Warning: Permanently added '[localhost]:51768' (ECDSA) to the list of known hosts. 2026/01/14 08:08:53 fuzzer started 2026/01/14 08:08:53 dialing manager at localhost:46753 syzkaller login: [ 51.332644] cgroup: Unknown subsys name 'net' [ 51.392497] cgroup: Unknown subsys name 'cpuset' [ 51.407905] cgroup: Unknown subsys name 'rlimit' 2026/01/14 08:09:03 syscalls: 2214 2026/01/14 08:09:03 code coverage: enabled 2026/01/14 08:09:03 comparison tracing: enabled 2026/01/14 08:09:03 extra coverage: enabled 2026/01/14 08:09:03 setuid sandbox: enabled 2026/01/14 08:09:03 namespace sandbox: enabled 2026/01/14 08:09:03 Android sandbox: enabled 2026/01/14 08:09:03 fault injection: enabled 2026/01/14 08:09:03 leak checking: enabled 2026/01/14 08:09:03 net packet injection: enabled 2026/01/14 08:09:03 net device setup: enabled 2026/01/14 08:09:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 08:09:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 08:09:03 USB emulation: enabled 2026/01/14 08:09:03 hci packet injection: enabled 2026/01/14 08:09:03 wifi device emulation: enabled 2026/01/14 08:09:03 802.15.4 emulation: enabled 2026/01/14 08:09:03 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/14 08:09:03 fetching corpus: 50, signal 32086/34665 (executing program) 2026/01/14 08:09:03 fetching corpus: 100, signal 43951/47082 (executing program) 2026/01/14 08:09:04 fetching corpus: 150, signal 51804/55223 (executing program) 2026/01/14 08:09:04 fetching corpus: 200, signal 61866/65069 (executing program) 2026/01/14 08:09:04 fetching corpus: 250, signal 67237/70349 (executing program) 2026/01/14 08:09:04 fetching corpus: 300, signal 71060/74144 (executing program) 2026/01/14 08:09:04 fetching corpus: 350, signal 76307/78919 (executing program) 2026/01/14 08:09:05 fetching corpus: 400, signal 81549/83469 (executing program) 2026/01/14 08:09:05 fetching corpus: 450, signal 84353/85919 (executing program) 2026/01/14 08:09:05 fetching corpus: 500, signal 87835/88690 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90195 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90232 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90263 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90296 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90327 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90359 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90400 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90429 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90463 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90502 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90544 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90572 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90614 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90657 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90690 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90738 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90778 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90816 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90853 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90902 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90942 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/90975 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/91012 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/91039 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/91085 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/91137 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/91172 (executing program) 2026/01/14 08:09:05 fetching corpus: 537, signal 89722/91207 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91251 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91295 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91341 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91392 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91435 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91470 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91503 (executing program) 2026/01/14 08:09:06 fetching corpus: 537, signal 89722/91503 (executing program) 2026/01/14 08:09:08 starting 8 fuzzer processes 08:09:08 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:08 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000700000000006102cc"], 0x1c}], 0x1}, 0x0) 08:09:08 executing program 2: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) [ 65.763803] audit: type=1400 audit(1768378148.430:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:09:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private0}, {@in=@multicast2, 0xfffffffd, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 08:09:08 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 08:09:08 executing program 6: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) [ 66.826782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.828977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.832576] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.837738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.840485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.883601] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.886362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.892283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.899502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.901511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.965073] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.974842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.985147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.996874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.007400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.103436] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 67.105954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.107571] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 67.109818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 67.110524] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 67.112542] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 67.112594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 67.115364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 67.120327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 67.121175] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 