Warning: Permanently added '[localhost]:47621' (ECDSA) to the list of known hosts.
2026/01/14 09:06:36 fuzzer started
2026/01/14 09:06:36 dialing manager at localhost:46753
syzkaller login: [   50.759637] cgroup: Unknown subsys name 'net'
[   50.836216] cgroup: Unknown subsys name 'cpuset'
[   50.851814] cgroup: Unknown subsys name 'rlimit'
2026/01/14 09:06:46 syscalls: 2214
2026/01/14 09:06:46 code coverage: enabled
2026/01/14 09:06:46 comparison tracing: enabled
2026/01/14 09:06:46 extra coverage: enabled
2026/01/14 09:06:46 setuid sandbox: enabled
2026/01/14 09:06:46 namespace sandbox: enabled
2026/01/14 09:06:46 Android sandbox: enabled
2026/01/14 09:06:46 fault injection: enabled
2026/01/14 09:06:46 leak checking: enabled
2026/01/14 09:06:46 net packet injection: enabled
2026/01/14 09:06:46 net device setup: enabled
2026/01/14 09:06:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/14 09:06:46 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/14 09:06:46 USB emulation: enabled
2026/01/14 09:06:46 hci packet injection: enabled
2026/01/14 09:06:46 wifi device emulation: enabled
2026/01/14 09:06:46 802.15.4 emulation: enabled
2026/01/14 09:06:46 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/14 09:06:46 fetching corpus: 50, signal 28249/31729 (executing program)
2026/01/14 09:06:46 fetching corpus: 100, signal 40805/45691 (executing program)
2026/01/14 09:06:46 fetching corpus: 150, signal 46435/52749 (executing program)
2026/01/14 09:06:47 fetching corpus: 200, signal 51502/59140 (executing program)
2026/01/14 09:06:47 fetching corpus: 250, signal 57373/66248 (executing program)
2026/01/14 09:06:47 fetching corpus: 300, signal 66158/75981 (executing program)
2026/01/14 09:06:47 fetching corpus: 350, signal 69979/80948 (executing program)
2026/01/14 09:06:47 fetching corpus: 400, signal 74366/86312 (executing program)
2026/01/14 09:06:47 fetching corpus: 450, signal 78131/91049 (executing program)
2026/01/14 09:06:47 fetching corpus: 500, signal 80858/94826 (executing program)
2026/01/14 09:06:47 fetching corpus: 550, signal 84407/99267 (executing program)
2026/01/14 09:06:48 fetching corpus: 600, signal 87651/103392 (executing program)
2026/01/14 09:06:48 fetching corpus: 650, signal 90659/107262 (executing program)
2026/01/14 09:06:48 fetching corpus: 700, signal 93743/111083 (executing program)
2026/01/14 09:06:48 fetching corpus: 750, signal 96758/114819 (executing program)
2026/01/14 09:06:48 fetching corpus: 800, signal 98313/117267 (executing program)
2026/01/14 09:06:48 fetching corpus: 850, signal 99993/119780 (executing program)
2026/01/14 09:06:48 fetching corpus: 900, signal 101802/122358 (executing program)
2026/01/14 09:06:48 fetching corpus: 950, signal 103331/124694 (executing program)
2026/01/14 09:06:49 fetching corpus: 1000, signal 105433/127477 (executing program)
2026/01/14 09:06:49 fetching corpus: 1050, signal 107529/130188 (executing program)
2026/01/14 09:06:49 fetching corpus: 1100, signal 110058/133151 (executing program)
2026/01/14 09:06:49 fetching corpus: 1150, signal 111704/135423 (executing program)
2026/01/14 09:06:49 fetching corpus: 1200, signal 113425/137739 (executing program)
2026/01/14 09:06:49 fetching corpus: 1250, signal 114887/139802 (executing program)
2026/01/14 09:06:49 fetching corpus: 1300, signal 116316/141851 (executing program)
2026/01/14 09:06:49 fetching corpus: 1350, signal 119606/145236 (executing program)
2026/01/14 09:06:49 fetching corpus: 1400, signal 121272/147339 (executing program)
2026/01/14 09:06:50 fetching corpus: 1450, signal 122748/149309 (executing program)
2026/01/14 09:06:50 fetching corpus: 1500, signal 124039/151123 (executing program)
2026/01/14 09:06:50 fetching corpus: 1550, signal 125851/153273 (executing program)
2026/01/14 09:06:50 fetching corpus: 1600, signal 127509/155294 (executing program)
2026/01/14 09:06:50 fetching corpus: 1650, signal 128732/156987 (executing program)
2026/01/14 09:06:50 fetching corpus: 1700, signal 129988/158671 (executing program)
2026/01/14 09:06:50 fetching corpus: 1750, signal 131087/160194 (executing program)
2026/01/14 09:06:50 fetching corpus: 1800, signal 132120/161710 (executing program)
2026/01/14 09:06:50 fetching corpus: 1850, signal 133777/163604 (executing program)
2026/01/14 09:06:51 fetching corpus: 1900, signal 134792/165025 (executing program)
2026/01/14 09:06:51 fetching corpus: 1950, signal 135947/166622 (executing program)
2026/01/14 09:06:51 fetching corpus: 2000, signal 136861/167969 (executing program)
2026/01/14 09:06:51 fetching corpus: 2050, signal 137818/169319 (executing program)
2026/01/14 09:06:51 fetching corpus: 2100, signal 138930/170723 (executing program)
2026/01/14 09:06:51 fetching corpus: 2150, signal 139756/171993 (executing program)
2026/01/14 09:06:51 fetching corpus: 2200, signal 141248/173574 (executing program)
2026/01/14 09:06:51 fetching corpus: 2250, signal 142312/174879 (executing program)
2026/01/14 09:06:52 fetching corpus: 2300, signal 143290/176177 (executing program)
2026/01/14 09:06:52 fetching corpus: 2350, signal 144291/177444 (executing program)
2026/01/14 09:06:52 fetching corpus: 2400, signal 145576/178837 (executing program)
2026/01/14 09:06:52 fetching corpus: 2450, signal 146246/179925 (executing program)
2026/01/14 09:06:52 fetching corpus: 2500, signal 147040/181028 (executing program)
2026/01/14 09:06:52 fetching corpus: 2550, signal 147647/182004 (executing program)
2026/01/14 09:06:52 fetching corpus: 2600, signal 148589/183075 (executing program)
2026/01/14 09:06:52 fetching corpus: 2650, signal 149513/184149 (executing program)
2026/01/14 09:06:52 fetching corpus: 2700, signal 150313/185212 (executing program)
2026/01/14 09:06:53 fetching corpus: 2750, signal 151161/186265 (executing program)
2026/01/14 09:06:53 fetching corpus: 2800, signal 151813/187175 (executing program)
2026/01/14 09:06:53 fetching corpus: 2850, signal 152391/188089 (executing program)
2026/01/14 09:06:53 fetching corpus: 2900, signal 153092/188999 (executing program)
2026/01/14 09:06:53 fetching corpus: 2950, signal 153691/189878 (executing program)
2026/01/14 09:06:53 fetching corpus: 3000, signal 154214/190700 (executing program)
2026/01/14 09:06:53 fetching corpus: 3050, signal 154677/191451 (executing program)
2026/01/14 09:06:53 fetching corpus: 3100, signal 155355/192275 (executing program)
2026/01/14 09:06:53 fetching corpus: 3150, signal 155890/193064 (executing program)
2026/01/14 09:06:54 fetching corpus: 3200, signal 156659/193950 (executing program)
2026/01/14 09:06:54 fetching corpus: 3250, signal 158553/195227 (executing program)
2026/01/14 09:06:54 fetching corpus: 3300, signal 159067/195983 (executing program)
2026/01/14 09:06:54 fetching corpus: 3350, signal 159867/196800 (executing program)
2026/01/14 09:06:54 fetching corpus: 3400, signal 160828/197747 (executing program)
2026/01/14 09:06:54 fetching corpus: 3450, signal 161291/198437 (executing program)
2026/01/14 09:06:54 fetching corpus: 3500, signal 161752/199173 (executing program)
2026/01/14 09:06:54 fetching corpus: 3550, signal 162404/199933 (executing program)
2026/01/14 09:06:54 fetching corpus: 3600, signal 163114/200715 (executing program)
2026/01/14 09:06:54 fetching corpus: 3650, signal 163557/201411 (executing program)
2026/01/14 09:06:55 fetching corpus: 3700, signal 163993/202096 (executing program)
2026/01/14 09:06:55 fetching corpus: 3750, signal 164700/202829 (executing program)
2026/01/14 09:06:55 fetching corpus: 3800, signal 165331/203507 (executing program)
2026/01/14 09:06:55 fetching corpus: 3850, signal 165823/204120 (executing program)
2026/01/14 09:06:55 fetching corpus: 3900, signal 166383/204768 (executing program)
2026/01/14 09:06:55 fetching corpus: 3950, signal 166867/205381 (executing program)
2026/01/14 09:06:55 fetching corpus: 4000, signal 167422/206000 (executing program)
2026/01/14 09:06:55 fetching corpus: 4050, signal 168057/206594 (executing program)
2026/01/14 09:06:55 fetching corpus: 4100, signal 168632/207242 (executing program)
2026/01/14 09:06:56 fetching corpus: 4150, signal 169255/207853 (executing program)
2026/01/14 09:06:56 fetching corpus: 4200, signal 169874/208475 (executing program)
2026/01/14 09:06:56 fetching corpus: 4250, signal 170562/209057 (executing program)
2026/01/14 09:06:56 fetching corpus: 4300, signal 171080/209643 (executing program)
2026/01/14 09:06:56 fetching corpus: 4350, signal 171907/210290 (executing program)
2026/01/14 09:06:56 fetching corpus: 4400, signal 172358/210816 (executing program)
2026/01/14 09:06:56 fetching corpus: 4450, signal 172905/211337 (executing program)
2026/01/14 09:06:56 fetching corpus: 4500, signal 173552/211885 (executing program)
2026/01/14 09:06:57 fetching corpus: 4550, signal 173975/212367 (executing program)
2026/01/14 09:06:57 fetching corpus: 4600, signal 174511/212862 (executing program)
2026/01/14 09:06:57 fetching corpus: 4650, signal 175038/213381 (executing program)
2026/01/14 09:06:57 fetching corpus: 4700, signal 175594/213854 (executing program)
2026/01/14 09:06:57 fetching corpus: 4750, signal 175968/214270 (executing program)
2026/01/14 09:06:57 fetching corpus: 4800, signal 176734/214756 (executing program)
2026/01/14 09:06:57 fetching corpus: 4850, signal 177135/215213 (executing program)
2026/01/14 09:06:57 fetching corpus: 4900, signal 177859/215664 (executing program)
2026/01/14 09:06:57 fetching corpus: 4950, signal 178315/216138 (executing program)
2026/01/14 09:06:58 fetching corpus: 5000, signal 178754/216573 (executing program)
2026/01/14 09:06:58 fetching corpus: 5050, signal 179293/216975 (executing program)
2026/01/14 09:06:58 fetching corpus: 5100, signal 179627/217391 (executing program)
2026/01/14 09:06:58 fetching corpus: 5150, signal 179953/217797 (executing program)
2026/01/14 09:06:58 fetching corpus: 5200, signal 180534/218177 (executing program)
2026/01/14 09:06:58 fetching corpus: 5250, signal 180882/218541 (executing program)
