Warning: Permanently added '[localhost]:43079' (ECDSA) to the list of known hosts.
2026/01/14 09:23:21 fuzzer started
2026/01/14 09:23:21 dialing manager at localhost:46753
syzkaller login: [   50.574815] cgroup: Unknown subsys name 'net'
[   50.640617] cgroup: Unknown subsys name 'cpuset'
[   50.658812] cgroup: Unknown subsys name 'rlimit'
2026/01/14 09:23:32 syscalls: 2214
2026/01/14 09:23:32 code coverage: enabled
2026/01/14 09:23:32 comparison tracing: enabled
2026/01/14 09:23:32 extra coverage: enabled
2026/01/14 09:23:32 setuid sandbox: enabled
2026/01/14 09:23:32 namespace sandbox: enabled
2026/01/14 09:23:32 Android sandbox: enabled
2026/01/14 09:23:32 fault injection: enabled
2026/01/14 09:23:32 leak checking: enabled
2026/01/14 09:23:32 net packet injection: enabled
2026/01/14 09:23:32 net device setup: enabled
2026/01/14 09:23:32 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/14 09:23:32 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/14 09:23:32 USB emulation: enabled
2026/01/14 09:23:32 hci packet injection: enabled
2026/01/14 09:23:32 wifi device emulation: enabled
2026/01/14 09:23:32 802.15.4 emulation: enabled
2026/01/14 09:23:32 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/14 09:23:32 fetching corpus: 50, signal 24131/27705 (executing program)
2026/01/14 09:23:32 fetching corpus: 100, signal 39892/44845 (executing program)
2026/01/14 09:23:32 fetching corpus: 150, signal 44345/50800 (executing program)
2026/01/14 09:23:32 fetching corpus: 200, signal 51831/59580 (executing program)
2026/01/14 09:23:32 fetching corpus: 250, signal 58795/67708 (executing program)
2026/01/14 09:23:33 fetching corpus: 300, signal 62164/72337 (executing program)
2026/01/14 09:23:33 fetching corpus: 350, signal 66343/77634 (executing program)
2026/01/14 09:23:33 fetching corpus: 400, signal 72518/84750 (executing program)
2026/01/14 09:23:33 fetching corpus: 450, signal 77129/90330 (executing program)
2026/01/14 09:23:33 fetching corpus: 500, signal 80117/94347 (executing program)
2026/01/14 09:23:33 fetching corpus: 550, signal 84143/99246 (executing program)
2026/01/14 09:23:33 fetching corpus: 600, signal 88682/104556 (executing program)
2026/01/14 09:23:33 fetching corpus: 650, signal 91333/108182 (executing program)
2026/01/14 09:23:33 fetching corpus: 700, signal 93573/111357 (executing program)
2026/01/14 09:23:34 fetching corpus: 750, signal 96421/114963 (executing program)
2026/01/14 09:23:34 fetching corpus: 800, signal 98092/117535 (executing program)
2026/01/14 09:23:34 fetching corpus: 850, signal 100097/120403 (executing program)
2026/01/14 09:23:34 fetching corpus: 900, signal 101508/122717 (executing program)
2026/01/14 09:23:34 fetching corpus: 950, signal 104762/126495 (executing program)
2026/01/14 09:23:34 fetching corpus: 1000, signal 106064/128671 (executing program)
2026/01/14 09:23:34 fetching corpus: 1050, signal 109291/132405 (executing program)
2026/01/14 09:23:35 fetching corpus: 1100, signal 112597/136107 (executing program)
2026/01/14 09:23:35 fetching corpus: 1150, signal 113746/138058 (executing program)
2026/01/14 09:23:35 fetching corpus: 1200, signal 115078/140116 (executing program)
2026/01/14 09:23:35 fetching corpus: 1250, signal 116534/142247 (executing program)
2026/01/14 09:23:35 fetching corpus: 1300, signal 118467/144711 (executing program)
2026/01/14 09:23:35 fetching corpus: 1350, signal 120638/147315 (executing program)
2026/01/14 09:23:35 fetching corpus: 1400, signal 121775/149092 (executing program)
2026/01/14 09:23:35 fetching corpus: 1450, signal 123601/151387 (executing program)
2026/01/14 09:23:35 fetching corpus: 1500, signal 124791/153198 (executing program)
2026/01/14 09:23:36 fetching corpus: 1550, signal 126083/155053 (executing program)
2026/01/14 09:23:36 fetching corpus: 1600, signal 128032/157302 (executing program)
2026/01/14 09:23:36 fetching corpus: 1650, signal 129439/159227 (executing program)
2026/01/14 09:23:36 fetching corpus: 1700, signal 130248/160672 (executing program)
2026/01/14 09:23:36 fetching corpus: 1750, signal 131398/162320 (executing program)
2026/01/14 09:23:36 fetching corpus: 1800, signal 132146/163696 (executing program)
2026/01/14 09:23:36 fetching corpus: 1850, signal 133157/165263 (executing program)
2026/01/14 09:23:36 fetching corpus: 1900, signal 134115/166768 (executing program)
2026/01/14 09:23:36 fetching corpus: 1950, signal 135294/168372 (executing program)
2026/01/14 09:23:36 fetching corpus: 2000, signal 136369/169869 (executing program)
2026/01/14 09:23:37 fetching corpus: 2050, signal 136990/171082 (executing program)
2026/01/14 09:23:37 fetching corpus: 2100, signal 137978/172528 (executing program)
2026/01/14 09:23:37 fetching corpus: 2150, signal 139053/174012 (executing program)
2026/01/14 09:23:37 fetching corpus: 2200, signal 140279/175554 (executing program)
2026/01/14 09:23:37 fetching corpus: 2250, signal 141129/176799 (executing program)
2026/01/14 09:23:37 fetching corpus: 2300, signal 142217/178175 (executing program)
2026/01/14 09:23:37 fetching corpus: 2350, signal 143489/179734 (executing program)
2026/01/14 09:23:37 fetching corpus: 2400, signal 145056/181342 (executing program)
2026/01/14 09:23:37 fetching corpus: 2450, signal 145800/182475 (executing program)
2026/01/14 09:23:37 fetching corpus: 2500, signal 146815/183790 (executing program)
2026/01/14 09:23:38 fetching corpus: 2550, signal 147765/185022 (executing program)
2026/01/14 09:23:38 fetching corpus: 2600, signal 148638/186235 (executing program)
2026/01/14 09:23:38 fetching corpus: 2650, signal 149164/187235 (executing program)
2026/01/14 09:23:38 fetching corpus: 2700, signal 150133/188444 (executing program)
2026/01/14 09:23:38 fetching corpus: 2750, signal 151000/189585 (executing program)
2026/01/14 09:23:38 fetching corpus: 2800, signal 151676/190619 (executing program)
2026/01/14 09:23:38 fetching corpus: 2850, signal 152323/191614 (executing program)
2026/01/14 09:23:38 fetching corpus: 2900, signal 152895/192565 (executing program)
2026/01/14 09:23:38 fetching corpus: 2950, signal 153778/193655 (executing program)
2026/01/14 09:23:38 fetching corpus: 3000, signal 154398/194595 (executing program)
2026/01/14 09:23:39 fetching corpus: 3050, signal 155242/195659 (executing program)
2026/01/14 09:23:39 fetching corpus: 3100, signal 155975/196659 (executing program)
2026/01/14 09:23:39 fetching corpus: 3150, signal 156749/197702 (executing program)
2026/01/14 09:23:39 fetching corpus: 3200, signal 157277/198608 (executing program)
2026/01/14 09:23:39 fetching corpus: 3250, signal 158457/199765 (executing program)
2026/01/14 09:23:39 fetching corpus: 3300, signal 159064/200669 (executing program)
2026/01/14 09:23:39 fetching corpus: 3350, signal 159744/201600 (executing program)
2026/01/14 09:23:39 fetching corpus: 3400, signal 160348/202474 (executing program)
2026/01/14 09:23:39 fetching corpus: 3450, signal 161087/203371 (executing program)
2026/01/14 09:23:39 fetching corpus: 3500, signal 161830/204310 (executing program)
2026/01/14 09:23:40 fetching corpus: 3550, signal 162425/205152 (executing program)
2026/01/14 09:23:40 fetching corpus: 3600, signal 163223/205991 (executing program)
2026/01/14 09:23:40 fetching corpus: 3650, signal 163873/206802 (executing program)
2026/01/14 09:23:40 fetching corpus: 3700, signal 164485/207619 (executing program)
2026/01/14 09:23:40 fetching corpus: 3750, signal 165045/208385 (executing program)
2026/01/14 09:23:40 fetching corpus: 3800, signal 165784/209196 (executing program)
2026/01/14 09:23:40 fetching corpus: 3850, signal 166582/209988 (executing program)
2026/01/14 09:23:40 fetching corpus: 3900, signal 167275/210813 (executing program)
2026/01/14 09:23:40 fetching corpus: 3950, signal 167732/211476 (executing program)
2026/01/14 09:23:41 fetching corpus: 4000, signal 168245/212155 (executing program)
2026/01/14 09:23:41 fetching corpus: 4050, signal 168683/212808 (executing program)