67.121502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.125115] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 67.126663] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.129015] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.132815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.135659] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 67.138376] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.141393] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.147238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.149134] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 67.161963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 67.164526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.210393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.233795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.246801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.859552] Bluetooth: hci0: command tx timeout [ 68.923083] Bluetooth: hci1: command tx timeout [ 69.053143] Bluetooth: hci2: command tx timeout [ 69.179364] Bluetooth: hci4: command tx timeout [ 69.180136] Bluetooth: hci6: command tx timeout [ 69.244098] Bluetooth: hci5: command tx timeout [ 69.244153] Bluetooth: hci7: command tx timeout [ 69.372419] Bluetooth: hci3: command tx timeout [ 70.908844] Bluetooth: hci0: command tx timeout [ 70.971062] Bluetooth: hci1: command tx timeout [ 71.099111] Bluetooth: hci2: command tx timeout [ 71.227099] Bluetooth: hci4: command tx timeout [ 71.227529] Bluetooth: hci6: command tx timeout [ 71.291868] Bluetooth: hci5: command tx timeout [ 71.292674] Bluetooth: hci7: command tx timeout [ 71.419109] Bluetooth: hci3: command tx timeout [ 72.956163] Bluetooth: hci0: command tx timeout [ 73.020075] Bluetooth: hci1: command tx timeout [ 73.147068] Bluetooth: hci2: command tx timeout [ 73.275641] Bluetooth: hci4: command tx timeout [ 73.276617] Bluetooth: hci6: command tx timeout [ 73.339332] Bluetooth: hci7: command tx timeout [ 73.340258] Bluetooth: hci5: command tx timeout [ 73.467060] Bluetooth: hci3: command tx timeout [ 75.003078] Bluetooth: hci0: command tx timeout [ 75.068077] Bluetooth: hci1: command tx timeout [ 75.195112] Bluetooth: hci2: command tx timeout [ 75.323088] Bluetooth: hci6: command tx timeout [ 75.323179] Bluetooth: hci4: command tx timeout [ 75.387124] Bluetooth: hci5: command tx timeout [ 75.387161] Bluetooth: hci7: command tx timeout [ 75.517056] Bluetooth: hci3: command tx timeout [ 100.230731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.231378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.359872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.360511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.484433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.485721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.653453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.654050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.864258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.864880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:43 executing program 2: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:43 executing program 6: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) 08:09:43 executing program 2: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 101.089009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.089636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:09:43 executing program 2: move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 08:09:43 executing program 6: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) 08:09:43 executing program 6: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) 08:09:43 executing program 2: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) 08:09:44 executing program 2: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) [ 101.464343] audit: type=1400 audit(1768378184.129:8): avc: denied { open } for pid=3858 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 101.473260] audit: type=1400 audit(1768378184.130:9): avc: denied { kernel } for pid=3858 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 101.624419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.625070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.784397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.790907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.875219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.875845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.881512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.882244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.942941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.943582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.002404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.004156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.053570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.054329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.085059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.085654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.109923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.110548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.173809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.174451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.250050] Bluetooth: unknown link type 6 [ 102.250523] Bluetooth: hci1: connection err: -111 [ 102.253364] Bluetooth: Unexpected continuation frame (len 16) [ 102.263950] Bluetooth: unknown link type 6 [ 102.264342] Bluetooth: hci1: connection err: -111 [ 102.266588] Bluetooth: Unexpected start frame (len 10) [ 102.318537] ieee802154 phy0 wpan0: encryption failed: -22 08:09:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:45 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:09:45 executing program 2: ioperm(0x0, 0x2, 0x6) syz_io_uring_setup(0x0, &(0x7f0000001680), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000001500)) 08:09:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000700000000006102cc"], 0x1c}], 0x1}, 0x0) 08:09:45 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private0}, {@in=@multicast2, 0xfffffffd, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 08:09:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) [ 102.384479] Bluetooth: unknown link type 6 [ 102.384873] Bluetooth: