused to change device tx_queue_len 11:52:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 11:52:58 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 11:52:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0xa00000) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) 11:52:58 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) dup2(r0, r1) 11:52:58 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 11:52:58 executing program 7: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, 0x0) 11:52:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) [ 157.514511] process 'syz-executor.0' launched './file1' with NULL argv: empty string added 11:52:58 executing program 4: futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 7: r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3y\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98\xe6`k9D\xca\xd5\xd0s\xb5!.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 11:52:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)=[@rights={{0x10, 0x1, 0x2}}], 0x10}}], 0x2, 0x0) 11:52:58 executing program 6: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) 11:52:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 11:52:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0x6, r0, 0x2) 11:52:58 executing program 4: futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:58 executing program 7: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:52:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 6: ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) read(r0, &(0x7f0000000200)=""/74, 0x4a) 11:52:58 executing program 3: rt_sigaction(0x2c, &(0x7f0000000200)={&(0x7f0000000040)="0f38cc93000060ff66450f1bf9c4c1f812d0c4c19d61d1c443b9484702000fa45b0400c4e1fde949fe6440834405fb6f41df5395c4c2a502c8", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 11:52:58 executing program 0: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:52:58 executing program 4: futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 6: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100), 0x2) 11:52:58 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:58 executing program 7: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:52:58 executing program 3: rt_sigaction(0x2c, &(0x7f0000000200)={&(0x7f0000000040)="0f38cc93000060ff66450f1bf9c4c1f812d0c4c19d61d1c443b9484702000fa45b0400c4e1fde949fe6440834405fb6f41df5395c4c2a502c8", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) [ 157.852212] mmap: syz-executor.0 (6456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 11:52:58 executing program 0: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:52:58 executing program 7: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:52:58 executing program 0: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:52:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 11:52:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:58 executing program 4: futex(0x0, 0x100, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:58 executing program 3: rt_sigaction(0x2c, &(0x7f0000000200)={&(0x7f0000000040)="0f38cc93000060ff66450f1bf9c4c1f812d0c4c19d61d1c443b9484702000fa45b0400c4e1fde949fe6440834405fb6f41df5395c4c2a502c8", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 11:52:58 executing program 3: rt_sigaction(0x2c, &(0x7f0000000200)={&(0x7f0000000040)="0f38cc93000060ff66450f1bf9c4c1f812d0c4c19d61d1c443b9484702000fa45b0400c4e1fde949fe6440834405fb6f41df5395c4c2a502c8", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300)) 11:52:58 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:58 executing program 7: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11:52:58 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, 0x0) 11:52:58 executing program 0: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 11:52:58 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f00000006c0)={0x2, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 11:52:59 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setfsuid(r1) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15) 11:52:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0xffffffffffffffff) 11:52:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, 0x0) 11:52:59 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000000bc0)) 11:52:59 executing program 4: perf_event_open(&(0x7f0000000800)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:52:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 11:52:59 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="83eaa1ef8c488c89b82f3b73599cc3c9efafdc554c1c294b7d7b5bc60f123a7404ca2387d5f2beda9b87412983fd11be6856cec3ed5968f8ab20c7228e4ca116493bff09bb95201b3552a143152bbc61790816e61bfacbe32cfff0c60bfd5f63ac3ccb10158e08daaa03bb66cfdb0f6292e80565f2069a303c4c377987e7561a7008c2d4", 0x84}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="c8a8435532e8a7aec9091782429bfa900ce9291809abb8fd6e0e602ad8ca4c2c667fdf78ebf20a5aecf3981c7ba90102a66311b717437ed0f180419cc52395395efc7dfa9107a4b02e054d3efce3687f6e2173ebcbd29e9d113d61bcf1230be88c467ff8b059575e7ee66ba932ccc22dcb5b1e78c8e39ed0a3c7d792e2e1a6e707f62f624fd07630a37008e8dbcbb40578f5a6b1638691e785f335106f5d79a9eb0ccdc3163dfd53f6dc07bc83", 0xad}, {&(0x7f00000003c0)="fecc8d46c0cda3b92481d88a2a714fdf054335299a9d5ddb96467147e07cc998e696c98756e2fba983c45f8eb6c972ba41755923e0b269b9ae7d64e057b34f1c6308aa46524c341ef9df396956a5b5c7a2ec4b841710f98cd2c2321f6f5e802574ea3790f64932e3add2c5aca35dd04c324fff55d56b25c013552a5bf5bbf64c1c2d8bddd74f9f4725fd092725565305be0d32edc679d566d657724736f65fe270d8836450ab77ad7302de3e3df5b40874590fb5405eb3b4f3bcc37c9c88c50e0a812a5a5127e5", 0xc7}], 