2026/01/14 09:23:41 fetching corpus: 4100, signal 169239/213507 (executing program)
2026/01/14 09:23:41 fetching corpus: 4150, signal 169722/214213 (executing program)
2026/01/14 09:23:41 fetching corpus: 4200, signal 170254/214864 (executing program)
2026/01/14 09:23:41 fetching corpus: 4250, signal 170671/215485 (executing program)
2026/01/14 09:23:41 fetching corpus: 4300, signal 171122/216098 (executing program)
2026/01/14 09:23:41 fetching corpus: 4350, signal 171468/216668 (executing program)
2026/01/14 09:23:41 fetching corpus: 4400, signal 171855/217244 (executing program)
2026/01/14 09:23:41 fetching corpus: 4450, signal 172594/217918 (executing program)
2026/01/14 09:23:42 fetching corpus: 4500, signal 173168/218530 (executing program)
2026/01/14 09:23:42 fetching corpus: 4550, signal 173851/219180 (executing program)
2026/01/14 09:23:42 fetching corpus: 4600, signal 174405/219731 (executing program)
2026/01/14 09:23:42 fetching corpus: 4650, signal 174820/220293 (executing program)
2026/01/14 09:23:42 fetching corpus: 4700, signal 175550/220869 (executing program)
2026/01/14 09:23:42 fetching corpus: 4750, signal 176368/221474 (executing program)
2026/01/14 09:23:42 fetching corpus: 4800, signal 177174/222074 (executing program)
2026/01/14 09:23:42 fetching corpus: 4850, signal 177721/222655 (executing program)
2026/01/14 09:23:42 fetching corpus: 4900, signal 178256/223175 (executing program)
2026/01/14 09:23:42 fetching corpus: 4950, signal 178706/223656 (executing program)
2026/01/14 09:23:43 fetching corpus: 5000, signal 179183/224148 (executing program)
2026/01/14 09:23:43 fetching corpus: 5050, signal 179803/224677 (executing program)
2026/01/14 09:23:43 fetching corpus: 5100, signal 180370/225200 (executing program)
2026/01/14 09:23:43 fetching corpus: 5150, signal 180842/225663 (executing program)
2026/01/14 09:23:43 fetching corpus: 5200, signal 181294/226133 (executing program)
2026/01/14 09:23:43 fetching corpus: 5250, signal 181686/226581 (executing program)
2026/01/14 09:23:43 fetching corpus: 5300, signal 182593/227089 (executing program)
2026/01/14 09:23:43 fetching corpus: 5350, signal 183182/227546 (executing program)
2026/01/14 09:23:43 fetching corpus: 5400, signal 183559/227984 (executing program)
2026/01/14 09:23:43 fetching corpus: 5450, signal 183864/228441 (executing program)
2026/01/14 09:23:44 fetching corpus: 5500, signal 184233/228836 (executing program)
2026/01/14 09:23:44 fetching corpus: 5550, signal 184862/229267 (executing program)
2026/01/14 09:23:44 fetching corpus: 5600, signal 185280/229661 (executing program)
2026/01/14 09:23:44 fetching corpus: 5650, signal 185707/230050 (executing program)
2026/01/14 09:23:44 fetching corpus: 5700, signal 186122/230429 (executing program)
2026/01/14 09:23:44 fetching corpus: 5750, signal 186607/230444 (executing program)
2026/01/14 09:23:44 fetching corpus: 5800, signal 187178/230444 (executing program)
2026/01/14 09:23:44 fetching corpus: 5850, signal 187533/230462 (executing program)
2026/01/14 09:23:45 fetching corpus: 5900, signal 187955/230463 (executing program)
2026/01/14 09:23:45 fetching corpus: 5950, signal 188237/230463 (executing program)
2026/01/14 09:23:45 fetching corpus: 6000, signal 188736/230463 (executing program)
2026/01/14 09:23:45 fetching corpus: 6050, signal 188990/230464 (executing program)
2026/01/14 09:23:45 fetching corpus: 6100, signal 189366/230464 (executing program)
2026/01/14 09:23:45 fetching corpus: 6150, signal 189648/230468 (executing program)
2026/01/14 09:23:45 fetching corpus: 6200, signal 190061/230468 (executing program)
2026/01/14 09:23:45 fetching corpus: 6250, signal 190430/230468 (executing program)
2026/01/14 09:23:45 fetching corpus: 6300, signal 190808/230474 (executing program)
2026/01/14 09:23:45 fetching corpus: 6350, signal 191159/230475 (executing program)
2026/01/14 09:23:46 fetching corpus: 6400, signal 191662/230475 (executing program)
2026/01/14 09:23:46 fetching corpus: 6450, signal 192017/230476 (executing program)
2026/01/14 09:23:46 fetching corpus: 6500, signal 192321/230479 (executing program)
2026/01/14 09:23:46 fetching corpus: 6550, signal 192728/230479 (executing program)
2026/01/14 09:23:46 fetching corpus: 6600, signal 193066/230479 (executing program)
2026/01/14 09:23:46 fetching corpus: 6650, signal 193525/230479 (executing program)
2026/01/14 09:23:46 fetching corpus: 6700, signal 193928/230480 (executing program)
2026/01/14 09:23:46 fetching corpus: 6750, signal 194237/230480 (executing program)
2026/01/14 09:23:46 fetching corpus: 6800, signal 194553/230480 (executing program)
2026/01/14 09:23:47 fetching corpus: 6850, signal 194873/230481 (executing program)
2026/01/14 09:23:47 fetching corpus: 6900, signal 195139/230481 (executing program)
2026/01/14 09:23:47 fetching corpus: 6950, signal 195510/230481 (executing program)
2026/01/14 09:23:47 fetching corpus: 7000, signal 195858/230481 (executing program)
2026/01/14 09:23:47 fetching corpus: 7050, signal 196304/230481 (executing program)
2026/01/14 09:23:47 fetching corpus: 7100, signal 196551/230483 (executing program)
2026/01/14 09:23:47 fetching corpus: 7150, signal 196894/230483 (executing program)
2026/01/14 09:23:47 fetching corpus: 7200, signal 197304/230483 (executing program)
2026/01/14 09:23:47 fetching corpus: 7250, signal 197642/230483 (executing program)
2026/01/14 09:23:48 fetching corpus: 7300, signal 198029/230483 (executing program)
2026/01/14 09:23:48 fetching corpus: 7350, signal 198267/230483 (executing program)
2026/01/14 09:23:48 fetching corpus: 7400, signal 198610/230483 (executing program)
2026/01/14 09:23:48 fetching corpus: 7450, signal 199025/230483 (executing program)
2026/01/14 09:23:48 fetching corpus: 7500, signal 199456/230487 (executing program)
2026/01/14 09:23:48 fetching corpus: 7550, signal 199962/230489 (executing program)
2026/01/14 09:23:48 fetching corpus: 7600, signal 200426/230489 (executing program)
2026/01/14 09:23:48 fetching corpus: 7650, signal 200738/230489 (executing program)
2026/01/14 09:23:49 fetching corpus: 7700, signal 201101/230489 (executing program)
2026/01/14 09:23:49 fetching corpus: 7750, signal 201372/230492 (executing program)
2026/01/14 09:23:49 fetching corpus: 7800, signal 201887/230492 (executing program)
2026/01/14 09:23:49 fetching corpus: 7850, signal 202163/230496 (executing program)
2026/01/14 09:23:49 fetching corpus: 7900, signal 202409/230499 (executing program)
2026/01/14 09:23:49 fetching corpus: 7950, signal 202695/230499 (executing program)
2026/01/14 09:23:49 fetching corpus: 8000, signal 202978/230499 (executing program)
2026/01/14 09:23:49 fetching corpus: 8050, signal 203284/230499 (executing program)
2026/01/14 09:23:50 fetching corpus: 8100, signal 203646/230499 (executing program)
2026/01/14 09:23:50 fetching corpus: 8150, signal 203917/230507 (executing program)
2026/01/14 09:23:50 fetching corpus: 8200, signal 204314/230507 (executing program)
2026/01/14 09:23:50 fetching corpus: 8250, signal 204592/230507 (executing program)
2026/01/14 09:23:50 fetching corpus: 8300, signal 204889/230523 (executing program)
2026/01/14 09:23:50 fetching corpus: 8350, signal 205131/230523 (executing program)
2026/01/14 09:23:50 fetching corpus: 8400, signal 205434/230524 (executing program)
2026/01/14 09:23:50 fetching corpus: 8450, signal 205705/230524 (executing program)
2026/01/14 09:23:50 fetching corpus: 8500, signal 206056/230545 (executing program)
2026/01/14 09:23:50 fetching corpus: 8550, signal 206392/230545 (executing program)
2026/01/14 09:23:50 fetching corpus: 8600, signal 206727/230550 (executing program)
2026/01/14 09:23:51 fetching corpus: 8649, signal 206986/230554 (executing program)
2026/01/14 09:23:51 fetching corpus: 8699, signal 207299/230554 (executing program)
2026/01/14 09:23:51 fetching corpus: 8749, signal 207581/230565 (executing program)
2026/01/14 09:23:51 fetching corpus: 8799, signal 207807/230565 (executing program)