2026/01/14 09:06:58 fetching corpus: 5300, signal 181405/218925 (executing program)
2026/01/14 09:06:58 fetching corpus: 5350, signal 181789/219274 (executing program)
2026/01/14 09:06:58 fetching corpus: 5400, signal 182377/219615 (executing program)
2026/01/14 09:06:59 fetching corpus: 5450, signal 182962/219870 (executing program)
2026/01/14 09:06:59 fetching corpus: 5500, signal 183430/219872 (executing program)
2026/01/14 09:06:59 fetching corpus: 5550, signal 183810/219874 (executing program)
2026/01/14 09:06:59 fetching corpus: 5600, signal 184127/219891 (executing program)
2026/01/14 09:06:59 fetching corpus: 5650, signal 184493/219891 (executing program)
2026/01/14 09:06:59 fetching corpus: 5700, signal 184988/219891 (executing program)
2026/01/14 09:06:59 fetching corpus: 5750, signal 185334/219891 (executing program)
2026/01/14 09:06:59 fetching corpus: 5800, signal 185866/219891 (executing program)
2026/01/14 09:06:59 fetching corpus: 5850, signal 186287/219891 (executing program)
2026/01/14 09:07:00 fetching corpus: 5900, signal 186607/219891 (executing program)
2026/01/14 09:07:00 fetching corpus: 5950, signal 187031/219891 (executing program)
2026/01/14 09:07:00 fetching corpus: 6000, signal 187470/219891 (executing program)
2026/01/14 09:07:00 fetching corpus: 6050, signal 187827/219891 (executing program)
2026/01/14 09:07:00 fetching corpus: 6100, signal 188176/219891 (executing program)
2026/01/14 09:07:00 fetching corpus: 6150, signal 188569/219893 (executing program)
2026/01/14 09:07:00 fetching corpus: 6200, signal 189093/219893 (executing program)
2026/01/14 09:07:00 fetching corpus: 6250, signal 189710/219893 (executing program)
2026/01/14 09:07:00 fetching corpus: 6300, signal 190187/219893 (executing program)
2026/01/14 09:07:00 fetching corpus: 6350, signal 190578/219893 (executing program)
2026/01/14 09:07:01 fetching corpus: 6400, signal 190844/219893 (executing program)
2026/01/14 09:07:01 fetching corpus: 6450, signal 191145/219894 (executing program)
2026/01/14 09:07:01 fetching corpus: 6500, signal 191532/219894 (executing program)
2026/01/14 09:07:01 fetching corpus: 6550, signal 191821/219894 (executing program)
2026/01/14 09:07:01 fetching corpus: 6600, signal 192152/219896 (executing program)
2026/01/14 09:07:01 fetching corpus: 6650, signal 192558/219896 (executing program)
2026/01/14 09:07:01 fetching corpus: 6700, signal 192884/219896 (executing program)
2026/01/14 09:07:01 fetching corpus: 6750, signal 193217/219896 (executing program)
2026/01/14 09:07:01 fetching corpus: 6800, signal 193563/219896 (executing program)
2026/01/14 09:07:01 fetching corpus: 6850, signal 193821/219896 (executing program)
2026/01/14 09:07:02 fetching corpus: 6900, signal 194165/219896 (executing program)
2026/01/14 09:07:02 fetching corpus: 6950, signal 194514/219896 (executing program)
2026/01/14 09:07:02 fetching corpus: 7000, signal 194930/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7050, signal 195179/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7100, signal 195562/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7150, signal 195873/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7200, signal 196263/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7250, signal 196545/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7300, signal 196968/219897 (executing program)
2026/01/14 09:07:02 fetching corpus: 7350, signal 197301/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7400, signal 197791/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7450, signal 198187/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7500, signal 198524/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7550, signal 198884/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7600, signal 199185/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7650, signal 199378/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7700, signal 199768/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7750, signal 200092/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7800, signal 200331/219897 (executing program)
2026/01/14 09:07:03 fetching corpus: 7850, signal 200595/219897 (executing program)
2026/01/14 09:07:04 fetching corpus: 7900, signal 201003/219897 (executing program)
2026/01/14 09:07:04 fetching corpus: 7950, signal 201333/219897 (executing program)
2026/01/14 09:07:04 fetching corpus: 8000, signal 201647/219903 (executing program)
2026/01/14 09:07:04 fetching corpus: 8050, signal 202052/219904 (executing program)
2026/01/14 09:07:04 fetching corpus: 8100, signal 202293/219904 (executing program)
2026/01/14 09:07:04 fetching corpus: 8150, signal 202685/219905 (executing program)
2026/01/14 09:07:04 fetching corpus: 8200, signal 203092/219907 (executing program)
2026/01/14 09:07:04 fetching corpus: 8250, signal 203508/219909 (executing program)
2026/01/14 09:07:04 fetching corpus: 8300, signal 203817/219909 (executing program)
2026/01/14 09:07:05 fetching corpus: 8350, signal 204125/219909 (executing program)
2026/01/14 09:07:05 fetching corpus: 8400, signal 204425/219909 (executing program)
2026/01/14 09:07:05 fetching corpus: 8450, signal 204817/219909 (executing program)
2026/01/14 09:07:05 fetching corpus: 8500, signal 205121/219909 (executing program)
2026/01/14 09:07:05 fetching corpus: 8550, signal 205462/219909 (executing program)
2026/01/14 09:07:05 fetching corpus: 8600, signal 205667/219911 (executing program)
2026/01/14 09:07:05 fetching corpus: 8650, signal 205914/219911 (executing program)
2026/01/14 09:07:05 fetching corpus: 8700, signal 206170/219911 (executing program)
2026/01/14 09:07:05 fetching corpus: 8750, signal 206464/219911 (executing program)
2026/01/14 09:07:06 fetching corpus: 8800, signal 206703/219911 (executing program)
2026/01/14 09:07:06 fetching corpus: 8850, signal 206983/219911 (executing program)
2026/01/14 09:07:06 fetching corpus: 8900, signal 207186/219913 (executing program)
2026/01/14 09:07:06 fetching corpus: 8950, signal 207517/219913 (executing program)
2026/01/14 09:07:06 fetching corpus: 9000, signal 207755/219913 (executing program)
2026/01/14 09:07:06 fetching corpus: 9050, signal 208043/219913 (executing program)
2026/01/14 09:07:06 fetching corpus: 9100, signal 208418/219920 (executing program)
2026/01/14 09:07:06 fetching corpus: 9150, signal 208796/219920 (executing program)
2026/01/14 09:07:06 fetching corpus: 9200, signal 209100/219920 (executing program)
2026/01/14 09:07:06 fetching corpus: 9250, signal 209416/219920 (executing program)
2026/01/14 09:07:07 fetching corpus: 9300, signal 209622/219923 (executing program)
2026/01/14 09:07:07 fetching corpus: 9350, signal 209837/219925 (executing program)
2026/01/14 09:07:07 fetching corpus: 9400, signal 210194/219925 (executing program)
2026/01/14 09:07:07 fetching corpus: 9450, signal 210435/219926 (executing program)
2026/01/14 09:07:07 fetching corpus: 9500, signal 210627/219926 (executing program)
2026/01/14 09:07:07 fetching corpus: 9550, signal 210901/219926 (executing program)
2026/01/14 09:07:07 fetching corpus: 9600, signal 211095/219926 (executing program)
2026/01/14 09:07:07 fetching corpus: 9650, signal 211367/219926 (executing program)
2026/01/14 09:07:08 fetching corpus: 9700, signal 211582/219926 (executing program)
2026/01/14 09:07:08 fetching corpus: 9750, signal 211855/219926 (executing program)
2026/01/14 09:07:08 fetching corpus: 9800, signal 212107/219926 (executing program)
2026/01/14 09:07:08 fetching corpus: 9850, signal 212429/219930 (executing program)
2026/01/14 09:07:08 fetching corpus: 9900, signal 212622/219934 (executing program)
2026/01/14 09:07:08 fetching corpus: 9950, signal 212970/219938 (executing program)
2026/01/14 09:07:08 fetching corpus: 10000, signal 213155/219943 (executing program)
2026/01/14 09:07:08 fetching corpus: 10050, signal 213491/219946 (executing program)
2026/01/14 09:07:08 fetching corpus: 10100, signal 213657/219946 (executing program)
2026/01/14 09:07:08 fetching corpus: 10150, signal 213857/219947 (executing program)
2026/01/14 09:07:09 fetching corpus: 10200, signal 214146/219951 (executing program)
2026/01/14 09:07:09 fetching corpus: 10250, signal 214382/219955 (executing program)
2026/01/14 09:07:09 fetching corpus: 10300, signal 214599/219955 (executing program)
2026/01/14 09:07:09 fetching corpus: 10350, signal 214767/219955 (executing program)
2026/01/14 09:07:09 fetching corpus: 10400, signal 215077/219958 (executing program)
2026/01/14 09:07:09 fetching corpus: 10450, signal 215355/219958 (executing program)
2026/01/14 09:07:09 fetching corpus: 10500, signal 215653/219959 (executing program)
2026/01/14 09:07:09 fetching corpus: 10550, signal 215936/219959 (executing program)
2026/01/14 09:07:09 fetching corpus: 10600, signal 216177/219960 (executing program)
2026/01/14 09:07:10 fetching corpus: 10650, signal 216386/219960 (executing program)
2026/01/14 09:07:10 fetching corpus: 10700, signal 216570/219965 (executing program)
2026/01/14 09:07:10 fetching corpus: 10750, signal 216774/219965 (executing program)
2026/01/14 09:07:10 fetching corpus: 10800, signal 216952/219965 (executing program)
2026/01/14 09:07:10 fetching corpus: 10850, signal 217140/219965 (executing program)
2026/01/14 09:07:10 fetching corpus: 10900, signal 217324/219972 (executing program)
2026/01/14 09:07:10 fetching corpus: 10950, signal 217483/219972 (executing program)
2026/01/14 09:07:10 fetching corpus: 11000, signal 217763/219972 (executing program)
2026/01/14 09:07:10 fetching corpus: 11050, signal 218017/219972 (executing program)
2026/01/14 09:07:10 fetching corpus: 11100, signal 218236/219972 (executing program)
2026/01/14 09:07:11 fetching corpus: 11150, signal 218385/219972 (executing program)
2026/01/14 09:07:11 fetching corpus: 11194, signal 218594/219974 (executing program)
2026/01/14 09:07:11 fetching corpus: 11194, signal 218594/219974 (executing program)
2026/01/14 09:07:13 starting 8 fuzzer processes
09:07:13 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)