hci1: connection err: -111 [ 102.394114] Bluetooth: Unexpected start frame (len 10) 08:09:45 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:09:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private0}, {@in=@multicast2, 0xfffffffd, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 08:09:45 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 102.452483] ieee802154 phy0 wpan0: encryption failed: -22 08:09:45 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:09:45 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@private0}, {@in=@multicast2, 0xfffffffd, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 08:09:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000700000000006102cc"], 0x1c}], 0x1}, 0x0) [ 102.529106] Bluetooth: unknown link type 6 [ 102.529706] Bluetooth: hci4: connection err: -111 [ 102.537043] Bluetooth: Unexpected continuation frame (len 16) 08:09:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) [ 102.568847] Bluetooth: unknown link type 6 [ 102.569253] Bluetooth: hci1: connection err: -111 [ 102.579462] Bluetooth: Unexpected start frame (len 10) [ 102.676277] ieee802154 phy0 wpan0: encryption failed: -22 08:09:45 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:45 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0) 08:09:45 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000018000100000700000000006102cc"], 0x1c}], 0x1}, 0x0) 08:09:45 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) 08:09:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) [ 102.986820] Bluetooth: unknown link type 6 [ 102.987289] Bluetooth: hci7: connection err: -111 [ 102.994400] Bluetooth: Unexpected continuation frame (len 16) [ 102.994470] Bluetooth: unknown link type 6 [ 102.995840] Bluetooth: hci4: connection err: -111 [ 102.997637] Bluetooth: unknown link type 6 [ 102.998005] Bluetooth: hci1: connection err: -111 [ 103.007910] Bluetooth: Unexpected start frame (len 10) [ 103.014948] Bluetooth: Unexpected start frame (len 10) 08:09:45 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 103.050925] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.109295] Bluetooth: unknown link type 6 [ 103.109843] Bluetooth: hci7: connection err: -111 [ 103.145106] Bluetooth: Unexpected start frame (len 10) 08:09:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) [ 103.564195] Bluetooth: unknown link type 6 [ 103.564655] Bluetooth: hci3: connection err: -111 [ 103.568796] Bluetooth: Unexpected continuation frame (len 16) [ 103.594835] Bluetooth: unknown link type 6 [ 103.597178] Bluetooth: hci7: connection err: -111 [ 103.603690] Bluetooth: unknown link type 6 [ 103.604104] Bluetooth: hci6: connection err: -111 [ 103.607142] Bluetooth: unknown link type 6 [ 103.607656] Bluetooth: hci4: connection err: -111 [ 103.607937] Bluetooth: unknown link type 6 [ 103.608549] Bluetooth: hci0: connection err: -111 [ 103.614459] Bluetooth: Unexpected start frame (len 10) [ 103.617746] Bluetooth: unknown link type 6 [ 103.618128] Bluetooth: hci3: connection err: -111 prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) [ 103.622746] Bluetooth: Unexpected start frame (len 10) [ 103.631196] Bluetooth: Unexpected continuation frame (len 16) [ 103.633056] Bluetooth: Unexpected continuation frame (len 16) [ 103.643121] Bluetooth: Unexpected start frame (len 10) 08:09:46 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 103.694930] Bluetooth: unknown link type 6 [ 103.695353] Bluetooth: hci1: connection err: -111 [ 103.695926] Bluetooth: Unexpected start frame (len 10) 08:09:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 103.742427] Bluetooth: unknown link type 6 [ 103.742799] Bluetooth: hci6: connection err: -111 [ 103.747389] Bluetooth: Unexpected start frame (len 10) 08:09:46 executing program 3: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.130990] Bluetooth: unknown link type 6 [ 104.131466] Bluetooth: hci6: connection err: -111 [ 104.134812] Bluetooth: unknown link type 6 [ 104.135559] Bluetooth: hci1: connection err: -111 [ 104.137078] Bluetooth: Unexpected start frame (len 10) [ 104.140243] Bluetooth: Unexpected start frame (len 10) [ 104.175225] Bluetooth: unknown link type 6 [ 104.175644] Bluetooth: hci0: connection err: -111 [ 104.175810] Bluetooth: unknown link type 6 [ 104.176437] Bluetooth: hci7: connection err: -111 [ 104.177924] Bluetooth: unknown link type 6 [ 104.178314] Bluetooth: hci3: connection err: -111 [ 104.182650] Bluetooth: unknown link type 6 [ 104.183435] Bluetooth: hci4: connection err: -111 [ 104.191557] Bluetooth: Unexpected start frame (len 10) [ 104.194112] Bluetooth: unknown link type 6 [ 104.194468] Bluetooth: hci1: connection err: -111 [ 104.195550] Bluetooth: Unexpected start frame (len 10) [ 104.197044] Bluetooth: Unexpected start frame (len 10) 08:09:46 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.201706] Bluetooth: Unexpected start frame (len 10) [ 104.211104] Bluetooth: Unexpected start frame (len 10) [ 104.227083] Bluetooth: unknown link type 6 [ 104.227494] Bluetooth: hci2: connection err: -111 [ 104.228300] Bluetooth: Unexpected continuation frame (len 16) 08:09:46 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) 08:09:46 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:46 executing program 1: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.297695] Bluetooth: unknown link type 6 [ 104.298144] Bluetooth: hci2: connection err: -111 [ 104.303125] Bluetooth: Unexpected start frame (len 10) [ 104.308160] Bluetooth: unknown link type 6 [ 104.308529] Bluetooth: hci7: connection err: -111 [ 104.309139] Bluetooth: Unexpected start frame (len 10) [ 104.309786] Bluetooth: unknown link type 6 [ 104.310231] Bluetooth: hci5: connection err: -111 [ 104.311523] Bluetooth: unknown link type 6 [ 104.311939] Bluetooth: hci6: connection err: -111 [ 104.317685] Bluetooth: Unexpected start frame (len 10) [ 104.332121] Bluetooth: Unexpected continuation frame (len 16) [ 104.345091] Bluetooth: unknown link type 6 [ 104.345452] Bluetooth: hci0: connection err: -111 [ 104.346433] Bluetooth: Unexpected start frame (len 10) 08:09:46 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.357140] Bluetooth: unknown link type 6 [ 104.357505] Bluetooth: hci1: connection err: -111 [ 104.369845] Bluetooth: unknown link type 6 [ 104.370228] Bluetooth: hci4: connection err: -111 [ 104.371352] Bluetooth: Unexpected