2026/01/14 09:23:51 fetching corpus: 8849, signal 208015/230567 (executing program)
2026/01/14 09:23:51 fetching corpus: 8899, signal 208230/230569 (executing program)
2026/01/14 09:23:51 fetching corpus: 8949, signal 208578/230572 (executing program)
2026/01/14 09:23:51 fetching corpus: 8998, signal 208799/230572 (executing program)
2026/01/14 09:23:51 fetching corpus: 9048, signal 209079/230579 (executing program)
2026/01/14 09:23:51 fetching corpus: 9097, signal 209415/230579 (executing program)
2026/01/14 09:23:52 fetching corpus: 9147, signal 209668/230579 (executing program)
2026/01/14 09:23:52 fetching corpus: 9197, signal 209862/230579 (executing program)
2026/01/14 09:23:52 fetching corpus: 9247, signal 210075/230579 (executing program)
2026/01/14 09:23:52 fetching corpus: 9296, signal 210327/230587 (executing program)
2026/01/14 09:23:52 fetching corpus: 9345, signal 210626/230587 (executing program)
2026/01/14 09:23:52 fetching corpus: 9395, signal 210849/230587 (executing program)
2026/01/14 09:23:52 fetching corpus: 9445, signal 211204/230587 (executing program)
2026/01/14 09:23:52 fetching corpus: 9495, signal 211431/230588 (executing program)
2026/01/14 09:23:52 fetching corpus: 9545, signal 211656/230591 (executing program)
2026/01/14 09:23:52 fetching corpus: 9595, signal 211879/230593 (executing program)
2026/01/14 09:23:52 fetching corpus: 9645, signal 212087/230593 (executing program)
2026/01/14 09:23:53 fetching corpus: 9695, signal 212358/230593 (executing program)
2026/01/14 09:23:53 fetching corpus: 9745, signal 212673/230593 (executing program)
2026/01/14 09:23:53 fetching corpus: 9795, signal 212939/230593 (executing program)
2026/01/14 09:23:53 fetching corpus: 9843, signal 213269/230618 (executing program)
2026/01/14 09:23:53 fetching corpus: 9892, signal 213551/230618 (executing program)
2026/01/14 09:23:53 fetching corpus: 9941, signal 213850/230618 (executing program)
2026/01/14 09:23:53 fetching corpus: 9990, signal 214064/230618 (executing program)
2026/01/14 09:23:53 fetching corpus: 10040, signal 214330/230618 (executing program)
2026/01/14 09:23:53 fetching corpus: 10090, signal 214581/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10140, signal 214848/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10190, signal 215057/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10240, signal 215284/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10290, signal 215983/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10340, signal 216222/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10390, signal 216484/230631 (executing program)
2026/01/14 09:23:54 fetching corpus: 10438, signal 216682/230633 (executing program)
2026/01/14 09:23:54 fetching corpus: 10487, signal 217120/230643 (executing program)
2026/01/14 09:23:54 fetching corpus: 10537, signal 217350/230648 (executing program)
2026/01/14 09:23:55 fetching corpus: 10587, signal 217617/230654 (executing program)
2026/01/14 09:23:55 fetching corpus: 10637, signal 217813/230654 (executing program)
2026/01/14 09:23:55 fetching corpus: 10687, signal 218036/230654 (executing program)
2026/01/14 09:23:55 fetching corpus: 10737, signal 218266/230655 (executing program)
2026/01/14 09:23:55 fetching corpus: 10787, signal 218471/230668 (executing program)
2026/01/14 09:23:55 fetching corpus: 10836, signal 218698/230668 (executing program)
2026/01/14 09:23:55 fetching corpus: 10886, signal 218902/230672 (executing program)
2026/01/14 09:23:55 fetching corpus: 10936, signal 219071/230676 (executing program)
2026/01/14 09:23:55 fetching corpus: 10986, signal 219286/230679 (executing program)
2026/01/14 09:23:55 fetching corpus: 11036, signal 219503/230683 (executing program)
2026/01/14 09:23:56 fetching corpus: 11084, signal 219750/230690 (executing program)
2026/01/14 09:23:56 fetching corpus: 11133, signal 219986/230692 (executing program)
2026/01/14 09:23:56 fetching corpus: 11182, signal 220225/230696 (executing program)
2026/01/14 09:23:56 fetching corpus: 11232, signal 220464/230713 (executing program)
2026/01/14 09:23:56 fetching corpus: 11281, signal 220651/230713 (executing program)
2026/01/14 09:23:56 fetching corpus: 11331, signal 220942/230715 (executing program)
2026/01/14 09:23:56 fetching corpus: 11381, signal 221141/230719 (executing program)
2026/01/14 09:23:56 fetching corpus: 11430, signal 221370/230719 (executing program)
2026/01/14 09:23:56 fetching corpus: 11480, signal 221638/230719 (executing program)
2026/01/14 09:23:57 fetching corpus: 11529, signal 221874/230719 (executing program)
2026/01/14 09:23:57 fetching corpus: 11578, signal 222071/230719 (executing program)
2026/01/14 09:23:57 fetching corpus: 11628, signal 222301/230723 (executing program)
2026/01/14 09:23:57 fetching corpus: 11678, signal 222450/230753 (executing program)
2026/01/14 09:23:57 fetching corpus: 11728, signal 222627/230753 (executing program)
2026/01/14 09:23:57 fetching corpus: 11778, signal 222796/230753 (executing program)
2026/01/14 09:23:57 fetching corpus: 11828, signal 223006/230753 (executing program)
2026/01/14 09:23:57 fetching corpus: 11876, signal 223215/230759 (executing program)
2026/01/14 09:23:57 fetching corpus: 11926, signal 223405/230759 (executing program)
2026/01/14 09:23:57 fetching corpus: 11976, signal 223686/230759 (executing program)
2026/01/14 09:23:58 fetching corpus: 12025, signal 223825/230760 (executing program)
2026/01/14 09:23:58 fetching corpus: 12075, signal 224039/230760 (executing program)
2026/01/14 09:23:58 fetching corpus: 12125, signal 224196/230760 (executing program)
2026/01/14 09:23:58 fetching corpus: 12175, signal 224361/230760 (executing program)
2026/01/14 09:23:58 fetching corpus: 12224, signal 224632/230772 (executing program)
2026/01/14 09:23:58 fetching corpus: 12274, signal 224990/230772 (executing program)
2026/01/14 09:23:58 fetching corpus: 12324, signal 225166/230772 (executing program)
2026/01/14 09:23:58 fetching corpus: 12374, signal 225420/230772 (executing program)
2026/01/14 09:23:59 fetching corpus: 12424, signal 225611/230772 (executing program)
2026/01/14 09:23:59 fetching corpus: 12474, signal 225923/230772 (executing program)
2026/01/14 09:23:59 fetching corpus: 12524, signal 226160/230778 (executing program)
2026/01/14 09:23:59 fetching corpus: 12574, signal 226316/230778 (executing program)
2026/01/14 09:23:59 fetching corpus: 12624, signal 226533/230779 (executing program)
2026/01/14 09:23:59 fetching corpus: 12673, signal 226690/230784 (executing program)
2026/01/14 09:23:59 fetching corpus: 12723, signal 226907/230788 (executing program)
2026/01/14 09:23:59 fetching corpus: 12772, signal 227059/230788 (executing program)
2026/01/14 09:23:59 fetching corpus: 12822, signal 227242/230788 (executing program)
2026/01/14 09:23:59 fetching corpus: 12872, signal 227415/230791 (executing program)
2026/01/14 09:24:00 fetching corpus: 12922, signal 227602/230793 (executing program)
2026/01/14 09:24:00 fetching corpus: 12972, signal 227749/230793 (executing program)
2026/01/14 09:24:00 fetching corpus: 13022, signal 227915/230793 (executing program)
2026/01/14 09:24:00 fetching corpus: 13071, signal 228123/230794 (executing program)
2026/01/14 09:24:00 fetching corpus: 13121, signal 228279/230795 (executing program)
2026/01/14 09:24:00 fetching corpus: 13169, signal 228555/230795 (executing program)
2026/01/14 09:24:00 fetching corpus: 13219, signal 228686/230795 (executing program)
2026/01/14 09:24:00 fetching corpus: 13269, signal 228835/230795 (executing program)
2026/01/14 09:24:00 fetching corpus: 13319, signal 229082/230795 (executing program)
2026/01/14 09:24:00 fetching corpus: 13357, signal 229251/230796 (executing program)
2026/01/14 09:24:00 fetching corpus: 13357, signal 229251/230796 (executing program)
2026/01/14 09:24:02 starting 8 fuzzer processes
09:24:02 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00')
pread64(r0, &(0x7f0000000280)=""/63, 0x3f, 0xb72a)