09:07:13 executing program 6:
r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "3a3e2ea944248b7dbb73151700e27919c48869c365deaa89be9e6e73a6fd77c8dc044c497a73ebfacd3c653cabcbb5129d5aa6b809d7fc00450610f3f4306299"}, 0x48, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0)

09:07:13 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='status\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0)

09:07:13 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
io_setup(0xfff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1)
r3 = geteuid()
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
setresuid(0x0, r5, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71)

09:07:13 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[   87.318833] audit: type=1400 audit(1768381633.574:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:07:13 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700})
socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000006d00), &(0x7f0000006d40)='./file0\x00', 0x4, 0x1, &(0x7f0000007d80)=[{&(0x7f0000006d80)="a5300ca412a0", 0x6}], 0x0, &(0x7f0000007dc0)={[{@nodots}], [{@obj_user={'obj_user', 0x3d, 'veth0_to_batadv\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

09:07:13 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffe, 0x64040)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)

09:07:13 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10)

[   88.431131] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.435223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.442060] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.445084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.447255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.495714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.498217] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.499680] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.503604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.508115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.563324] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.565070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.566556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.569124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.574968] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.670335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.678080] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.679534] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.681697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.690437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.691735] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.693496] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.695171] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.696387] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.697549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.704489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.709234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.710005] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.710891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.712298] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.712845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.716390] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.717465] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   88.719139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.719480] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.719953] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.731878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.732500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.734585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.740452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.531330] Bluetooth: hci1: command tx timeout
[   90.531964] Bluetooth: hci0: command tx timeout
[   90.594534] Bluetooth: hci2: command tx timeout
[   90.786968] Bluetooth: hci3: command tx timeout
[   90.787107] Bluetooth: hci5: command tx timeout
[   90.787717] Bluetooth: hci7: command tx timeout
[   90.788645] Bluetooth: hci6: command tx timeout
[   90.851050] Bluetooth: hci4: command tx timeout
[   92.578019] Bluetooth: hci1: command tx timeout
[   92.578476] Bluetooth: hci0: command tx timeout
[   92.642550] Bluetooth: hci2: command tx timeout
[   92.834024] Bluetooth: hci7: command tx timeout
[   92.835444] Bluetooth: hci5: command tx timeout
[   92.835479] Bluetooth: hci3: command tx timeout
[   92.835844] Bluetooth: hci6: command tx timeout
[   92.898062] Bluetooth: hci4: command tx timeout
[   94.627018] Bluetooth: hci0: command tx timeout
[   94.627847] Bluetooth: hci1: command tx timeout
[   94.690054] Bluetooth: hci2: command tx timeout
[   94.883256] Bluetooth: hci7: command tx timeout
[   94.883280] Bluetooth: hci6: command tx timeout
[   94.884499] Bluetooth: hci3: command tx timeout
[   94.884523] Bluetooth: hci5: command tx timeout
[   94.945990] Bluetooth: hci4: command tx timeout
[   96.674963] Bluetooth: hci0: command tx timeout
[   96.675433] Bluetooth: hci1: command tx timeout
[   96.737993] Bluetooth: hci2: command tx timeout
[   96.930024] Bluetooth: hci5: command tx timeout
[   96.930494] Bluetooth: hci6: command tx timeout
[   96.930900] Bluetooth: hci3: command tx timeout
[   96.931334] Bluetooth: hci7: command tx timeout
[   96.994315] Bluetooth: hci4: command tx timeout
[  123.882349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.883032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.081548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.082202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.175514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.176174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.368600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.369239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.457241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.457882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.492020] audit: type=1400 audit(1768381670.745:8): avc:  denied  { open } for  pid=3800 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  124.504055] audit: type=1400 audit(1768381670.745:9): avc:  denied  { kernel } for  pid=3800 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  124.597197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.597795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:07:50 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
io_setup(0xfff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1)
r3 = geteuid()
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
setresuid(0x0, r5, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71)

[  124.714696] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  124.714716] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  124.717412] Bluetooth: hci3: adv larger than maximum supported
[  124.717429] Bluetooth: hci3: adv larger than maximum supported
[  124.717917] Bluetooth: hci3: adv larger than maximum supported
[  124.718389] Bluetooth: hci3: Malformed LE Event: 0x0d
[  124.719374] audit: type=1400 audit(1768381670.968:10): avc:  denied  { block_suspend } for  pid=3817 comm="syz-executor.2" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  124.737027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.737601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:07:51 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
io_setup(0xfff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1)
r3 = geteuid()
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
setresuid(0x0, r5, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71)

[  124.777519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.778753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.836476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.837083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:07:51 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000)
io_setup(0xfff, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x8b)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000000)=@in6={0xa, 0x3a, 0x0, @private1}, 0x80, &(0x7f0000000280)}, 0x2000c0c1)
open(&(0x7f0000000140)='./file0\x00', 0x4040, 0x99)
io_submit(0x0, 0x2000000000000193, &(0x7f0000000240))
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x6802, 0x1)
r3 = geteuid()
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
setresuid(0x0, r5, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x71, 0x7d, 0x2, {{0x0, 0x5a, 0x4dc, 0x4, {0xe5be30dbb6acd81a, 0x0, 0x2}, 0x18000000, 0x70, 0xff, 0x41, 0x12, '/dev/loop-control\x00', 0x2, '-/', 0x12, '/dev/loop-control\x00', 0x1, '\x00'}, 0x2, '(#', r3, r4, r5}}, 0x71)