start frame (len 10) [ 104.377652] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.406242] Bluetooth: Unexpected start frame (len 10) 08:09:47 executing program 5: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:47 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:47 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:47 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:47 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) 08:09:47 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.471419] Bluetooth: unknown link type 6 [ 104.471801] Bluetooth: hci6: connection err: -111 [ 104.477049] Bluetooth: Unexpected start frame (len 10) [ 104.489617] Bluetooth: unknown link type 6 [ 104.489964] Bluetooth: hci7: connection err: -111 08:09:47 executing program 6: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="01000000f9ffffffffffffff6b6e326bd9fd73d4575b613e156001a1bcb82504d2538542e12508e378d17f49a252124e02b5c5a60c1cd855bf4a54046a303e2255695576692a499063f526d32697a6b4b396e1b9c2d85833aee1b2cfe7da60708f08fa4a67472c7ddd4a8952dda55c66381e02fb58d364e376821622590d362c64a7f5669248a56470f1f20a33bff41519e84535df75c1c62727d0d6630842d77e9f2dc67a98a1c160d5e310e308abc78c21341ed6e647b641c599801497194a422ab70c6b336c9bb6c39f2f26a27c2fcf0675a8e78bfefc407006685113a176738dd43b87c76f72c6b62d7a7f5dda270b366a0f42ea83e26d4b6f5671cdbced7f00000000"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.500233] Bluetooth: unknown link type 6 [ 104.500584] Bluetooth: hci2: connection err: -111 [ 104.516584] Bluetooth: unknown link type 6 [ 104.517004] Bluetooth: hci1: connection err: -111 [ 104.517660] Bluetooth: Unexpected start frame (len 10) [ 104.522517] Bluetooth: unknown link type 6 [ 104.522916] Bluetooth: hci5: connection err: -111 [ 104.524203] Bluetooth: Unexpected start frame (len 10) [ 104.531450] Bluetooth: unknown link type 6 [ 104.531823] Bluetooth: hci4: connection err: -111 [ 104.538811] Bluetooth: Unexpected start frame (len 10) [ 104.546663] Bluetooth: Unexpected start frame (len 10) [ 104.548249] Bluetooth: Unexpected start frame (len 10) [ 104.573244] ieee802154 phy0 wpan0: encryption failed: -22 08:09:47 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) [ 104.615771] Bluetooth: unknown link type 6 [ 104.616203] Bluetooth: hci6: connection err: -111 [ 104.623134] Bluetooth: Unexpected start frame (len 10) 08:09:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r0, &(0x7f0000000000)="69cbbcfc69fecbdf939b43e635acdbc78b4b8cc6", 0x14) 08:09:47 executing program 4: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04040aaaaab49ea900d79124062fb47a30282e79a7c31ecb01a6e019fa9e51d3c413f8014b069f47ec3276024d8c54f9cc8491d5d00932de6822e53e959eb570a27efd8c3471237c43278a5f6b895d960a61a6ae92351c42b6de5d6a98ebd1155d513c19ccc8c8979a85280b7ca364a122696b6aef6d97bf5ac0910ce4c391e04f5ac07baa06d352eaadb63c29823a1ec10270b2815007bee2454413106ad083"], 0xd) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="02c850fb00ff00010003060800080004000755660452f892af52401e8c9d04c0f44bbe3f25dd417db52a9382732b41dfb114d315505ae60bc96c79ec94e5bf03997c624accbc2bedca2bdc8baaf59e7a05618a7e0df4b952a2e2b4ef1957137b16895dc6b4f4bcec10287fbcc129446156b17db0cc2b0652f987dda008fd8fc3279de90b097df9bd9bb1b433844877225a9d0dba70f8a0062554de8e5f19d5af5a408dcb993988542b66d1de94dfcda2ec11782fdcb321696d696c94e6104a1b4058e66ac72778976ac9d8cb72c36643b534de8ab9df209f93b9435a2dc12225b7e863b0ec65000000000000"], 0x15) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x0, 0x411}}}, 0x7) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2082, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="0c1a0302c800"], 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffff, 0x10001, &(0x7f0000000300)) getdents64(r1, &(0x7f00000000c0)=""/107, 0x6b) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8}, "cf25badd48517316638c14f00f5c1f8769e66f87246b71388f813c1886477a3b3da490559083756bec1293cac3b667aac4d6931d3091806a0058d4d81faacc7326bc3c2ca990990b4908a0e8a25ae7466e89a3073d7520d5829e12830d6dc231370ab916b9dfb5f678be1cd505690496238d6d8824ce1bbfb9805c892dc32c4e78af477dcbeeb6c315028e4548a2c0f61eb2b8d9251c1d0ae67150bc92"}, 0x15c) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="03c9008762fa9762e3b6e3fe088d941122be93b738e38a3043da75b42cbe7d0e20511e6c8e0a4b48e14c2a1a03a177cbb1ae17e4f63bfdd7d65a4bcd11731de5c46ab42e0e82c090243795a4ebab739c9ad97a94011e5189ef74a30435ef98b564ab775e28b9e0fe5b95d557e4d4022e74c30a2962f2738f548cd5c71a753ae54d6d9a8d6c3ffec5f4c14224e8e6f4a6ef72c4aca50afc8b8f874b193e783c873c20c31b619fe38639af5618e1f26e1e2023863fc549dd729b43f5937251e037d4e552d6"], 0x8b) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0xffffffff, 0x84041) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="02c91010bbc3a50007ca663560000000002000f50000000000000000ed3cc8705b352a2d6679825c04d9d9e92b09c5a21524cbb7c94993159e49bff2a084a347da177c870dc886f77f7a72a4a0f4bf0aa4ba48ccfc50c03eebb06b5fdbaa8bee1f2913d84e753cdc28534cfb9ba948f0fdf8fa3d3a2669674a51a70de60ff1e75b4a"], 0x15) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c9000000131b02ffff000251d0dde19505a5cf7c246cce803cc572ab0614e00b1914d45efb5286b3347e5e1a5fa84e00aaa680989bfc17367dfbaf106668286754aa0d"], 0xf) clone(0xa805ed00, 0x0, &(0x7f0000000140), 0x0, 0x0) 08:09:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) [ 104.677397] Bluetooth: unknown link type 6 [ 104.677761] Bluetooth: hci5: connection err: -111 [ 104.687041] Bluetooth: Unexpected start frame (len 10) [ 104.689094] Bluetooth: unknown link type 6 [ 104.689480] Bluetooth: hci1: connection err: -111 [ 104.694088] Bluetooth: Unexpected start frame (len 10) 08:09:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) [ 104.755977] ieee802154 phy0 wpan0: encryption failed: -22 08:09:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:47 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x541b, 0x0) 08:09:47 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x541b, 0x0) 08:09:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:47 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x541b, 0x0) 08:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x3, 0x0) 08:09:47 executing program 6: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x541b, 0x0) 08:09:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x3, 0x0) 08:09:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x0) 