09:24:02 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x538d, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
close_range(r1, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)={0x20, 0x1c, 0x1, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="12"]}]}, 0x20}], 0x1}, 0x0)

09:24:02 executing program 3:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:02 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x33fe0}}, 0x0)

09:24:02 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r0, 0x3fd}, 0x14}}, 0x0)

09:24:02 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x21, 0x0, 0x0)

[   91.220901] audit: type=1400 audit(1768382642.469:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:24:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ppoll(&(0x7f0000000180)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0)

09:24:02 executing program 6:
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001280)={0x0}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
syz_genetlink_get_family_id$nbd(&(0x7f0000001700), 0xffffffffffffffff)

[   92.327535] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.328759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.329953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.334718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.337036] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.382028] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.390102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.394029] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.397895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.399683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.401922] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.404227] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.408762] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.411090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.412108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.444929] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.449639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.450601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.464608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.466104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.530940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.538826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.544105] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.548527] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.551287] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.579558] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.581289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.581527] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.583629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.585049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.586077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.594162] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.597523] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.599472] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.604951] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.626667] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.634628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.635262] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.638691] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.661464] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.360565] Bluetooth: hci0: command tx timeout
[   94.424513] Bluetooth: hci2: command tx timeout
[   94.487497] Bluetooth: hci3: command tx timeout
[   94.487542] Bluetooth: hci1: command tx timeout
[   94.615552] Bluetooth: hci4: command tx timeout
[   94.679661] Bluetooth: hci6: command tx timeout
[   94.679741] Bluetooth: hci5: command tx timeout
[   94.743665] Bluetooth: hci7: command tx timeout
[   96.409509] Bluetooth: hci0: command tx timeout
[   96.471535] Bluetooth: hci2: command tx timeout
[   96.536202] Bluetooth: hci1: command tx timeout
[   96.536744] Bluetooth: hci3: command tx timeout
[   96.664541] Bluetooth: hci4: command tx timeout
[   96.728433] Bluetooth: hci6: command tx timeout
[   96.728456] Bluetooth: hci5: command tx timeout
[   96.793418] Bluetooth: hci7: command tx timeout
[   98.457454] Bluetooth: hci0: command tx timeout
[   98.520501] Bluetooth: hci2: command tx timeout
[   98.583676] Bluetooth: hci1: command tx timeout
[   98.584497] Bluetooth: hci3: command tx timeout
[   98.711615] Bluetooth: hci4: command tx timeout
[   98.775427] Bluetooth: hci5: command tx timeout
[   98.776420] Bluetooth: hci6: command tx timeout
[   98.839424] Bluetooth: hci7: command tx timeout
[  100.503462] Bluetooth: hci0: command tx timeout
[  100.567469] Bluetooth: hci2: command tx timeout
[  100.631469] Bluetooth: hci3: command tx timeout
[  100.631533] Bluetooth: hci1: command tx timeout
[  100.759456] Bluetooth: hci4: command tx timeout
[  100.823503] Bluetooth: hci6: command tx timeout
[  100.823574] Bluetooth: hci5: command tx timeout
[  100.888426] Bluetooth: hci7: command tx timeout
[  128.414933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.415599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.720766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.721415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.536537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
09:24:41 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@updsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb-camellia-asm\x00'}}}, @algo_auth={0x48, 0x1, {{'sha224-ni\x00'}}}]}, 0x180}}, 0x0)

09:24:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x2000}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x7a, 0x5, 0x9, 0x0, 0x3, 0x80020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x25c8, 0x239}, 0x8400, 0x8, 0x400, 0x2, 0xfc00000000000000, 0xbe, 0x2, 0x0, 0x3ff, 0x0, 0x40}, 0xffffffffffffffff, 0x4, r0, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_destroy(0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x42)
r2 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='\x00', 0x0, 0x0, 0x0, 0x24902b, &(0x7f0000000e40)=ANY=[])
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001480)={0x0, 0x0, 0xffffffa5})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000980)={0x0, r4, 0x0, 0xf85b, 0x9, 0x1})
preadv2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, 0x8000, 0x0, 0x0)
close_range(r1, r2, 0x0)

[  130.156239] audit: type=1400 audit(1768382681.406:8): avc:  denied  { open } for  pid=3690 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.159270] audit: type=1400 audit(1768382681.406:9): avc:  denied  { kernel } for  pid=3690 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  130.205416] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:24:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x2000}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x7a, 0x5, 0x9, 0x0, 0x3, 0x80020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x25c8, 0x239}, 0x8400, 0x8, 0x400, 0x2, 0xfc00000000000000, 0xbe, 0x2, 0x0, 0x3ff, 0x0, 0x40}, 0xffffffffffffffff, 0x4, r0, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_destroy(0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x42)
r2 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='\x00', 0x0, 0x0, 0x0, 0x24902b, &(0x7f0000000e40)=ANY=[])
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001480)={0x0, 0x0, 0xffffffa5})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000980)={0x0, r4, 0x0, 0xf85b, 0x9, 0x1})
preadv2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, 0x8000, 0x0, 0x0)
close_range(r1, r2, 0x0)

[  130.505194] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:24:41 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x2000}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x7a, 0x5, 0x9, 0x0, 0x3, 0x80020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x25c8, 0x239}, 0x8400, 0x8, 0x400, 0x2, 0xfc00000000000000, 0xbe, 0x2, 0x0, 0x3ff, 0x0, 0x40}, 0xffffffffffffffff, 0x4, r0, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_destroy(0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x42)
r2 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='\x00', 0x0, 0x0, 0x0, 0x24902b, &(0x7f0000000e40)=ANY=[])
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001480)={0x0, 0x0, 0xffffffa5})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000980)={0x0, r4, 0x0, 0xf85b, 0x9, 0x1})
preadv2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, 0x8000, 0x0, 0x0)
close_range(r1, r2, 0x0)

[  130.817500] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:24:42 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x0, 0x2000}, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x7a, 0x5, 0x9, 0x0, 0x3, 0x80020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_config_ext={0x25c8, 0x239}, 0x8400, 0x8, 0x400, 0x2, 0xfc00000000000000, 0xbe, 0x2, 0x0, 0x3ff, 0x0, 0x40}, 0xffffffffffffffff, 0x4, r0, 0x8)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x2)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_destroy(0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x42)
r2 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='\x00', 0x0, 0x0, 0x0, 0x24902b, &(0x7f0000000e40)=ANY=[])
creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001480)={0x0, 0x0, 0xffffffa5})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000980)={0x0, r4, 0x0, 0xf85b, 0x9, 0x1})
preadv2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/174, 0xae}], 0x1, 0x8000, 0x0, 0x0)
close_range(r1, r2, 0x0)

[  131.150084] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO
09:24:42 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)

09:24:42 executing program 1:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
shutdown(r0, 0x0)

09:24:43 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r1, 0xf1b5a43ca6b9a97}, 0x14}}, 0x0)

[  131.822546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.823166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.952534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.953154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.661965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.662717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.751110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.752901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.980895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.981926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.048667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.049284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.143702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.145134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.205822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.206768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.333527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.334148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.339012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.339855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.376676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.377277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.506414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.507079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.531695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.533180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.583723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.584666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:24:44 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_cancel(0x0, 0x0, 0x0)

09:24:44 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x3, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x400c330d, 0x0)

09:24:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000500)=""/37, 0x25, 0x0)

09:24:44 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7b, 0x0, 0x804}}}, 0x7)

09:24:44 executing program 3:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:44 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

09:24:44 executing program 6:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:44 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0)

[  133.759531] random: crng reseeded on system resumption
[  133.766207] random: crng reseeded on system resumption
09:24:45 executing program 3:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:45 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:24:45 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syslog(0x0, 0x0, 0x0)

09:24:45 executing program 6:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_cancel(0x0, 0x0, 0x0)

09:24:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000500)=""/37, 0x25, 0x0)

09:24:45 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

09:24:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001200ffff000000000004000080"], 0x14}], 0x1}, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000040))
recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