[  124.889962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.890551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:07:51 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  124.975975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.976622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.990886] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  124.990903] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  124.992002] Bluetooth: hci3: adv larger than maximum supported
[  124.992013] Bluetooth: hci3: adv larger than maximum supported
[  124.992489] Bluetooth: hci3: adv larger than maximum supported
[  124.992968] Bluetooth: hci3: Malformed LE Event: 0x0d
09:07:51 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  125.026304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.026882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:07:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10)

[  125.112065] Bluetooth: hci5: unexpected event 0x3e length: 431 > 260
[  125.112088] Bluetooth: hci5: unexpected subevent 0x0d length: 430 > 260
[  125.113558] Bluetooth: hci5: adv larger than maximum supported
[  125.113581] Bluetooth: hci5: adv larger than maximum supported
[  125.114121] Bluetooth: hci5: adv larger than maximum supported
[  125.114591] Bluetooth: hci5: Malformed LE Event: 0x0d
09:07:51 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:51 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10)

[  125.184990] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  125.185009] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  125.187978] Bluetooth: hci3: adv larger than maximum supported
[  125.187991] Bluetooth: hci3: Malformed LE Event: 0x0d
[  125.795994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.796626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.838949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.839529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.959707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.960457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.969048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  125.974757] msdos: Unknown parameter 'obj_user'
[  125.993391] msdos: Unknown parameter 'obj_user'
[  126.030326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.031392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.179245] msdos: Unknown parameter 'obj_user'
09:07:52 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)

09:07:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:52 executing program 6:
r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "3a3e2ea944248b7dbb73151700e27919c48869c365deaa89be9e6e73a6fd77c8dc044c497a73ebfacd3c653cabcbb5129d5aa6b809d7fc00450610f3f4306299"}, 0x48, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0)

09:07:52 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043eaf0db32c0001aaaaaaaaaa110508010192010000ffffffffffff3f9bb0cc8e949a29882285cfe31a722e142c3722692d0eab3423e39b23136cea50f2d2af3249f2364777161fd8bc584da26c7f003d3842d436b3bc19c63d538c030001ffffffffffff0905fd0904080001aaaaaaaaaa127286393d04b155ba28106d29cf997eda69303a0f683c1b68238669e6f2adaab9dd24f2110704b578424d80c653fa1c31451151eb2ff6244c4ecf003994e0e00e3f4362fba0c4f160c19bf3893bbc3f1b43fcd132ff19117a976081103bbdbe93ba9ca91b7a61d69a07608f541c2e6af37fc92d100001aaaaaaaaaa11420904692800007f000000000000b42ccb38ed85a287bbf230ef42cd74c5223102d3556264e5fbb8d73569ad93c350b27f1eb087e6526c544657ec1af10ed3e6104336b9433a4cc219b29b37ab9517c473a94155fb457db490a25a22b91eeb142199dba873ec11e709029f2874d2c2f7e36ccf037a2d256c4c50bc551c4ce313c828dac982191cf23aa7764a7758a8fb5e95b38202900b195044edf14db25ee3ab0ff3fe05456a161d987227944f36525f67240c74799b421acb55a498adfbb5cc4ac5"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f00000003c0)={0x0, 0x1, 0x6, @remote}, 0x10)

09:07:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='status\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0)

09:07:52 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffe, 0x64040)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)

09:07:52 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700})
socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000006d00), &(0x7f0000006d40)='./file0\x00', 0x4, 0x1, &(0x7f0000007d80)=[{&(0x7f0000006d80)="a5300ca412a0", 0x6}], 0x0, &(0x7f0000007dc0)={[{@nodots}], [{@obj_user={'obj_user', 0x3d, 'veth0_to_batadv\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

[  126.181525] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.181541] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  126.182903] Bluetooth: hci3: Malformed LE Event: 0x0d
[  126.197787] Bluetooth: hci5: unexpected event 0x3e length: 431 > 260
[  126.197803] Bluetooth: hci5: unexpected subevent 0x0d length: 430 > 260
[  126.199428] Bluetooth: hci5: Malformed LE Event: 0x0d
09:07:52 executing program 6:
r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "3a3e2ea944248b7dbb73151700e27919c48869c365deaa89be9e6e73a6fd77c8dc044c497a73ebfacd3c653cabcbb5129d5aa6b809d7fc00450610f3f4306299"}, 0x48, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0)

09:07:52 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffe, 0x64040)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)

09:07:52 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)

09:07:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='status\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0)

09:07:52 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

09:07:52 executing program 6:
r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "3a3e2ea944248b7dbb73151700e27919c48869c365deaa89be9e6e73a6fd77c8dc044c497a73ebfacd3c653cabcbb5129d5aa6b809d7fc00450610f3f4306299"}, 0x48, 0xfffffffffffffffc)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r0)

09:07:52 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffe, 0x64040)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)

09:07:52 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:52 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700})
socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000006d00), &(0x7f0000006d40)='./file0\x00', 0x4, 0x1, &(0x7f0000007d80)=[{&(0x7f0000006d80)="a5300ca412a0", 0x6}], 0x0, &(0x7f0000007dc0)={[{@nodots}], [{@obj_user={'obj_user', 0x3d, 'veth0_to_batadv\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

[  126.395246] msdos: Unknown parameter 'obj_user'
[  126.411220] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.411243] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  126.413145] Bluetooth: hci3: Malformed LE Event: 0x0d
[  126.421586] Bluetooth: hci5: unexpected event 0x3e length: 431 > 260
[  126.421602] Bluetooth: hci5: unexpected subevent 0x0d length: 430 > 260
[  126.423369] Bluetooth: hci5: Malformed LE Event: 0x0d
09:07:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

09:07:52 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='status\x00')
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/76, 0x4c}], 0x1, 0x0, 0x0)

09:07:52 executing program 6:
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

09:07:52 executing program 0:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)

09:07:52 executing program 3:
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002fc0)={0x0, 0x3938700})
socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000006d00), &(0x7f0000006d40)='./file0\x00', 0x4, 0x1, &(0x7f0000007d80)=[{&(0x7f0000006d80)="a5300ca412a0", 0x6}], 0x0, &(0x7f0000007dc0)={[{@nodots}], [{@obj_user={'obj_user', 0x3d, 'veth0_to_batadv\x00'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

09:07:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

09:07:52 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:52 executing program 7:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

[  126.595145] msdos: Unknown parameter 'obj_user'
09:07:52 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})

[  126.599982] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.600004] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  126.603154] Bluetooth: hci3: Malformed LE Event: 0x0d
09:07:52 executing program 6:
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

09:07:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

09:07:52 executing program 1:
r0 = epoll_create(0x5)
r1 = getpgrp(0xffffffffffffffff)
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000740)={r0})

09:07:52 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0))

09:07:52 executing program 1:
r0 = epoll_create(0x5)
r1 = getpgrp(0xffffffffffffffff)
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000740)={r0})

09:07:52 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0xfffe})

09:07:52 executing program 6:
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

09:07:52 executing program 7:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

[  126.748050] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (65534)
09:07:53 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0))

09:07:53 executing program 5:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 1:
r0 = epoll_create(0x5)
r1 = getpgrp(0xffffffffffffffff)
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000740)={r0})

09:07:53 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2016}}}, 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r3 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x20000000})
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b2)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x400100, 0xc6, 0x4}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
kexec_load(0x7, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="67e7d3d28022a481fbda1460be00bd0d3e0981c5e7af7ca45e3262ab303810ad13a2ba38c14e6649d897f281a2c66c3ab4c182174037543de58489165558fe5a957260d12041f059c2baa9d80e1eded309907deb603b4f73e267580d0b708c273c72f9206382d63d7420bf6c2c1aa3b3eeab6197", 0x74, 0x9, 0x3000}], 0x3e0000)
process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:07:53 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})

[  126.847063] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (65534)
09:07:53 executing program 6:
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

[  126.907095] Bluetooth: hci3: unexpected event 0x3e length: 431 > 260
[  126.907119] Bluetooth: hci3: unexpected subevent 0x0d length: 430 > 260
[  126.911775] Bluetooth: hci3: Malformed LE Event: 0x0d
09:07:53 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0))

09:07:53 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0xfffe})

09:07:53 executing program 6:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 1:
r0 = epoll_create(0x5)
r1 = getpgrp(0xffffffffffffffff)
r2 = gettid()
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, r0, &(0x7f0000000740)={r0})

09:07:53 executing program 5:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f00000000c0))

09:07:53 executing program 7:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})

09:07:53 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')
openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  127.081367] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (65534)
09:07:53 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0xfffe})

[  127.191830] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (65534)
09:07:53 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x5412, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0})

09:07:53 executing program 0:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0x0, [@multicast1]}, @lsrr={0x83, 0x3}]}}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0)

09:07:53 executing program 5:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')
openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

09:07:53 executing program 7:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 6:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 3:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = dup(r0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x0, 0xfffe})

[  127.314695] EXT4-fs warning (device sda): verify_group_input:158: Reserved blocks too high (65534)
09:07:53 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')
openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

09:07:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utimes(0x0, 0x0)

09:07:53 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')
openat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)

09:07:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:07:53 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01])
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)})

[  127.525567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
09:07:53 executing program 2:
setresuid(0xee01, 0xee00, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)

09:07:53 executing program 6:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000f93000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
mlock(&(0x7f0000926000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