08:09:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000002680)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) 08:09:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:48 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="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", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x3, 0x0) 08:09:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x0) 08:09:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x3, 0x0) 08:09:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:48 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x0) [ 106.301125] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 106.301948] Bluetooth: hci1: Injecting HCI hardware error event [ 106.303367] Bluetooth: hci1: hardware error 0x00 08:09:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) [ 106.555661] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 106.556961] Bluetooth: hci4: Injecting HCI hardware error event [ 106.558263] Bluetooth: hci4: hardware error 0x00 [ 106.934382] syz-executor.2 (4098) used greatest stack depth: 23992 bytes left [ 107.004099] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 107.005479] Bluetooth: hci7: Injecting HCI hardware error event [ 107.006975] Bluetooth: hci7: hardware error 0x00 08:09:49 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r1, 0x4, 0x401, 0x3f) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r2, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r3, 0x0, 0xfdef) 08:09:49 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:49 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x0) 08:09:49 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:49 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) [ 107.579088] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 107.581896] Bluetooth: hci3: Injecting HCI hardware error event [ 107.582976] Bluetooth: hci3: hardware error 0x00 08:09:50 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) [ 107.644310] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 107.645090] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 107.645198] Bluetooth: hci0: Injecting HCI hardware error event [ 107.645977] Bluetooth: hci6: Injecting HCI hardware error event [ 107.647003] Bluetooth: hci0: hardware error 0x00 [ 107.647692] Bluetooth: hci6: hardware error 0x00 08:09:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:50 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) [ 108.285648] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 108.286570] Bluetooth: hci2: Injecting HCI hardware error event [ 108.287751] Bluetooth: hci2: hardware error 0x00 [ 108.350166] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 108.351224] Bluetooth: hci5: Injecting HCI hardware error event [ 108.352394] Bluetooth: hci5: hardware error 0x00 [ 108.352982] Bluetooth: hci1: Opcode 0x0c03 failed: -110 08:09:51 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, &(0x7f0000000540)={'wlan1\x00'}) 08:09:51 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:51 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) 08:09:51 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xe4b, 0x4}}, './file0\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) sendfile(r0, r1, 0x0, 0xfdef) 08:09:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) 08:09:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, &(0x7f0000000540)={'wlan1\x00'}) 08:09:51 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000000440)) [ 108.604967] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 109.051094] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 109.142853] syz-executor.0 (4157) used greatest stack depth: 23672 bytes left 08:09:52 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xa4ffffff, 0x4) 08:09:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 08:09:52 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) 08:09:52 executing program 3: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) 08:09:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, &(0x7f0000000540)={'wlan1\x00'}) 08:09:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) 08:09:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 08:09:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) [ 109.383801] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.386762] loop1: detected capacity change from 0 to 1352 08:09:52 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) 08:09:52 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xa4ffffff, 0x4) 08:09:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 08:09:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8916, &(0x7f0000000540)={'wlan1\x00'}) 08:09:52 executing program 3: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) 08:09:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) 08:09:52 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xa4ffffff, 0x4) [ 109.627212] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 109.691618] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 109.757318] Bluetooth: hci6: Opcode 0x0c03 failed: -110 08:09:52 executing program 3: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) 08:09:52 executing program 4: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) 08:09:52 executing program 6: r0 = socket$inet(0x2, 0x3, 0x26) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0xa4ffffff, 0x4) 08:09:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) 08:09:52 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) 08:09:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 08:09:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100088ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200088ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200088ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200088ea70325132510000ea703251070064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 08:09:52 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) [ 109.948948] loop1: detected capacity change from 0 to 1352 08:09:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000080)) 08:09:52 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) 08:09:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) 08:09:52 executing program 0: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0xfb}) 08:09:52 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="f8", 0xbb8}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001500)="f0", 