09:24:45 executing program 4:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x1})

09:24:45 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0xa, 0x0)

09:24:45 executing program 3:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:45 executing program 6:
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{\x00', 0xffffffffffffffff)
add_key(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={'syz', 0x1}, &(0x7f0000000780)="d8", 0x1, 0xffffffffffffffff)

09:24:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra}}}}}, 0x0)

09:24:45 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
r0 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
syz_emit_vhci(0x0, 0x1b2)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:24:45 executing program 2:
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000001)

09:24:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000500)=""/37, 0x25, 0x0)

09:24:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_cancel(0x0, 0x0, 0x0)

09:24:45 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f00000000c0)={'syz_tun\x00', 0x0})

09:24:45 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

09:24:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

09:24:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_cancel(0x0, 0x0, 0x0)

09:24:45 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = getpgrp(0x0)
rt_tgsigqueueinfo(r1, r0, 0x11, &(0x7f00000001c0))

09:24:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra}}}}}, 0x0)

09:24:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/ldiscs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000500)=""/37, 0x25, 0x0)

09:24:45 executing program 0:
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff81001f8b}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:24:45 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()

09:24:45 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

09:24:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

09:24:45 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

09:24:45 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

09:24:45 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
openat2(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000040)={0x0, 0x0, 0x12}, 0x18)

09:24:45 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

09:24:45 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'chacha20-arm\x00'}, 0xffffffffffffff9e}}]}, 0x138}}, 0x0)

09:24:45 executing program 0:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0xde, 0x8, 0x1, 0x2, @msf={0x8, 0x4, 0x3f}, 0x81})
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000), 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="7251da", @ANYRES16=r0], 0x8)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x80b}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="28c8900c000800050016320400380f0100"], 0x11)

09:24:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

09:24:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra}}}}}, 0x0)

09:24:45 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$sock(r2, &(0x7f0000003080)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000001680)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0)

09:24:45 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
sendmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="a2", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

09:24:45 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr\x00')
openat(r0, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x0, 0x0)

09:24:45 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
openat2(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000040)={0x0, 0x0, 0x12}, 0x18)

09:24:45 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  134.484723] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
09:24:45 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x22}}}}], [{@context={'context', 0x3d, 'system_u'}}]})

09:24:45 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x10, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_ra}}}}}, 0x0)

09:24:45 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
listen(r0, 0x0)

09:24:45 executing program 0:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0xde, 0x8, 0x1, 0x2, @msf={0x8, 0x4, 0x3f}, 0x81})
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000), 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="7251da", @ANYRES16=r0], 0x8)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x80b}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="28c8900c000800050016320400380f0100"], 0x11)

09:24:45 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
openat2(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000040)={0x0, 0x0, 0x12}, 0x18)

[  134.574313] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
09:24:45 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$cgroup(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, 0x0)

[  134.616140] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
09:24:45 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x10, 0xfffe00, 0x2000400)

09:24:45 executing program 0:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0xde, 0x8, 0x1, 0x2, @msf={0x8, 0x4, 0x3f}, 0x81})
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000), 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="7251da", @ANYRES16=r0], 0x8)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x80b}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="28c8900c000800050016320400380f0100"], 0x11)

09:24:45 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
openat2(r0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000040)={0x0, 0x0, 0x12}, 0x18)

09:24:45 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x22}}}}], [{@context={'context', 0x3d, 'system_u'}}]})

09:24:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x17, &(0x7f0000001480)=[{0x0, 0x200000000000000}], 0x1)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)

09:24:45 executing program 2:
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000020000100000000000000000002"], 0x28}], 0x1}, 0x0)

09:24:45 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="180000006a000101"], 0x18}], 0x1}, 0x0)

09:24:45 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0)

[  134.745028] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
09:24:46 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @rand_addr, r2}, 0xc)

[  134.782319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.783103] I/O error, dev sr0, sector 32767 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[  134.784053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.784545] I/O error, dev sr0, sector 33023 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[  134.789463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.789957] I/O error, dev sr0, sector 33279 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
09:24:46 executing program 3:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

[  134.791812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.792286] I/O error, dev sr0, sector 33535 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[  134.793189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.793923] I/O error, dev sr0, sector 33791 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
09:24:46 executing program 0:
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000100)=0xffffffffffffffff)
ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0xde, 0x8, 0x1, 0x2, @msf={0x8, 0x4, 0x3f}, 0x81})
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000000), 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="7251da", @ANYRES16=r0], 0x8)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x0, 0x80b}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="28c8900c000800050016320400380f0100"], 0x11)

[  134.803927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.815975] I/O error, dev sr0, sector 34047 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[  134.816915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.823212] I/O error, dev sr0, sector 34303 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[  134.824205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.829434] I/O error, dev sr0, sector 34559 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 2
[  134.830336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.834630] I/O error, dev sr0, sector 34815 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
09:24:46 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x22}}}}], [{@context={'context', 0x3d, 'system_u'}}]})

[  134.841544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.842012] I/O error, dev sr0, sector 35071 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[  134.850544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.851156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.860457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.861068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.864334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.873137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.873801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.877295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.877936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.878930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.879990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.881487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.882073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.884196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.885786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.886907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.888458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.889089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.891538] audit: type=1400 audit(1768382686.139:10): avc:  denied  { read } for  pid=4056 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  134.894597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.895192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.907321] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  134.910210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.911206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.912126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.913020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.913893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.914780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.915661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.916287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.917226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.918605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.919257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.920242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.921351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.922259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.925495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.926109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.928109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.929035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.929895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.930735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.931321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.932220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.933042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.933878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.935044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.936910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.938298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.939160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.940058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.941033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.941863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.942711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  134.943300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.004217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.004885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.006658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.007247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.009579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.010169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.011496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.012065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.012754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.013356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.016617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.017207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.019565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.020160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.024603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.025171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.031678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.032294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.038611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.039206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.042612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.043206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.045013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.048616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.049272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.050878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.052714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.053303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.054714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.055441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.056030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.056638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.057296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.057954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.063116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.065346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.065963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.066703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.067297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.068153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.068866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.070615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.071213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.071838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.072517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.073107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.073826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.076453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.077125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.077798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.078612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.079222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.079884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.083583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.084177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.084830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.085696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.086321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.088260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.088909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.089620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.090214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.091021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.092868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.093610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.094236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.095723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.096334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.098003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.098626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.099232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.101552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.102219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.102898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.104149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.106584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.107176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.107824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.108595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.109184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.111655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.112281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.114602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.115200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.115863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.117151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.119587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.120156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.120887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.121734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.122322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.124611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.125205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.125829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.127816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.128432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.129106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.129778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.131345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.133585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.134177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.134795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.136663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.137239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.137966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.141559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.142155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.142817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.143721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.144326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.147639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.148215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.148951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.149754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.150359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.151020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.154605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.155201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.155849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.156631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.157306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.157985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.164676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.165268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.165921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.166785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.167462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.168038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.169895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.170530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.171136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.171785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.172574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.173178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.174730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.175306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.175999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.178615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.179210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.179862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.181007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.181654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.182242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.185620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.186291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.186958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.187856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.188527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.189114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.192585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.193184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.193812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.194640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.195265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.195916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.199579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.200168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.200815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.201713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.202280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.204637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.205250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.207695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.208304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.210571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.211154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.213595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.214167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.214880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.216460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.217052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.219601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.220199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.220841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.221734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.222301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.224656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.225270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.227568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.228155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.230564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.231157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.231783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.232355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.235596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.236217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.238572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.239161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.239788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.241362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.241977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.245011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.247578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.248845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @rand_addr, r2}, 0xc)

09:24:46 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
fsopen(0x0, 0x0)

09:24:46 executing program 3:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

09:24:46 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x685}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb3}}}}}]}}]}}, 0x0)

09:24:46 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x0)

09:24:46 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000240)=0x5)

09:24:46 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'default', '=static', @val={0x22}}}}], [{@context={'context', 0x3d, 'system_u'}}]})

09:24:46 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x10, 0xfffe00, 0x2000400)

[  135.360314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
09:24:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2800000064000502", @ANYRES64, @ANYRES64], 0x28}], 0x1}, 0x0)

[  135.372116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:24:46 executing program 3:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

[  135.403669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.404337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.405040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.405980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.406644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.407254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.407412] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  135.407870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.419443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.420087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.422728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.423340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 3:
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)

09:24:46 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x0)

[  135.441766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  135.443602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.444249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.459605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.460207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.470521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.471167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.478889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x0)

[  135.482800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.496486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.497138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.505354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.510173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x6d, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

09:24:46 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
open_by_handle_at(r0, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x0)

09:24:46 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x7ffffffff000)

[  135.542531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.543182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.550703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.551330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.560175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @rand_addr, r2}, 0xc)