09:07:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utimes(0x0, 0x0)

[  127.589976] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
09:07:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0x0, [@multicast1]}, @lsrr={0x83, 0x3}]}}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0)

[  127.656539] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
09:07:54 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000000440))

09:07:54 executing program 0:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0x0, [@multicast1]}, @lsrr={0x83, 0x3}]}}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0)

09:07:54 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01])
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)})

09:07:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utimes(0x0, 0x0)

09:07:54 executing program 2:
setresuid(0xee01, 0xee00, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)

09:07:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:07:54 executing program 6:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:54 executing program 2:
setresuid(0xee01, 0xee00, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)

09:07:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0x7, 0x0, [@multicast1]}, @lsrr={0x83, 0x3}]}}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @loopback}}}}}}, 0x0)

09:07:54 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000000440))

09:07:54 executing program 0:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:54 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01])
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)})

[  127.879485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
09:07:54 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utimes(0x0, 0x0)

09:07:54 executing program 2:
setresuid(0xee01, 0xee00, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, 0x0)

09:07:54 executing program 6:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:54 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000000440))

09:07:54 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/11, @ANYRES32=r0, @ANYRES32=0xee01])
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000140)})

09:07:54 executing program 1:
io_uring_setup(0x6aff, &(0x7f0000000140))
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0)

09:07:54 executing program 0:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:07:54 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000000440))

09:07:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000f32000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000a4a000/0x1000)=nil)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:07:54 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, "a4e0953bfd474ca8"})

09:07:54 executing program 6:
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78)
splice(r2, 0x0, r0, 0x0, 0x0, 0x0)

09:07:54 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)

09:07:54 executing program 2:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short}, 0xb)

09:07:54 executing program 1:
io_uring_setup(0x6aff, &(0x7f0000000140))
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0)

[  128.204380] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
09:07:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}]}]}, 0x30}}, 0x0)

09:07:54 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)

09:07:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000f32000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000a4a000/0x1000)=nil)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:07:54 executing program 2:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short}, 0xb)

09:07:54 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)

09:07:54 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)

09:07:54 executing program 1:
io_uring_setup(0x6aff, &(0x7f0000000140))
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0)

09:07:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000f32000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000a4a000/0x1000)=nil)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:07:54 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)

[  128.464035] syz-executor.7 (4116) used greatest stack depth: 23664 bytes left
09:07:54 executing program 2:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short}, 0xb)

09:07:54 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)

09:07:54 executing program 1:
io_uring_setup(0x6aff, &(0x7f0000000140))
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0)

09:07:54 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000020000100000000000000000004"], 0x28}], 0x1}, 0x0)

09:07:54 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000f32000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000a4a000/0x1000)=nil)
shmat(0x0, &(0x7f0000400000/0xc00000)=nil, 0x5000)

09:07:54 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)

09:07:54 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2c, 0x30]}}}}]})

09:07:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
clone3(&(0x7f00000015c0)={0x20000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  128.569659] tmpfs: Bad value for 'mpol'
[  128.581102] tmpfs: Bad value for 'mpol'
[  128.585502] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'.
[  128.740033] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  128.740769] Bluetooth: hci3: Injecting HCI hardware error event
[  128.741569] Bluetooth: hci3: hardware error 0x00
09:07:54 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
clone3(&(0x7f00000015c0)={0x20000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:07:54 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0)

09:07:54 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)

09:07:54 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/102400, 0x19000)

09:07:54 executing program 2:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000080)={0x24, @short}, 0xb)

09:07:54 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2c, 0x30]}}}}]})

09:07:55 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
clone3(&(0x7f00000015c0)={0x20000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  128.842510] tmpfs: Bad value for 'mpol'
09:07:55 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
clone3(&(0x7f00000015c0)={0x20000180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:07:55 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2c, 0x30]}}}}]})

09:07:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)

09:07:55 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0)

09:07:55 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000180))

09:07:55 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 1:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

[  128.997313] tmpfs: Bad value for 'mpol'
09:07:55 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 6:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x2c, 0x30]}}}}]})

[  129.121232] tmpfs: Bad value for 'mpol'
[  129.123984] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  129.125412] Bluetooth: hci5: Injecting HCI hardware error event
[  129.126512] Bluetooth: hci5: hardware error 0x00
09:07:55 executing program 1:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)

09:07:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]]}, 0x2c}}, 0x0)

09:07:55 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)

09:07:55 executing program 1:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 0:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)

09:07:55 executing program 3:
r0 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000400000/0xc00000)=nil, 0x6000)
mremap(&(0x7f000057b000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil)

09:07:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]]}, 0x2c}}, 0x0)

09:07:55 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)

09:07:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]]}, 0x2c}}, 0x0)

09:07:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)

09:07:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}]]}, 0x2c}}, 0x0)

[  129.521463] process 'syz-executor.0' launched './file1' with NULL argv: empty string added
09:07:55 executing program 0:
request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

09:07:55 executing program 0:
request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

09:07:55 executing program 4:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = epoll_create(0x6)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')

09:07:55 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00')
pread64(r0, 0x0, 0x0, 0x0)

09:07:55 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a930b258e1103f88de2fc91eb873e55e4d3c44521eb120a6cada51ba65ddda5e4dde98b13e5c15f25578d787855c16d58a5101c2f0e6f9c89f050be20d009f4e"}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x10, r0, 0xfffffffffffffffc)

09:07:55 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)

09:07:55 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
setgid(0x0)

09:07:55 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ieee80211', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/198, 0xc6)

09:07:55 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x0)

09:07:56 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
setgid(0x0)

09:07:56 executing program 0:
request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

09:07:56 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a930b258e1103f88de2fc91eb873e55e4d3c44521eb120a6cada51ba65ddda5e4dde98b13e5c15f25578d787855c16d58a5101c2f0e6f9c89f050be20d009f4e"}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x10, r0, 0xfffffffffffffffc)

09:07:56 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x0)

[  130.914973] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  132.154704] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  132.159380] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  132.161234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  132.165757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  132.168668] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  134.242030] Bluetooth: hci4: command tx timeout
[  136.291079] Bluetooth: hci4: command tx timeout
[  138.337995] Bluetooth: hci4: command tx timeout
[  140.386270] Bluetooth: hci4: command tx timeout
[  146.808367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.809493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.846466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.847629] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:08:13 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
setgid(0x0)

09:08:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

09:08:13 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x5e)

09:08:13 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x0)

09:08:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ieee80211', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/198, 0xc6)

09:08:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a930b258e1103f88de2fc91eb873e55e4d3c44521eb120a6cada51ba65ddda5e4dde98b13e5c15f25578d787855c16d58a5101c2f0e6f9c89f050be20d009f4e"}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x10, r0, 0xfffffffffffffffc)

09:08:13 executing program 0:
request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000940)={'syz', 0x2}, 0x0, 0xfffffffffffffffe)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0)

09:08:13 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000002240)=[{r0}], 0x1, 0x800)
sendmmsg$unix(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

09:08:13 executing program 6:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_buf(r0, 0x29, 0x35, 0x0, 0x0)

09:08:13 executing program 2:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
setgid(0x0)

09:08:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ieee80211', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/198, 0xc6)

09:08:13 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "a930b258e1103f88de2fc91eb873e55e4d3c44521eb120a6cada51ba65ddda5e4dde98b13e5c15f25578d787855c16d58a5101c2f0e6f9c89f050be20d009f4e"}, 0x48, 0xfffffffffffffffe)
keyctl$link(0x10, r0, 0xfffffffffffffffc)

09:08:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

09:08:13 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

09:08:13 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/ieee80211', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/198, 0xc6)

09:08:13 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

[  149.742035] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  149.748525] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  149.751044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  149.755481] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  149.759823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  149.815094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  149.822959] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  149.827796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  149.841459] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  149.843647] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.778009] Bluetooth: hci4: command tx timeout
[  151.906998] Bluetooth: hci5: command tx timeout
[  153.826712] Bluetooth: hci4: command tx timeout
[  153.954960] Bluetooth: hci5: command tx timeout
[  155.875672] Bluetooth: hci4: command tx timeout
[  156.003305] Bluetooth: hci5: command tx timeout
[  157.922691] Bluetooth: hci4: command tx timeout
[  158.049986] Bluetooth: hci5: command tx timeout
[  158.915198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.915803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.953969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.955673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.009409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.010502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.024497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.025327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:08:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

09:08:25 executing program 6:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xedee, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10)

09:08:25 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040), 0x4)

09:08:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6628)

09:08:25 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x5e)