0x4, &(0x7f00000004c0)=[@hopopts_2292={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@pad1, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic, @hao={0xc9, 0x10, @empty}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000580)="57612d257716212e5b60574962db90bf2ae8fb567feabb86d19bad4b6cb9b7b1a2cb2cb537f6e44b2d60261524a7cfd45ba32e6a5b9dcd631934b12544dcb2e4a6adbde5567be8523cfef2871ae312c9ada69608b52b07b7f3fc05652e63d24cb96be9cfde3d4cd8d783922c97c337e75045630d2c26f7ab9c95d44265b616cd4412847efc7dd4ab9c5ed81c3ba4288bb42db64df85a41b7", 0x98}, {&(0x7f0000000640)="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", 0x1ba}], 0x2}}], 0x2, 0x4008000) 11:52:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 11:52:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@newae={0x5c, 0x1e, 0x409, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6=@ipv4={'\x00', '\xff\xff', @dev}}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) 11:52:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5460, &(0x7f0000000000)) 11:52:59 executing program 3: statx(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x6000, &(0x7f0000000100)) 11:52:59 executing program 4: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000000), 0x0) 11:52:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, 0x0) 11:52:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 11:52:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73662a7b3b00088001000240000004f801002000400000000000000000008000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffffffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100016e870325132510000e87032510300000000002e2e202020202020202020100016e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200016e870325132510000e870325104001a040000", 0x80, 0x42000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x82000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0xc2000}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x142000}], 0x0, &(0x7f0000010d00)) 11:52:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 11:52:59 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x31) 11:52:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)=0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x8b) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[], 0x4, 0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 11:52:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x5421, &(0x7f0000002a00)) 11:52:59 executing program 4: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000000), 0x0) 11:52:59 executing program 6: ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000000c0)={{}, "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"}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8943, &(0x7f0000000780)={'wlan0\x00'}) 11:52:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, 0x0) 11:52:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5460, &(0x7f0000000000)) 11:52:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 11:52:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000000000079f4000a000000776c6e654b17"], 0x1c}], 0x1}, 0x0) 11:52:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 11:52:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 11:52:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 11:52:59 executing program 4: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000000), 0x0) 11:52:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000000000079f4000a000000776c6e654b17"], 0x1c}], 0x1}, 0x0) 11:52:59 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1) 11:52:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5460, &(0x7f0000000000)) 11:52:59 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x540e, 0x0) [ 158.847159] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 158.848377] Bluetooth: hci5: Injecting HCI hardware error event [ 158.848996] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 158.849736] Bluetooth: hci1: Injecting HCI hardware error event [ 158.850629] Bluetooth: hci1: hardware error 0x00 [ 158.851949] Bluetooth: hci5: hardware error 0x00 11:52:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 11:52:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/56) 11:52:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000000000079f4000a000000776c6e654b17"], 0x1c}], 0x1}, 0x0) 11:52:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)) 11:52:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/56) 11:52:59 executing program 4: r0 = io_uring_setup(0x5053, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES(r0, 0x12, &(0x7f0000000000), 0x0) 11:52:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 11:52:59 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5460, &(0x7f0000000000)) 11:52:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000000000079f4000a000000776c6e654b17"], 0x1c}], 0x1}, 0x0) 11:52:59 executing program 0: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) linkat(r3, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 11:52:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/56) 11:52:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x4, r3}]}]}, 0x20}}, 0x0) 11:52:59 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 11:52:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:52:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 11:52:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/56) 11:52:59 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x54}, {0x6}]}) io_uring_setup(0x0, 0x0) 11:52:59 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 11:52:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) [ 159.251508] audit: type=1326 audit(1756727580.020:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6609 