0x1}], 0x17f}}], 0x2, 0x0) 08:09:52 executing program 3: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) 08:09:52 executing program 4: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) [ 110.305162] loop1: detected capacity change from 0 to 1352 [ 110.334465] Bluetooth: hci2: Opcode 0x0c03 failed: -110 08:09:52 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 4: accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f000000a480), 0x4) 08:09:53 executing program 0: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029f2118df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="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", 0x120, 0x4800}, {&(0x7f0000010b00)="2e20202020202020202020100088ea70325132510000ea7032510300000000002e2e202020202020202020100088ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200088ea70325132510000ea70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) [ 110.431428] process 'syz-executor.6' launched './file1' with NULL argv: empty string added 08:09:53 executing program 3: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x58, 0x0) 08:09:53 executing program 0: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:53 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) [ 110.518635] loop1: detected capacity change from 0 to 1352 [ 110.524053] Bluetooth: hci5: Opcode 0x0c03 failed: -110 08:09:53 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 0: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x58, 0x0) 08:09:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 3: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:53 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x58, 0x0) 08:09:53 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 3: capset(&(0x7f0000001980)={0x20080522}, &(0x7f00000025c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) 08:09:53 executing program 7: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 2: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321dbb60320"], 0xc) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 08:09:53 executing program 4: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x58, 0x0) 08:09:53 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) 08:09:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x1}) 08:09:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x1}) 08:09:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:53 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:53 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "72897521f552"}]}}}}}}, 0x0) 08:09:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x1}) 08:09:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:53 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "72897521f552"}]}}}}}}, 0x0) 08:09:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) 08:09:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x1}) 08:09:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:53 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:53 executing program 0: r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil) shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x5000) madvise(&(0x7f0000430000/0x1000)=nil, 0x1000, 0x11) 08:09:53 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "72897521f552"}]}}}}}}, 0x0) 08:09:53 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) 08:09:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:54 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) 08:09:54 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0x1, "72897521f552"}]}}}}}}, 0x0) 08:09:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 08:09:54 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(0x0) 08:09:54 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:54 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 08:09:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:54 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 08:09:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:54 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x2c00}, {0x0, 0xa19b}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0x1f}], 0x1, 0x0) 08:09:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:54 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000100)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) 08:09:54 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:55 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x5607, 0x3) 08:09:55 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 08:09:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:55 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() [ 113.461201] loop3: detected capacity change from 0 to 64 [ 113.471260] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:09:56 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) 08:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) 08:09:56 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) 08:09:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) 08:09:56 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x4, &(0x7f0000000380)=[{0x0}], 0x1) syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) 08:09:56 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) 08:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) 08:09:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) 08:09:56 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() [ 113.855408] loop0: detected capacity change from 0 to 64 [ 113.861972] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:09:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) 08:09:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) 08:09:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f00000001c0)) 08:09:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x2c}}, 0x0) 08:09:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 6: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() [ 114.023876] loop5: detected capacity change from 0 to 64 [ 114.036133] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:09:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:56 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) 08:09:56 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x18, &(0x7f00000000c0), 0x4) 08:09:56 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:56 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:56 