09:08:25 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

09:08:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:25 executing program 1:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  159.190315] 
[  159.190494] =====================================
[  159.190875] WARNING: bad unlock balance detected!
[  159.191269] 6.19.0-rc5-next-20260114 #1 Not tainted
[  159.191663] -------------------------------------
[  159.192040] syz-executor.1/5657 is trying to release lock (rcu_read_lock) at:
[  159.192613] [<ffffffff81c1cd75>] __wait_on_freeing_inode+0x105/0x350
[  159.193133] but there are no more locks to release!
[  159.193805] 
[  159.193805] other info that might help us debug this:
[  159.195484] 4 locks held by syz-executor.1/5657:
[  159.196619]  #0: ffff88800fb1a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  159.198964]  #1: ffff8880489059a8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  159.201181]  #2: ffff88800fb1e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  159.203016]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  159.203764] 
[  159.203764] stack backtrace:
[  159.204125] CPU: 0 UID: 0 PID: 5657 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  159.204139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.204147] Call Trace:
[  159.204151]  <TASK>
[  159.204155]  dump_stack_lvl+0xca/0x120
[  159.204184]  ? __wait_on_freeing_inode+0x105/0x350
[  159.204198]  print_unlock_imbalance_bug+0x118/0x130
[  159.204213]  ? __wait_on_freeing_inode+0x105/0x350
[  159.204228]  lock_release+0x1ee/0x270
[  159.204243]  __wait_on_freeing_inode+0x10a/0x350
[  159.204258]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  159.204274]  ? __pfx_var_wake_function+0x10/0x10
[  159.204291]  ? lock_is_held_type+0x9e/0x120
[  159.204310]  insert_inode_locked+0x25f/0x890
[  159.204327]  __ext4_new_inode+0x223d/0x4cd0
[  159.204345]  ? __pfx___ext4_new_inode+0x10/0x10
[  159.204359]  ? __pfx___dquot_initialize+0x10/0x10
[  159.204378]  ? __pfx_avc_has_perm+0x10/0x10
[  159.204394]  ext4_symlink+0x623/0xb40
[  159.204412]  ? __pfx_ext4_symlink+0x10/0x10
[  159.204428]  ? security_inode_permission+0x72/0xe0
[  159.204441]  vfs_symlink+0x44b/0x840
[  159.204458]  do_symlinkat+0x153/0x440
[  159.204472]  ? __pfx_do_symlinkat+0x10/0x10
[  159.204485]  ? strncpy_from_user+0x21b/0x2f0
[  159.204502]  __x64_sys_symlink+0x79/0xa0
[  159.204515]  do_syscall_64+0xbf/0x420
[  159.204528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.204541] RIP: 0033:0x7f39072f9427
[  159.204551] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  159.204562] RSP: 002b:00007ffed7573308 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  159.204573] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39072f9427
[  159.204581] RDX: ffffffffffffffbc RSI: 00007f390735400e RDI: 00007f39073531dd
[  159.204589] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffed7572d80
[  159.204596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  159.204603] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffed75733d0
[  159.204613]  </TASK>
[  159.220154] ------------[ cut here ]------------
[  159.220530] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.1/5657
[  159.221429] Modules linked in:
[  159.221725] CPU: 0 UID: 0 PID: 5657 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  159.222558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  159.223288] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  159.223757] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9
[  159.225234] RSP: 0018:ffff88800d4879a0 EFLAGS: 00010286
[  159.225660] RAX: 00000000ffffffff RBX: ffff88801b1e0000 RCX: ffffffff81565a27
[  159.226271] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88801b1e03fc
[  159.226835] RBP: ffff88801b1e0000 R08: 0000000000000000 R09: fffffbfff0ba6ffc
[  159.227451] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b1e0000
[  159.228058] R13: 0000000000000001 R14: ffffffff85c0ff90 R15: ffff88801c51ebf0
[  159.228620] FS:  0000555589be0400(0000) GS:ffff8880e5343000(0000) knlGS:0000000000000000
[  159.229295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  159.229756] CR2: 00007f3907379541 CR3: 000000000d18a000 CR4: 0000000000350ef0
[  159.230369] Call Trace:
[  159.230613]  <TASK>
[  159.231303]  __wait_on_freeing_inode+0x10f/0x350
[  159.232014]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  159.233094]  ? __pfx_var_wake_function+0x10/0x10
[  159.234316]  ? lock_is_held_type+0x9e/0x120
[  159.235420]  insert_inode_locked+0x25f/0x890
[  159.237050]  __ext4_new_inode+0x223d/0x4cd0
[  159.239489]  ? __pfx___ext4_new_inode+0x10/0x10
[  159.240699]  ? __pfx___dquot_initialize+0x10/0x10
[  159.241468]  ? __pfx_avc_has_perm+0x10/0x10
[  159.243283]  ext4_symlink+0x623/0xb40
[  159.245500]  ? __pfx_ext4_symlink+0x10/0x10
[  159.246505]  ? security_inode_permission+0x72/0xe0
[  159.248142]  vfs_symlink+0x44b/0x840
[  159.249404]  do_symlinkat+0x153/0x440
[  159.250488]  ? __pfx_do_symlinkat+0x10/0x10
[  159.251220]  ? strncpy_from_user+0x21b/0x2f0
[  159.253090]  __x64_sys_symlink+0x79/0xa0
[  159.253784]  do_syscall_64+0xbf/0x420
[  159.254592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.255154] RIP: 0033:0x7f39072f9427
[  159.255516] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  159.256994] RSP: 002b:00007ffed7573308 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  159.257593] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39072f9427
[  159.258204] RDX: ffffffffffffffbc RSI: 00007f390735400e RDI: 00007f39073531dd
[  159.258772] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffed7572d80
[  159.259387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  159.259991] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffed75733d0
[  159.262549]  </TASK>
[  159.262743] irq event stamp: 1385
[  159.263065] hardirqs last  enabled at (1385): [<ffffffff84cea38b>] irqentry_exit+0x17b/0x650
[  159.263805] hardirqs last disabled at (1384): [<ffffffff84ce908f>] sysvec_apic_timer_interrupt+0xf/0x80
[  159.264653] softirqs last  enabled at (1378): [<ffffffff812cdbb9>] kernel_fpu_end+0x59/0x70
[  159.265426] softirqs last disabled at (1376): [<ffffffff812cea8b>] kernel_fpu_begin_mask+0x1bb/0x300
[  159.267468] ---[ end trace 0000000000000000 ]---
09:08:25 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x5e)

09:08:25 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x5e)

09:08:25 executing program 6:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xedee, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10)

09:08:25 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040), 0x4)

09:08:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1cd)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

09:08:25 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000440), 0x0, 0x4)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
mlock(&(0x7f0000ff9000/0x1000)=nil, 0x1000)

09:08:25 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x12, 0x0, 0x0, @dev}}}}}, 0x0)

09:08:25 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}}, 0x0)

09:08:25 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040), 0x4)

09:08:25 executing program 1:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:08:25 executing program 6:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xedee, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10)

09:08:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6628)

09:08:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1cd)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

09:08:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1cd)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

09:08:25 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}}, 0x0)

09:08:25 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040), 0x4)

09:08:25 executing program 6:
r0 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000140)=0xedee, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x0, 0x0}, 0x10)

09:08:25 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x12, 0x0, 0x0, @dev}}}}}, 0x0)

09:08:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6628)

09:08:25 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1cd)
write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

09:08:25 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}}, 0x0)

09:08:25 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:26 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x12, 0x0, 0x0, @dev}}}}}, 0x0)

09:08:26 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:26 executing program 1:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:08:26 executing program 6:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:08:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:26 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x2c}}, 0x0)

09:08:26 executing program 5:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x12, 0x0, 0x0, @dev}}}}}, 0x0)

09:08:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6628)

09:08:26 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)

09:08:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:08:26 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/102400, 0xfffffffffffffdb7)

09:08:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:08:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:26 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/102400, 0xfffffffffffffdb7)

09:08:26 executing program 3:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pidfd_send_signal(r1, 0x0, 0x0, 0x0)

09:08:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:08:27 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/102400, 0xfffffffffffffdb7)

09:08:27 executing program 1:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:08:27 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1)
futimesat(r0, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
fork()

09:08:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup(r0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0)

09:08:27 executing program 2:
fchownat(0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0)

09:08:27 executing program 3:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pidfd_send_signal(r1, 0x0, 0x0, 0x0)

09:08:27 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0)

09:08:27 executing program 6:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:08:27 executing program 4:
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/102400, 0xfffffffffffffdb7)

09:08:27 executing program 3:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pidfd_send_signal(r1, 0x0, 0x0, 0x0)

09:08:27 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0)

09:08:27 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x530b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:27 executing program 2:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x14)

09:08:27 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0)

09:08:27 executing program 3:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pidfd_send_signal(r1, 0x0, 0x0, 0x0)

09:08:27 executing program 2:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x14)

09:08:27 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"})

09:08:27 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)={0x14, 0x19, 0x1, 0x0, 0x0, "", [@generic="02"]}, 0x14}], 0x1}, 0x0)

09:08:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff9648613cf5ad74457b1ff00000000645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'})