[  135.576585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.576746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.576885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.577114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.577293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.583707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.583874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x8, 0x0, 0xfd, @time, {}, {}, @raw8={"ccd2c24fb6cfac79409a18c3"}}], 0x1c)

[  135.584041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.584214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.597404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.597568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.597818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.598001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.598163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.598323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.601003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  135.604117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.604297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.604482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.604622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.604848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.605025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.605212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.617013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.617199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.627581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.635604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.636203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.641781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.646978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.649813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:46 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r2 = dup2(r1, r0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000022c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  135.663480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.664105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.701930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.702613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.703214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.734788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.736355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.737010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.739232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.743674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.744826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.780594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.781185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.781884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.784745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.785342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.785972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.800580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.801178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.805946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.809497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.810158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.815613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.816217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.819186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.822619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.823214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.825528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.826102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.829636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.830244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.833583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.834178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.837576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.838170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.839464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.840038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.842538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.843160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.844664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.845259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.847576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.848165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.849288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.852570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.853230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.856603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.857202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.858271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.862595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.863185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.864707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.865280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.869721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.870333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.874654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.875247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.878773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.879360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.881096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.882826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.882849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.883498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.884200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.885563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.886155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.886767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.887352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.891702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.892310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.894581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.895247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.896711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.897304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.901574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.902168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.902798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.906668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.907251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.909070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.909701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.910287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.910919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.913363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.914504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.915089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.918604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.919265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.920114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.923114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.924350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.926359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.928094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.930632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.931207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.934661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.935271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.938593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.939189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.940695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.941279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.941890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.945201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.946904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.947539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.948134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.948757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.949344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.951581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.952176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.952782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.954520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.955125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.955736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.956330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.958598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.959189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.959810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.961437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.962107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.962868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.965522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.966121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.968027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.968646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.969237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.971544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.972219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.972848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.973461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.974051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.977558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.978151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.979429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.979996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.982966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.983598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.984184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.986719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.987322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.989045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.990214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.992018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.992717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.993321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.995602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.996188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.996833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.997445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.998028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  135.999543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.000211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.000842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.002489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.003085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.003699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.004291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.006635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.007210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.008992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.011576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.012172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.012792] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.014457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.015047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.015658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.016234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.018065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.018707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.019287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.020083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.022573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.023165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.023904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.025472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.026135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.026955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.028333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.028960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.030623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.031220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.032337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.034573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.035233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.035924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.036555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.037139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.037768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.038353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.039677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.040265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.042535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.043158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.043785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.045417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.046023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.046972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.048615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.049181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.051557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.052147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:47 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x6d, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

09:24:47 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x10, 0xfffe00, 0x2000400)

09:24:47 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x685}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb3}}}}}]}}]}}, 0x0)

09:24:47 executing program 7:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)={0x14, 0x16, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0)

09:24:47 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r2=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @rand_addr, r2}, 0xc)

09:24:47 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x8, 0x0, 0xfd, @time, {}, {}, @raw8={"ccd2c24fb6cfac79409a18c3"}}], 0x1c)

09:24:47 executing program 6:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0'}, 0xb)
r2 = dup(r1)
copy_file_range(r2, 0x0, r0, &(0x7f00000000c0), 0x401, 0x0)

09:24:47 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCOUTQ(r0, 0x5411, 0x0)

[  136.126025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.126950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:24:47 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x8, 0x0, 0xfd, @time, {}, {}, @raw8={"ccd2c24fb6cfac79409a18c3"}}], 0x1c)

09:24:47 executing program 7:
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000100)={0xc8, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0x21, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @supported_rates={0x1, 0x3, [{}, {}, {}]}, @peer_mgmt={0x75, 0x6, {0x0, 0x0, @void, @val, @void}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x81, 0x2a, [@random_vendor={0xdd, 0x7b, "e25e3c26b297ddfcaa9dbaa059c0f320a2393dbf91a80794aa42806ea1ba5cdf0c5751a9a7b7d3790c200073153ccfb762671c438e96eb2052ac46ade0542a1907515c5e3fbee645eb466c6e9d92dee393fe24ea33106c599a3ebfd52a2415b1f9e9f254d4ff15c576a35b5dd2d76cf749b5be49d5977654e917f7"}]}]}, 0xc8}}, 0x0)
r0 = syz_io_uring_setup(0x6133, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0))
r1 = dup(r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x6, &(0x7f00000001c0), 0x2)

09:24:47 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x11, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0)

09:24:47 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6ec98842f2bdb8893024a29ae7c6742b7301b", 0x78}], 0x1)

09:24:47 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

09:24:47 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x8, 0x0, 0xfd, @time, {}, {}, @raw8={"ccd2c24fb6cfac79409a18c3"}}], 0x1c)

09:24:47 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
creat(0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0x0, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x80})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x8b)
lstat(0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

09:24:47 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x10, 0xfffe00, 0x2000400)

09:24:47 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x6d, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

09:24:47 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x96943b74b52d29d7, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
r1 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40000, 0x4)
r2 = openat$incfs(r0, &(0x7f00000003c0)='.pending_reads\x00', 0x400, 0x110)
linkat(r1, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000400)='./file1\x00', 0x1000)
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')

09:24:47 executing program 7:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfff})
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
write$hidraw(r0, &(0x7f0000000080)='M', 0x1)

09:24:47 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x26)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @private}, 0x10)
read(r0, &(0x7f0000000000)=""/232, 0xe8)
ioctl$SIOCGSTAMP(r0, 0x80108906, &(0x7f00000000c0))

09:24:47 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

09:24:47 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x685}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb3}}}}}]}}]}}, 0x0)

[  136.697915] audit: type=1400 audit(1768382687.943:11): avc:  denied  { write } for  pid=4163 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  136.714000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.718740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:24:47 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x96943b74b52d29d7, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
r1 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40000, 0x4)
r2 = openat$incfs(r0, &(0x7f00000003c0)='.pending_reads\x00', 0x400, 0x110)
linkat(r1, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000400)='./file1\x00', 0x1000)
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')

09:24:47 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x26)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000040)=0x71, 0x4)

[  136.739178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:47 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000000240))
timer_getoverrun(0x0)

[  136.745081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.746348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.750979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.751592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.752190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.762656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.765840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

[  136.766495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.785984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.787997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.795600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.796217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:48 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x40}, {0x6}]}, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0)

[  136.801041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.805714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.824788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.825456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.826081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:48 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x6d, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

[  136.843500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.844116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:48 executing program 7:
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x2, 0x0, 0x0)

[  136.851602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:48 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
creat(0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0x0, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x80})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x8b)
lstat(0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

[  136.852218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.865176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.872665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.873278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.883697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.884300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.889601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.890204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.895630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.896239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.898953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.901634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.905146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.906906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.911512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.912191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.922760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.923342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.924034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.929468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.930086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.938691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.939306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.943585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.944182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.950588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.951259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.953662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.954274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.956606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.957215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.960179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.962050] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.967053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.970655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.971267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.973630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.974247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.976674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.977293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.979571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.980172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.983162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.984222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.985281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.986396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.986992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.989602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.990210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.994246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  136.999225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.007299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.008659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.009247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.010578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.011168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.012275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.012889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.013564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.014182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.014808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.015415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.017742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.018360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.018983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.019581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.021148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.021794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.022820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.023462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.024054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.024691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.025284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.025883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.026584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.027196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.027812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.028447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.029042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.029663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.030251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.030861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.031543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.032161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.032801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.033426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.034044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.034704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.035331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.035962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.036691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.037331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.037969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.038605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.039228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.039865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.040540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.041143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.041846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.042515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.043140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.043779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.044441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.045060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.045714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.046313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.047023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.047680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.048328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.048984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.049630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.050271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.050917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.051528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.052234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.052914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.053552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.054185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.054842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.055490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.056122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.056768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.057478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.058129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.058776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.059411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.060046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.060716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.061333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.061960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.062689] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.063325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.063963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.064636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.065252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.065900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.066558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.067153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.067870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.068567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.069183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.069830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.070481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.071101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.071751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.072349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.073081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.073739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.074403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.075028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.075677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.076304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.076967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.077588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.078287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.078967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.079614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.080261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.080920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.081567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.082206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.082839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.083540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.084184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.084832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.085481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.086107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.086761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.087417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.088027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.088758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.089430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.090066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.090725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.091349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.092005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.092677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.093262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.093981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.094651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.095278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.095922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.096584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.097197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.097852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.098495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.099180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.099838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.100508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.101129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.101775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.102439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.103063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.103687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.104416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.105039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.105688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.106305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.107640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.108252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.110003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.110603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.111289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.111983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.112634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.113270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.113933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.114574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.115210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.115833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.116538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.117182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.117845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.118492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.119132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.119884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.121683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.122270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.123656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.124294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.125633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.126243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.127578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.128190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.129645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.130231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.131587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.132223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.133586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.134160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.135649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.136263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.137569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.138145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.139568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  137.140162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:24:48 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x31, 0x0, 0x0)