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() [ 114.215637] loop1: detected capacity change from 0 to 64 08:09:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() [ 114.240599] [ 114.240821] ===================================== [ 114.241239] WARNING: bad unlock balance detected! [ 114.241625] 6.19.0-rc5-next-20260114 #1 Not tainted [ 114.242019] ------------------------------------- [ 114.242401] syz-executor.7/282 is trying to release lock (rcu_read_lock) at: [ 114.242970] [] __wait_on_freeing_inode+0x105/0x350 [ 114.243501] but there are no more locks to release! [ 114.243906] [ 114.243906] other info that might help us debug this: [ 114.244425] 4 locks held by syz-executor.7/282: [ 114.244799] #0: ffff88800f7c43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 114.245515] #1: ffff88801bfd59a8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 114.250261] #2: ffff88800f7d0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 114.252558] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 114.253286] [ 114.253286] stack backtrace: [ 114.253664] CPU: 0 UID: 0 PID: 282 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 114.253679] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.253687] Call Trace: [ 114.253691] [ 114.253696] dump_stack_lvl+0xca/0x120 [ 114.253727] ? __wait_on_freeing_inode+0x105/0x350 [ 114.253741] print_unlock_imbalance_bug+0x118/0x130 [ 114.253758] ? __wait_on_freeing_inode+0x105/0x350 [ 114.253772] lock_release+0x1ee/0x270 [ 114.253787] __wait_on_freeing_inode+0x10a/0x350 [ 114.253802] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 114.253817] ? __pfx_var_wake_function+0x10/0x10 [ 114.253835] ? lock_is_held_type+0x9e/0x120 [ 114.253855] insert_inode_locked+0x25f/0x890 [ 114.253872] __ext4_new_inode+0x223d/0x4cd0 [ 114.253889] ? __pfx___ext4_new_inode+0x10/0x10 [ 114.253903] ? __pfx_avc_has_perm+0x10/0x10 [ 114.253918] ? __pfx___dquot_initialize+0x10/0x10 [ 114.253939] ext4_mkdir+0x331/0xb30 [ 114.253957] ? __pfx_ext4_mkdir+0x10/0x10 [ 114.253973] ? security_inode_permission+0x72/0xe0 [ 114.253986] vfs_mkdir+0x6d8/0xc00 [ 114.254003] do_mkdirat+0x11a/0x440 [ 114.254016] ? __pfx_do_mkdirat+0x10/0x10 [ 114.254028] ? strncpy_from_user+0x21b/0x2f0 [ 114.254046] __x64_sys_mkdir+0x65/0x80 [ 114.254058] do_syscall_64+0xbf/0x420 [ 114.254070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.254084] RIP: 0033:0x7fd3bd7fcc27 [ 114.254093] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.254104] RSP: 002b:00007ffcd6de5be8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 114.254115] RAX: ffffffffffffffda RBX: 00007ffcd6de5c70 RCX: 00007fd3bd7fcc27 [ 114.254123] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffcd6de5c70 [ 114.254130] RBP: 00007ffcd6de5c4c R08: 0000000000000000 R09: 0000000000000004 [ 114.254137] R10: 00007ffcd6de5986 R11: 0000000000000206 R12: 0000000000000032 [ 114.254145] R13: 000000000001bd50 R14: 0000000000000003 R15: 00007ffcd6de5cb0 [ 114.254155] [ 114.269644] ------------[ cut here ]------------ [ 114.280989] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.7/282 [ 114.281944] Modules linked in: [ 114.282253] CPU: 0 UID: 0 PID: 282 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 114.283092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 114.283746] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 114.284254] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 114.285757] RSP: 0018:ffff88800f7179e0 EFLAGS: 00010286 [ 114.286228] RAX: 00000000ffffffff RBX: ffff88800ec2d280 RCX: ffffffff81565a27 [ 114.286804] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88800ec2d67c [ 114.287422] RBP: ffff88800ec2d280 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 114.288001] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ec2d280 [ 114.288619] R13: 0000000000000001 R14: ffffffff85c10710 R15: ffff888018263c48 [ 114.289238] FS: 000055556df6a400(0000) GS:ffff8880e5343000(0000) knlGS:0000000000000000 [ 114.289897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.290410] CR2: 0000001b2cb33000 CR3: 000000001e224000 CR4: 0000000000350ef0 [ 114.290980] Call Trace: [ 114.291268] [ 114.291909] __wait_on_freeing_inode+0x10f/0x350 [ 114.292619] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 114.293703] ? __pfx_var_wake_function+0x10/0x10 [ 114.294924] ? lock_is_held_type+0x9e/0x120 [ 114.296056] insert_inode_locked+0x25f/0x890 [ 114.297657] __ext4_new_inode+0x223d/0x4cd0 [ 114.306720] ? __pfx___ext4_new_inode+0x10/0x10 [ 114.307891] ? __pfx_avc_has_perm+0x10/0x10 [ 114.308540] ? __pfx___dquot_initialize+0x10/0x10 [ 114.310720] ext4_mkdir+0x331/0xb30 [ 114.312653] ? __pfx_ext4_mkdir+0x10/0x10 [ 114.313281] ? security_inode_permission+0x72/0xe0 [ 114.314875] vfs_mkdir+0x6d8/0xc00 [ 114.316254] do_mkdirat+0x11a/0x440 [ 114.317235] ? __pfx_do_mkdirat+0x10/0x10 [ 114.317916] ? strncpy_from_user+0x21b/0x2f0 [ 114.319789] __x64_sys_mkdir+0x65/0x80 [ 114.320424] do_syscall_64+0xbf/0x420 [ 114.321229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.321736] RIP: 0033:0x7fd3bd7fcc27 [ 114.328273] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 114.335697] RSP: 002b:00007ffcd6de5be8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 114.337272] RAX: ffffffffffffffda RBX: 00007ffcd6de5c70 RCX: 00007fd3bd7fcc27 [ 114.337845] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffcd6de5c70 [ 114.338452] RBP: 00007ffcd6de5c4c R08: 0000000000000000 R09: 0000000000000004 [ 114.339061] R10: 00007ffcd6de5986 R11: 0000000000000206 R12: 0000000000000032 [ 114.339619] R13: 000000000001bd50 R14: 0000000000000003 R15: 00007ffcd6de5cb0 [ 114.342223] [ 114.342415] irq event stamp: 327041 [ 114.342698] hardirqs last enabled at (327041): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 114.343603] hardirqs last disabled at (327040): [] _raw_spin_lock_irqsave+0x53/0x60 [ 114.344428] softirqs last enabled at (327036): [] kernel_fpu_end+0x59/0x70 [ 114.345203] softirqs last disabled at (327034): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 114.345998] ---[ end trace 0000000000000000 ]--- [ 114.401598] loop6: detected capacity change from 0 to 64 [ 114.401625] loop7: detected capacity change from 0 to 64 [ 114.409164] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 114.411275] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:09:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() [ 114.475127] loop2: detected