09:08:27 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, &(0x7f0000000080))
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0xba)
io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002300)="911ee35570af55051f0de2d5cbe59a626c3f15cbcd2857853b776560dfd87b5a874ffd0396be826bb50b792a689ac1ed993639ae159aae6bc81ac792acfa3858956a785bf0fe447f5cddc2dad5518f3229da97cf551b7a5a71a2ad4fb804744f82472c1809070605da8072c460a32caa69b38f1e971503d13d84db522c9e725c8def1991c0b59d53074bd56a94baec9a4777ba7c26bb82184bd42aa352b71c38d560cc778f6e4c54415760d2246c8f2ef5dcc1b051b765ed2bf672b07f89520604cfdc765c5df03f1ee7db48883b9e41a1cce7d6c1630776455da2f52b7050f6d67ad6c84cdf27c151edac1311aa1b0acaa37824608997f4dd84a64b01ae4daa45342c7ba56a9d798f86d8d891fdbb85857c6baee2fc7558c463eec8c408f386795c5ab4c3a336fc536da30ed680fd9a84bddc6bc0181fb75cb7cdf5c2e5c84686dc8786829b5dc0bd9fcfc6b6ce6403766dd09414a84dd843fb1ad99cd95f06f7ba157bffff000013f24114484691e2727ab0eac5dc9bf320f7f0e2e675f9150ebb004396effe4ae23741b8ba175cee3d39775cf14f411c37f207f16b68e4d59478977dca81e7422160f45be663d4523aaae0e0bab875c644e11ac71fbbcc0e138fce2de99b4c71a53c4e1da20857ea8fd9b231d8ae6a47e837be158de4dc927cc315f1cfd505709eb98ceb4415f89fb06765af9fba2c4cbfd82033e542a8c80e90536b0f65c44b6c74823492ef692d8d564610bebcad0d00181532b7498fc1f2c60452dc8ceb6f3b47", 0x22a, 0xc9, 0x0, 0x3, r1}])
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="911ee35570af55051f0de2d5cbe59a626c3f15cbcd2857853b776560dfd87b5a874ffd0396be826bb50b792a689ac1ed993639ae159aae6bc81ac792acfa3858956a785bf0fe447f5cddc2dad5518f3229da97cf551b7a5a71a2ad4fb804744f82472c1809070605e88072c460a32c", 0x6f, 0x66e, 0x0, 0x3}])
clone3(&(0x7f0000001e00)={0x82000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0), {0x32}, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/4096, &(0x7f0000001c40)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r1}}, 0x58)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})

09:08:27 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x530b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:27 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"})

09:08:27 executing program 2:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x14)

09:08:27 executing program 6:
r0 = fork()
ptrace(0x10, r0)
r1 = getgid()
r2 = fork()
r3 = fork()
ptrace(0x10, r3)
waitid(0x0, r3, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240)=<r4=>0x0, {0x33}, &(0x7f0000000280)=""/233, 0xe9, &(0x7f0000000400)=""/158, &(0x7f00000004c0)=[r3, r2, r3, 0x0, r3, r3, r2, r2], 0x8}, 0x58)
waitid(0x2, r4, &(0x7f0000000580), 0x2, 0x0)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x2, 0xee01, r1, 0x0, 0xee01, 0x20, 0x7}, 0x4, 0x1000, 0x5b, 0xff, r0, r4, 0x20})
r5 = getpgrp(0xffffffffffffffff)
ioprio_set$pid(0x2, r5, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x5}, 0x0, 0x0, 0x40, 0x46, 0x0, 0xffffffff80000001, 0x3ff, 0x5c00, 0x4, 0x8, 0x0, r5})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:08:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)

09:08:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)

09:08:27 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"})

09:08:27 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0xc2002)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x0, 0x0}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:27 executing program 2:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x14)

09:08:27 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, &(0x7f0000000080))
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0xba)
io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002300)="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", 0x22a, 0xc9, 0x0, 0x3, r1}])
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="911ee35570af55051f0de2d5cbe59a626c3f15cbcd2857853b776560dfd87b5a874ffd0396be826bb50b792a689ac1ed993639ae159aae6bc81ac792acfa3858956a785bf0fe447f5cddc2dad5518f3229da97cf551b7a5a71a2ad4fb804744f82472c1809070605e88072c460a32c", 0x6f, 0x66e, 0x0, 0x3}])
clone3(&(0x7f0000001e00)={0x82000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0), {0x32}, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/4096, &(0x7f0000001c40)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r1}}, 0x58)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})

09:08:27 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x530b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)

09:08:27 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0xc2002)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x0, 0x0}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:27 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, "9762eba55631247fa9cfd1afb7e63c89576918"})

09:08:27 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)

09:08:27 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='[[\x00'}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x41, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0)

09:08:27 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff9648613cf5ad74457b1ff00000000645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'})

09:08:27 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$SG_IO(r0, 0x530b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:28 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, &(0x7f0000000080))
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0xba)
io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002300)="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", 0x22a, 0xc9, 0x0, 0x3, r1}])
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="911ee35570af55051f0de2d5cbe59a626c3f15cbcd2857853b776560dfd87b5a874ffd0396be826bb50b792a689ac1ed993639ae159aae6bc81ac792acfa3858956a785bf0fe447f5cddc2dad5518f3229da97cf551b7a5a71a2ad4fb804744f82472c1809070605e88072c460a32c", 0x6f, 0x66e, 0x0, 0x3}])
clone3(&(0x7f0000001e00)={0x82000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0), {0x32}, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/4096, &(0x7f0000001c40)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r1}}, 0x58)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})

09:08:28 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0xc2002)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x0, 0x0}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:28 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
umount2(&(0x7f0000001380)='./file0\x00', 0x3)

09:08:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='[[\x00'}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x41, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0)

09:08:28 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff9648613cf5ad74457b1ff00000000645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'})

09:08:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)

09:08:28 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

09:08:28 executing program 6:
ptrace(0xffffffffffffffff, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
inotify_rm_watch(r0, r1)

[  162.352571] =======================================================
[  162.352571] WARNING: The mand mount option has been deprecated and
[  162.352571]          and is ignored by this kernel. Remove the mand
[  162.352571]          option from the mount to silence this warning.
[  162.352571] =======================================================
09:08:28 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0xc2002)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x0, 0x0}, &(0x7f0000001000)="93a0cb4eef85", 0x0, 0x0, 0x0, 0x0, 0x0})

09:08:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='[[\x00'}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x41, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0)

09:08:28 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

09:08:28 executing program 6:
ptrace(0xffffffffffffffff, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
inotify_rm_watch(r0, r1)

09:08:28 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x14, 0x0, 0x0)

09:08:28 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x28, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='[[\x00'}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x41, 0x0, 0x0, @u32}]}]}, 0x28}], 0x1}, 0x0)

09:08:28 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x0, &(0x7f0000000080))
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0xba)
io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002300)="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", 0x22a, 0xc9, 0x0, 0x3, r1}])
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="911ee35570af55051f0de2d5cbe59a626c3f15cbcd2857853b776560dfd87b5a874ffd0396be826bb50b792a689ac1ed993639ae159aae6bc81ac792acfa3858956a785bf0fe447f5cddc2dad5518f3229da97cf551b7a5a71a2ad4fb804744f82472c1809070605e88072c460a32c", 0x6f, 0x66e, 0x0, 0x3}])
clone3(&(0x7f0000001e00)={0x82000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f00000008c0), {0x32}, &(0x7f0000000c00), 0x0, &(0x7f0000000c40)=""/4096, &(0x7f0000001c40)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r1}}, 0x58)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})

09:08:28 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
umount2(&(0x7f0000001380)='./file0\x00', 0x3)

09:08:28 executing program 5:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r0, &(0x7f00000026c0)='-v', 0x2)

09:08:28 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

09:08:28 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff9648613cf5ad74457b1ff00000000645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'})

09:08:28 executing program 5:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r0, &(0x7f00000026c0)='-v', 0x2)

09:08:28 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x14, 0x0, 0x0)

09:08:28 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
read$char_usb(r0, 0x0, 0x0)

09:08:28 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
umount2(&(0x7f0000001380)='./file0\x00', 0x3)

09:08:28 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
acct(&(0x7f0000000140)='./file0\x00')

09:08:28 executing program 6:
ptrace(0xffffffffffffffff, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
inotify_rm_watch(r0, r1)

09:08:28 executing program 5:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r0, &(0x7f00000026c0)='-v', 0x2)

09:08:28 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x14, 0x0, 0x0)

[  162.752635] Process accounting resumed
09:08:29 executing program 5:
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write(r0, &(0x7f00000026c0)='-v', 0x2)

09:08:29 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000000))

09:08:29 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[])
umount2(&(0x7f0000001380)='./file0\x00', 0x3)

[  162.823909] Process accounting resumed
09:08:29 executing program 6:
ptrace(0xffffffffffffffff, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
inotify_rm_watch(r0, r1)

09:08:29 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000000))

09:08:29 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x14, 0x0, 0x0)

09:08:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
acct(&(0x7f0000000140)='./file0\x00')

09:08:29 executing program 5:
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x37, 0x2, {0x1, 0x7, 0x1, 0x0, 0x9, '+.*))\\\\\\^'}}, 0x27)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
getpgid(r1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r0, 0x0, 0xffffffffffffffff, 0x200})
openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x48000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000900)={'ipvlan0\x00'})
fork()
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000009c0)=""/79)

09:08:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"})

09:08:29 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x800000fdef)

09:08:29 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}, 0x0)

09:08:29 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000000))

09:08:29 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}, 0x0)

09:08:29 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x800000fdef)

09:08:29 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:08:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"})

09:08:29 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x4, 0x63}], 0xff2f)

09:08:29 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x4b48, &(0x7f0000000000))