09:24:48 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

09:24:48 executing program 7:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x3, 0x2)
shutdown(0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x0)

09:24:48 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
creat(0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0x0, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x80})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x8b)
lstat(0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

09:24:48 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x96943b74b52d29d7, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
r1 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40000, 0x4)
r2 = openat$incfs(r0, &(0x7f00000003c0)='.pending_reads\x00', 0x400, 0x110)
linkat(r1, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000400)='./file1\x00', 0x1000)
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')

09:24:48 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

09:24:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0)

09:24:48 executing program 0:
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x685}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb3}}}}}]}}]}}, 0x0)

[  137.276541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.285017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:24:48 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee00)

09:24:48 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

09:24:48 executing program 6:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x0, 0x0, 0x0)
creat(0x0, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0x0, &(0x7f0000000040))
r1 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x80})
write$binfmt_script(0xffffffffffffffff, 0x0, 0x8b)
lstat(0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)

09:24:48 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]})
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)

09:24:48 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCXONC(r0, 0x80045439, 0x0)

09:24:48 executing program 1:
pipe2(&(0x7f0000000240)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000300)={0x1})

09:24:48 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

[  137.440971] audit: type=1326 audit(1768382688.691:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.448169] audit: type=1326 audit(1768382688.695:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
09:24:48 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r0 = syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x96943b74b52d29d7, 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
r1 = open$dir(&(0x7f0000000280)='./file1\x00', 0x40000, 0x4)
r2 = openat$incfs(r0, &(0x7f00000003c0)='.pending_reads\x00', 0x400, 0x110)
linkat(r1, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000400)='./file1\x00', 0x1000)
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')

09:24:48 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

[  137.468483] audit: type=1326 audit(1768382688.698:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.470299] audit: type=1326 audit(1768382688.700:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.480597] audit: type=1326 audit(1768382688.700:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.489486] audit: type=1326 audit(1768382688.701:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.492469] audit: type=1326 audit(1768382688.712:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3dc0327a04 code=0x7ffc0000
[  137.495480] audit: type=1326 audit(1768382688.723:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.498464] audit: type=1326 audit(1768382688.723:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4222 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc0374b19 code=0x7ffc0000
[  137.533462] 
[  137.533643] =====================================
[  137.534010] WARNING: bad unlock balance detected!
[  137.534399] 6.19.0-rc5-next-20260114 #1 Not tainted
[  137.534797] -------------------------------------
[  137.535170] syz-executor.4/4239 is trying to release lock (rcu_read_lock) at:
[  137.535737] [<ffffffff81c1cd75>] __wait_on_freeing_inode+0x105/0x350
[  137.537656] but there are no more locks to release!
[  137.538763] 
[  137.538763] other info that might help us debug this:
[  137.540326] 4 locks held by syz-executor.4/4239:
[  137.541695]  #0: ffff88800f7a43f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  137.543725]  #1: ffff8880499a83e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  137.545625]  #2: ffff88800f7b0950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  137.546336]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  137.547063] 
[  137.547063] stack backtrace:
[  137.547414] CPU: 1 UID: 0 PID: 4239 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  137.547428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  137.547436] Call Trace:
[  137.547440]  <TASK>
[  137.547444]  dump_stack_lvl+0xca/0x120
[  137.547472]  ? __wait_on_freeing_inode+0x105/0x350
[  137.547486]  print_unlock_imbalance_bug+0x118/0x130
[  137.547501]  ? __wait_on_freeing_inode+0x105/0x350
[  137.547516]  lock_release+0x1ee/0x270
[  137.547531]  __wait_on_freeing_inode+0x10a/0x350
[  137.547545]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  137.547561]  ? __pfx_var_wake_function+0x10/0x10
[  137.547579]  ? lock_is_held_type+0x9e/0x120
[  137.547598]  insert_inode_locked+0x25f/0x890
[  137.547615]  __ext4_new_inode+0x223d/0x4cd0
[  137.547632]  ? __pfx___ext4_new_inode+0x10/0x10
[  137.547646]  ? __pfx___dquot_initialize+0x10/0x10
[  137.547664]  ? __pfx_avc_has_perm+0x10/0x10
[  137.547681]  ext4_symlink+0x623/0xb40
[  137.547699]  ? __pfx_ext4_symlink+0x10/0x10
[  137.547715]  ? security_inode_permission+0x72/0xe0
[  137.547728]  vfs_symlink+0x44b/0x840
[  137.547744]  do_symlinkat+0x153/0x440
[  137.547758]  ? __pfx_do_symlinkat+0x10/0x10
[  137.547771]  ? strncpy_from_user+0x21b/0x2f0
[  137.547789]  __x64_sys_symlink+0x79/0xa0
[  137.547802]  do_syscall_64+0xbf/0x420
[  137.547814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.547827] RIP: 0033:0x7f4b6fb34427
[  137.547837] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  137.547848] RSP: 002b:00007ffd87712378 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  137.547859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b6fb34427
[  137.547866] RDX: 00007ffd87712457 RSI: 00007f4b6fb8f019 RDI: 00007ffd87712440
[  137.547874] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd87712210
[  137.547881] R10: 00007ffd877120c7 R11: 0000000000000206 R12: 0000000000000001
[  137.547888] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd87712440
[  137.547899]  </TASK>
[  137.563097] ------------[ cut here ]------------
[  137.587602] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/4239
[  137.603435] Modules linked in:
[  137.603730] CPU: 1 UID: 0 PID: 4239 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) 
[  137.621714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  137.622358] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  137.644362] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9
[  137.685648] RSP: 0018:ffff88804a5979a0 EFLAGS: 00010286
[  137.686067] RAX: 00000000ffffffff RBX: ffff888048b9b700 RCX: ffffffff81565a27
[  137.703836] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff888048b9bafc
[  137.724461] RBP: ffff888048b9b700 R08: 0000000000000000 R09: fffffbfff0ba6ffc
[  137.725030] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888048b9b700
[  137.749999] R13: 0000000000000001 R14: ffffffff85c0dec0 R15: ffff88804996d8e0
[  137.768903] FS:  0000555563395400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000
[  137.792586] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  137.793050] CR2: 00007f4b6fbb4544 CR3: 00000000486ae000 CR4: 0000000000350ef0
[  137.810734] Call Trace:
[  137.810976]  <TASK>
[  137.834151]  __wait_on_freeing_inode+0x10f/0x350
[  137.855819]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  137.906294]  ? __pfx_var_wake_function+0x10/0x10
[  137.973317]  ? lock_is_held_type+0x9e/0x120
[  138.017077]  insert_inode_locked+0x25f/0x890
[  138.065120]  __ext4_new_inode+0x223d/0x4cd0
[  138.361829]  ? __pfx___ext4_new_inode+0x10/0x10
[  138.733960]  ? __pfx___dquot_initialize+0x10/0x10
[  138.776330]  ? __pfx_avc_has_perm+0x10/0x10
[  139.339324]  ext4_symlink+0x623/0xb40
[  139.511266]  ? __pfx_ext4_symlink+0x10/0x10
[  139.622896]  ? security_inode_permission+0x72/0xe0
[  139.849351]  vfs_symlink+0x44b/0x840
[  139.954181]  do_symlinkat+0x153/0x440
[  140.054939]  ? __pfx_do_symlinkat+0x10/0x10
[  140.113182]  ? strncpy_from_user+0x21b/0x2f0
[  140.258917]  __x64_sys_symlink+0x79/0xa0
[  140.297133]  do_syscall_64+0xbf/0x420
[  140.347975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.372736] RIP: 0033:0x7f4b6fb34427
[  140.373156] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.397168] RSP: 002b:00007ffd87712378 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  140.420779] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4b6fb34427
[  140.446731] RDX: 00007ffd87712457 RSI: 00007f4b6fb8f019 RDI: 00007ffd87712440
[  140.447326] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd87712210
[  140.468566] R10: 00007ffd877120c7 R11: 0000000000000206 R12: 0000000000000001
[  140.469149] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd87712440
[  140.550361]  </TASK>
[  140.569639] irq event stamp: 1627
[  140.569920] hardirqs last  enabled at (1627): [<ffffffff84cea38b>] irqentry_exit+0x17b/0x650
[  140.590108] hardirqs last disabled at (1625): [<ffffffff813c20de>] handle_softirqs+0x65e/0x7d0
[  140.611016] softirqs last  enabled at (1626): [<ffffffff813c2384>] __irq_exit_rcu+0xc4/0x100
[  140.627088] softirqs last disabled at (1211): [<ffffffff813c2384>] __irq_exit_rcu+0xc4/0x100
[  140.627968] ---[ end trace 0000000000000000 ]---
[  140.628693] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  140.629400] Bluetooth: hci0: command 0x0c1a tx timeout
[  140.629588] Bluetooth: hci2: Injecting HCI hardware error event
[  140.630471] Bluetooth: hci2: hardware error 0x00
[  140.636429] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  140.647511] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.648566] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  140.663983] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  140.665158] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.676915] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  140.695200] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  140.697424] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  140.703733] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  140.707399] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  140.707866] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  140.715627] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  140.719315] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  140.721247] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  140.722348] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  140.725105] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  140.725718] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  140.728681] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  140.730345] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  140.731042] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  140.732141] Bluetooth: hci7: Opcode 0x0406 failed: -4
09:24:52 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