capacity change from 0 to 64 [ 114.485488] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 114.486906] loop4: detected capacity change from 0 to 64 [ 114.495545] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:09:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:57 executing program 1: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:57 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:57 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="180980b4e5c7687c1d417c828b03655667c74a59b8e4fc8027cc6a8c36d59e66acdf21e6d1215cdb11310fc0f1b1eecccb2bcf79e160454c52d32a58395a345c25b34691f4b31b710be70e896eeeea7622e91bb2cd7644cdc3b5b09b3ae70f529276b7350d0fc3a82c4a765907c2e141cccafa5a5fc50299aeed2a96ffd4312771f427720c6b3d2cd87985020993c36f3bc3fec186bc40dcd67043bda697e34a6fb2e16150deb9387a15eff0ddc92b3a938d8b77621feea31580d0c13e8aed290a2c56be9b3909d0595c8dab8081434998f7d6877b8693bde99e757aafce998db2221a2aa86e4cffe631303588040832b5dfef1fbda7d62f38d4aca60a51", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x0, 0x0) fsync(r0) 08:09:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb21}, 0x14}}, 0x0) 08:09:57 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 08:09:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) [ 115.098508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 115.099000] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 3 prio class 2 [ 115.101060] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 115.101660] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 115.102250] Buffer I/O error on dev sr0, logical block 2, lost async page write 08:09:57 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_io_uring_setup(0x451f, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x437e, 0x0, 0x0, 0x0, 0x0) close(r1) write$P9_RSTAT(r0, &(0x7f0000001100)=ANY=[], 0xfffffdef) 08:09:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x0, 0x0) fsync(r0) 08:09:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb21}, 0x14}}, 0x0) 08:09:57 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00f78622783d23fc238a1d2147c1c4efaceaeba3002bef7184f79cec11440b3e48a1e7da90d66139125010023c741f690748b91038212e0000710d0f9b7d5e0f1f834c5a9b602ac6"]) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fremovexattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/104, 0x68}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000000600)=""/241, 0xf1}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/85, 0x55}], 0x5, &(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000100000000010000000200000034e349ea54f4857788739c248323136254d8b8377fe580232df6ba4af8510b0081284f7ec9000000000000dd1a77ce984ae52a7c0bef658cc0949c25d84f04d4a5b4d7ef32f0a6c8c584fe327eebd6a6c9b1515eb7f5c91ced548ba0af80af0673ab939bcaf74ca2656a5a7f5eab5fad6e62c7dea59655a30d1e431116d5bc8f172f84a35aba53925ef5f2738e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x88}, 0x20) perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) futimesat(r3, 0x0, 0x0) mkdirat(r3, &(0x7f0000001040)='./file0\x00', 0xd) r4 = syz_io_uring_setup(0x3cff, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000001240)) r5 = fcntl$dupfd(r4, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000100)=[r4], 0x1) mkdirat(r5, &(0x7f0000001080)='./file0\x00', 0x22) ioctl$SG_IO(r2, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1000, &(0x7f0000000000)=""/4096}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000a40)={0x0, 0xfffffffffffffffb, 0xfe, 0x6, @buffer={0x0, 0xed, &(0x7f00000002c0)=""/237}, &(0x7f0000000940)="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", &(0x7f0000001140)=""/131, 0x97, 0x10000, 0x2, &(0x7f0000000080)}) fork() 08:09:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 08:09:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb21}, 0x14}}, 0x0) [ 115.268078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 115.268584] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 3 prio class 2 08:09:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x0, 0x0) fsync(r0) [ 115.269875] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 115.270535] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 115.271347] Buffer I/O error on dev sr0, logical block 2, lost async page write 08:09:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 08:09:57 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/disk', 0x0, 0x0) fsync(r0) 08:09:58 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb21}, 0x14}}, 0x0) 08:09:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:58 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:58 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0xa00, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) 08:09:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0xb21}, 0x14}}, 0x0) 08:09:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 08:09:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:58 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 08:09:58 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x15}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) [ 115.495120] audit: type=1326 audit(1768378198.161:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4696 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89404dfb19 code=0x0 08:09:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_secret(0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4) 08:09:58 execut VM DIAGNOSIS: 08:09:57 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88800f7174c8 R8 =0000000000000000 R9 =ffffed10015c3046 R10=0000000000000061 R11=666666203a312320 R12=0000000000000061 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556df6a400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2cb33000 CR3=000000001e224000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801612f670 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11002c25ecf R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801612f6a8 RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc23e7978c0 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe6000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f303b7b4000 CR3=000000000d6a1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=0000000000000000000031706f6f6c2f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000564eb522aa400000564eb5a96a00 XMM06=0000564eb5ad70e00000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000