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b6156b19 code=0x0 11:53:00 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006f00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8001}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) 11:53:00 executing program 2: sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 11:53:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc', 0x0) fcntl$addseals(r0, 0x402, 0x0) 11:53:00 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @remote}, 0x20000) 11:53:00 executing program 2: execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) 11:53:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) 11:53:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc', 0x0) fcntl$addseals(r0, 0x402, 0x0) 11:53:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) [ 160.082785] audit: type=1326 audit(1756727580.851:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6609 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b6156b19 code=0x0 11:53:00 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc', 0x0) fcntl$addseals(r0, 0x402, 0x0) 11:53:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) 11:53:00 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 11:53:00 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDDELIO(r0, 0x5415, 0x0) 11:53:00 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) 11:53:00 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:53:00 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x54}, {0x6}]}) io_uring_setup(0x0, 0x0) 11:53:00 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xab}) 11:53:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) [ 160.241639] audit: type=1326 audit(1756727581.007:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6646 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b6156b19 code=0x0 11:53:01 executing program 3: r0 = memfd_create(&(0x7f0000000000)='\x02\xce\x16Td\xa8\x98\x86\xb1:\x8f\xc5\x88{\xbd\xb4\xc2\xb1\x9b\x84\x97R\xcc\xdb<\x01\xfa\x91\x85\xa0\x81\xa9F0!/\x89\xacX\xbd\xcd\x12R|lTn\xac-\xfd\x8b\n\x1a\xbc\xf0^B6\xb6`[/\xafE\xdaYz\xd6\xc7\xbc!\xe5\x89\xc8^\x06np\xc6\xe7\x1d\xe4\xbe\xcaa}\x1c\x12\xf9\xd8\xefw\xe1\xcb\x85\xdb?^\x8f\f\nD\xf2\x1f\x11\xaa\x90>N\xb7\x86\x15\x03=\xcc\xbe\x0f\x0f\x14\x84\xde:;\x0f\xb5\xf1\x86\xf2{yt\xa2\xe9\x01\x00\x00\x00\x8e:^v\xc9\x8d\xd7E\xb4\vw\xbe\\\x11J\xf4\xae\xc6\x88F\x9c\xaflM\x1dSHjH\xd6\x8d\xa6\xbd\x96\xe4SR\xe6\x118L*\x9b\xb2\tbg\xad\x0fRu\xeb\xe4{GO\xa5M\x80-Y\xc6\x1f%\xb8i|\x86\xa9Zm+\x9fe~\x8a\xe7\xca\f\xad?\xa0t\x13_Rq\x1f\xc6\xd9\x1d#\x8a8q\x1e#c\x8c\x193\xab\xdbE\xe1\xc8d=\xe5\r\xe6\x9a\xe5zc-\f\xe5#\xa2v\x1eY\xf0\xe3\x1c*h\xdbq\x92\xf8a6\x99\x02\xc9}\x14\xfb\x03\xce\xb34\x95/\x18\xacJs0\x9f\x9b>\xae\a2\x01\xa7\x95\xbd\xf2\x99w\x11G\x1c\xd2\xbc\xf0E\x86\xca\x87\xefv\x8e\xad\xb8\xc7u\xc2z\x85\xc1\xd5R\x82\v\x1b\xea\x8f\xad\xc1\x02\x8a$\xd1T\xce\xa6\xa2m\x18K\xd5-\x03\xa0\xeeF^F\vJLx\xdc\xc8\b\xb7\xa1j2l\x8fQ\xc1\x89\xb8\xbef\xc6\x90\r\xae\xd4S\x8f\x7f\xe2[\x1cs\xab&\xa3\x81B<\xc5]n\xfc', 0x0) fcntl$addseals(r0, 0x402, 0x0) 11:53:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"}) ioctl$TCXONC(r0, 0x40087101, 0x7ffffffff000) 11:53:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xab}) [ 160.894612] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 160.895839] Bluetooth: hci5: Opcode 0x0c03 failed: -110 11:53:01 executing program 2: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fadvise64(r0, 0x0, 0x5, 0xc765cdd63ce15ea6) 11:53:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x54}, {0x6}]}) io_uring_setup(0x0, 0x0) 11:53:01 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:53:01 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:53:01 executing program 5: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) preadv2(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x0) 11:53:01 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) io_uring_setup(0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/239, 0xef, 0x5) 11:53:01 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x54}, {0x6}]}) io_uring_setup(0x0, 0x0) 11:53:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xab}) [ 161.158712] audit: type=1326 audit(1756727581.927:23): auid=0 uid=0 gid=0 ses=4 subj=s VM DIAGNOSIS: 11:52:54 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000010000 RCX=ffff888048207a24 RDX=1ffff11009040f87 RSI=ffffffff81b9696b RDI=ffff888016528e20 RBP=ffff888048207c38 RSP=ffff888048207a78 R8 =0000000000000000 R9 =ffffed1001203c17 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffff888016694ac0 R15=ffff888048207c38 RIP=ffffffff81bfb408 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fde6096e8c0 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffadf86c88 CR3=000000001e337000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000696c61766e49002f XMM01=00000000000000000000005f4e49002f XMM02=ffffffffffffffffffffff0f0e0d0c0b XMM03=00000000000000ff00000000000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000500000009000055c206cc2210 XMM06=00000000000000000000000800000000 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880e56d8000 RCX=dfb8078e475e76a4 RDX=0000000000000000 RSI=000000008301a466 RDI=ffff88806cf31850 RBP=00007fef74f78487 RSP=ffff88806cf08a10 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff88806cf08b00 R13=0000000000000000 R14=ffff888009789b80 R15=ffffea000036dac0 RIP=ffffffff815af2b0 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557a349400 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557a35ac98 CR3=00000000426ec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=00000000000000007c6369a1c7299851 XMM02=000000000000000065fd65334380f0f9 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000