[  163.098802] Process accounting resumed
09:08:29 executing program 5:
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x37, 0x2, {0x1, 0x7, 0x1, 0x0, 0x9, '+.*))\\\\\\^'}}, 0x27)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
getpgid(r1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r0, 0x0, 0xffffffffffffffff, 0x200})
openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x48000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000900)={'ipvlan0\x00'})
fork()
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000009c0)=""/79)

09:08:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
acct(&(0x7f0000000140)='./file0\x00')

[  163.215336] Process accounting resumed
09:08:29 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x800000fdef)

09:08:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"})

09:08:29 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x25, 0x7ffffffff000, 0xffffffffffffffff)

09:08:29 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:08:29 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x4, 0x63}], 0xff2f)

09:08:29 executing program 5:
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x37, 0x2, {0x1, 0x7, 0x1, 0x0, 0x9, '+.*))\\\\\\^'}}, 0x27)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
getpgid(r1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r0, 0x0, 0xffffffffffffffff, 0x200})
openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x48000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000900)={'ipvlan0\x00'})
fork()
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000009c0)=""/79)

09:08:29 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
acct(&(0x7f0000000140)='./file0\x00')

09:08:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x0, 0x2, "fd00"})

09:08:29 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}, 0x0)

09:08:29 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x25, 0x7ffffffff000, 0xffffffffffffffff)

[  163.343611] Process accounting resumed
09:08:29 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x800000fdef)

09:08:29 executing program 4:
syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}}}, 0x0)

09:08:29 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x4, 0x63}], 0xff2f)

09:08:29 executing program 5:
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4000)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x37, 0x2, {0x1, 0x7, 0x1, 0x0, 0x9, '+.*))\\\\\\^'}}, 0x27)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
getpgid(r1)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r0, 0x0, 0xffffffffffffffff, 0x200})
openat$full(0xffffffffffffff9c, &(0x7f00000006c0), 0x48000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000900)={'ipvlan0\x00'})
fork()
semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f00000009c0)=""/79)

09:08:29 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x25, 0x7ffffffff000, 0xffffffffffffffff)

09:08:29 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @remote, @multicast2}, 0xc)

09:08:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
setresuid(0x0, r1, 0x0)
ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0)

09:08:29 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:08:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
vmsplice(r0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

09:08:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
setresuid(0x0, r1, 0x0)
ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0)

09:08:29 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @remote, @multicast2}, 0xc)

09:08:29 executing program 1:
prctl$PR_SET_MM_EXE_FILE(0x25, 0x7ffffffff000, 0xffffffffffffffff)

09:08:29 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x4, 0x63}], 0xff2f)

09:08:29 executing program 6:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:08:29 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:08:29 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000014100))

09:08:29 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @remote, @multicast2}, 0xc)

09:08:29 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
setresuid(0x0, r1, 0x0)
ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0)

[  163.557455] loop3: detected capacity change from 0 to 2048
09:08:29 executing program 7:
fstatfs(0xffffffffffffffff, 0x0)

09:08:29 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
vmsplice(r0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

09:08:29 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000640)={@multicast2, @dev}, 0x8)
setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @remote, @multicast2}, 0xc)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000000c0)={@multicast2, @remote, @multicast2}, 0xc)

[  163.574826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.584712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.589737] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
09:08:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/131, 0x83, 0x0)

[  163.603172] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
09:08:29 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1000)
setresuid(0x0, r1, 0x0)
ioctl$KDFONTOP_GET(r0, 0x4b65, 0x0)

09:08:29 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:29 executing program 7:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

[  163.633846] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.643830] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.654607] loop3: detected capacity change from 0 to 2048
[  163.661223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
09:08:29 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

[  163.667789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:08:29 executing program 7:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

[  163.697546] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.708156] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
09:08:29 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:08:29 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/131, 0x83, 0x0)

09:08:29 executing program 7:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:29 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000014100))

09:08:29 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:29 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000096c0), 0x8)

09:08:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
vmsplice(r0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

[  163.759664] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.767896] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.769339] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.775066] loop3: detected capacity change from 0 to 2048
09:08:30 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000096c0), 0x8)

[  163.790494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.798743] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:08:30 executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:08:30 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:08:30 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
vmsplice(r0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

09:08:30 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_RESOLV_LIST={{}, 0x6}}}, 0x7)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @private}, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0xf7}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}]}, 0x154}}, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="987e4ad4c831a64d1d13c49d7b9847489dbc201f6847a03bf521a6371af3ddf0c95ba2aadc543f84f466d8628b3dcb2aa889481bcd9d03e6ede1c64894d64374a8b0726432448ccbeb34fd377f9aa03ba7a35ade335dc0a7cad834abbafad505352b76eb30ddb223381a669f1a3212b27ffecdce03bd3a626cdef60005d9bc634b13f2e3d7c91adcb9eaf4772b59a55c660ea79d210ee713880c859dbb95f2f959d0e27d6b6d460b056e40918c5a01b7da87e4ea4aec3c415a8c3bf21bf837460d7d8a732d387f", @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRESDEC=0x0])
fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa8}, "bdac1ba4deabd62b9f022c3bb28114874b9b411248f91e62c0171a32e7925a23f96a6d0e1bb1ea1396e5cba5bf4f6b954e86e53715f337d89deb1095ed20c07f353edba9ac782f10c8d2e9332372a342b5f396a0f020694906a08891b84868ffd79577d043505aff5a47c83182f66a2196b95daed2f73bebfd1d934a62afc54b70319d2143dbf1c913fcec8dd540c81952c9fa25f95a49ea9418362a4d3a7b44ff1a257eb4371af1"}, 0xac)

09:08:30 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000096c0), 0x8)

09:08:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/131, 0x83, 0x0)

09:08:30 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000014100))

[  163.870862] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
[  163.891130] tmpfs: Unknown parameter '�~J��1�Mĝ{�GH�� hG�;�!�7����[���T?��f�b�'
09:08:30 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

09:08:30 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x380, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000380)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x8}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:08:30 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000096c0), 0x8)

09:08:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  163.947333] loop3: detected capacity change from 0 to 2048
09:08:30 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

[  163.963802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
09:08:30 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

09:08:30 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  163.990443] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:08:30 executing program 4:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:08:30 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/cpuinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f00000000c0)=""/131, 0x83, 0x0)

09:08:30 executing program 4:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:08:30 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

09:08:30 executing program 4:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:08:30 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)

09:08:30 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x0, &(0x7f0000014100))

[  164.145782] loop3: detected capacity change from 0 to 2048
[  164.154692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.161713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:08:30 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x1}})

09:08:30 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x1018}, './file0\x00'})

09:08:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0)

09:08:30 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

09:08:30 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:08:30 executing program 4:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/psched\x00')
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

09:08:30 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x380, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000380)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x8}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  164.237413] netlink: 'syz-executor.6': attribute type 33 has an invalid length.
09:08:30 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x1}})

[  164.252298] autofs4:pid:6150:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
09:08:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0)

09:08:30 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x1}})

09:08:30 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x1018}, './file0\x00'})

[  164.305078] netlink: 'syz-executor.6': attribute type 33 has an invalid length.
09:08:30 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x380, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000380)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x8}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:08:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0)

09:08:30 executing program 0:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x380, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000380)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x8}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  164.365998] autofs4:pid:6162:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
09:08:30 executing program 2:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{}, {0x1}})

[  164.378201] netlink: 'syz-executor.6': attribute type 33 has an invalid length.
09:08:30 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x1018}, './file0\x00'})

09:08:30 executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x380, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000380)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x8}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:08:30 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3)

[  164.426484] autofs4:pid:6176:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
09:08:30 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x3}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0)

[  164.476077] netlink: 'syz-executor.6': attribute type 33 has an invalid length.
[  165.139696] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  165.140512] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  165.164847] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  165.167491] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  165.185713] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  165.187601] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  165.228774] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  165.230022] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  165.242723] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  165.243684] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  165.363218] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  165.363792] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  165.387072] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  165.387621] Bluetooth: hci5: Error when powering off device on rfkill (-4)
09:08:31 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

09:08:31 executing program 5:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x1018}, './file0\x00'})

09:08:31 executing program 4:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x380, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udplite\x00')
fsetxattr$security_selinux(r0, &(0x7f0000000300), &(0x7f0000000380)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x86, 0x1, 0x9, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x8}, 0xc040, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc000000000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000002180)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xffffffff}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
bind$inet6(r2, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)="06", 0x1}], 0x1}}], 0x3, 0x44894)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @private1, 0xfffffff9}, 0x1c)
shutdown(r2, 0x1)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:08:31 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3)

09:08:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x1de)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfdef)

09:08:31 executing program 6:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x401}, 0x14}}, 0x0)

09:08:31 executing program 3:
mkd
VM DIAGNOSIS:
09:08:25  Registers:
info registers vcpu 0
RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88800d487488
R8 =0000000000000000 R9 =ffffed10016a7046 R10=0000000000000030 R11=666666203a302320
R12=0000000000000030 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0
RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555589be0400 00000000 00000000
GS =0000 ffff8880e5343000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3907379541 CR3=000000000d18a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b3a7950
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11003674f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b3a7988
RIP=ffffffff84d17480 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555bedf400 00000000 00000000
GS =0000 ffff8880e5443000 00000000 00000000
LDT=0000 fffffe4f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f253f516545 CR3=000000000c414000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000