09:24:52 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)

09:24:52 executing program 6:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r0, 0x1)
r1 = dup2(r0, r0)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x7)
setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4)

09:24:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]})
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)

09:24:52 executing program 0:
perf_event_open(&(0x7f0000001140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

09:24:52 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}], 0x10}, 0x0)

09:24:52 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCXONC(r0, 0x80045439, 0x0)

09:24:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
ioprio_set$uid(0x3, 0x0, 0x0)

09:24:52 executing program 0:
perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x980}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:24:52 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCXONC(r0, 0x80045439, 0x0)

09:24:52 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f0000000080)="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", 0x3cc)

09:24:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
ioprio_set$uid(0x3, 0x0, 0x0)

09:24:52 executing program 1:
rt_sigaction(0x9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))

09:24:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]})
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)

09:24:52 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00')
splice(r0, 0x0, r1, 0x0, 0x8, 0x0)

09:24:52 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f0000000080)="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", 0x3cc)

09:24:52 executing program 0:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0x8000, 0x80000000, 0x5})
r1 = getpgrp(0x0)
sched_rr_get_interval(r1, &(0x7f0000001200))
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1)
semget$private(0x0, 0x1, 0x38)
r2 = epoll_create1(0x0)
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080))
clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:24:52 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCXONC(r0, 0x80045439, 0x0)

09:24:52 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000003c0), 0x4)

09:24:52 executing program 1:
rt_sigaction(0x9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))

09:24:52 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f0000000080)="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", 0x3cc)

09:24:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffcfffd}]})
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)

09:24:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
ioprio_set$uid(0x3, 0x0, 0x0)

09:24:52 executing program 1:
rt_sigaction(0x9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))

09:24:52 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
ppoll(0x0, 0x0, &(0x7f0000000980)={0x0, 0x989680}, 0x0, 0x0)

09:24:52 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x0, 0x40800})

09:24:52 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write(r0, &(0x7f0000000080)="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", 0x3cc)

09:24:52 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffcfffc}]})
prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)=']%&&(-@\x86\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)=']%&&(-@\x86\x00')

09:24:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x0, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_DISABLED, @NL80211_HE_BSS_COLOR_ATTR_COLOR, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL]}]}, 0x74}}, 0x0)

09:24:52 executing program 0:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0x8000, 0x80000000, 0x5})
r1 = getpgrp(0x0)
sched_rr_get_interval(r1, &(0x7f0000001200))
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1)
semget$private(0x0, 0x1, 0x38)
r2 = epoll_create1(0x0)
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080))
clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:24:52 executing program 1:
rt_sigaction(0x9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))

09:24:52 executing program 4:
syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)

09:24:52 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
ioprio_set$uid(0x3, 0x0, 0x0)

09:24:52 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x0, 0x40800})

09:24:52 executing program 7:
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readlink(0x0, &(0x7f0000000080)=""/220, 0xdc)

09:24:52 executing program 7:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, 0x0, &(0x7f0000001200))

09:24:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)

09:24:52 executing program 4:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="bf6d2d716898cb46ff9d19e0f39b647c11d949ce20ac1d7cfcec6646b190ae6b473ebcdeffcd431659ae37e9735d4abe754338874d089ee78a275d46fc321b64eb6e8c48239f8b795e07ec8e3145b3c56495441bcefef7ac1a5d8e6d519f5749c6ec493324aaf05a61acbaa0244a61366f404a94769a1d329a19dde21c4170664a48f3cea71fac97b999a8ff85b5587dc737899ceebf751df8cd98d6d8e26504067cdf88f978ecee00026e806ea42d457c3d2a1f1dfddf660869be4a2cca438cc7aa65e78e49148551ef9dfb726d9f1693", 0xd1}], 0x1}}], 0x1, 0x0)
r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r1 = fcntl$dupfd(r0, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000000380)=[{0x0}], 0x1)

09:24:52 executing program 1:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:24:52 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x540d, 0x0)

09:24:52 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getpid()
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:24:52 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x0, 0x40800})

09:24:52 executing program 0:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0x8000, 0x80000000, 0x5})
r1 = getpgrp(0x0)
sched_rr_get_interval(r1, &(0x7f0000001200))
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1)
semget$private(0x0, 0x1, 0x38)
r2 = epoll_create1(0x0)
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080))
clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

09:24:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

09:24:52 executing program 7:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x7005, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x252)

09:24:52 executing program 4:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="bf6d2d716898cb46ff9d19e0f39b647c11d949ce20ac1d7cfcec6646b190ae6b473ebcdeffcd431659ae37e9735d4abe754338874d089ee78a275d46fc321b64eb6e8c48239f8b795e07ec8e3145b3c56495441bcefef7ac1a5d8e6d519f5749c6ec493324aaf05a61acbaa0244a61366f404a94769a1d329a19dde21c4170664a48f3cea71fac97b999a8ff85b5587dc737899ceebf751df8cd98d6d8e26504067cdf88f978ecee00026e806ea42d457c3d2a1f1dfddf660869be4a2cca438cc7aa65e78e49148551ef9dfb726d9f1693", 0xd1}], 0x1}}], 0x1, 0x0)
r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r1 = fcntl$dupfd(r0, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000000380)=[{0x0}], 0x1)

[  141.469795] loop5: detected capacity change from 0 to 512
09:24:52 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

09:24:52 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x540d, 0x0)

[  141.536674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
09:24:52 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0xff, 0x1}, 'port1\x00', 0x0, 0x40800})

[  141.554187] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:24:52 executing program 1:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:24:52 executing program 0:
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={<r0=>0xffffffffffffffff, 0x8000, 0x80000000, 0x5})
r1 = getpgrp(0x0)
sched_rr_get_interval(r1, &(0x7f0000001200))
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1)
semget$private(0x0, 0x1, 0x38)
r2 = epoll_create1(0x0)
r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080))
clone3(&(0x7f0000000180)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

[  141.636289] loop5: detected capacity change from 0 to 512
[  141.673292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.696072] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:24:53 executing program 1:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

09:24:53 executing program 4:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="bf6d2d716898cb46ff9d19e0f39b647c11d949ce20ac1d7cfcec6646b190ae6b473ebcdeffcd431659ae37e9735d4abe754338874d089ee78a275d46fc321b64eb6e8c48239f8b795e07ec8e3145b3c56495441bcefef7ac1a5d8e6d519f5749c6ec493324aaf05a61acbaa0244a61366f404a94769a1d329a19dde21c4170664a48f3cea71fac97b999a8ff85b5587dc737899ceebf751df8cd98d6d8e26504067cdf88f978ecee00026e806ea42d457c3d2a1f1dfddf660869be4a2cca438cc7aa65e78e49148551ef9dfb726d9f1693", 0xd1}], 0x1}}], 0x1, 0x0)
r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r1 = fcntl$dupfd(r0, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000000380)=[{0x0}], 0x1)

09:24:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x540d, 0x0)

09:24:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getpid()
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:24:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

09:24:53 executing program 2:
r0 = syz_open_dev$rtc(&(0x7f0000000800), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x40187013, &(0x7f0000000180)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1d}})

09:24:53 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

[  141.859401] loop5: detected capacity change from 0 to 512
09:24:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x540d, 0x0)

09:24:53 executing program 1:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58)

[  141.874220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
09:24:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

09:24:53 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

09:24:53 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

09:24:53 executing program 4:
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="bf6d2d716898cb46ff9d19e0f39b647c11d949ce20ac1d7cfcec6646b190ae6b473ebcdeffcd431659ae37e9735d4abe754338874d089ee78a275d46fc321b64eb6e8c48239f8b795e07ec8e3145b3c56495441bcefef7ac1a5d8e6d519f5749c6ec493324aaf05a61acbaa0244a61366f404a94769a1d329a19dde21c4170664a48f3cea71fac97b999a8ff85b5587dc737899ceebf751df8cd98d6d8e26504067cdf88f978ecee00026e806ea42d457c3d2a1f1dfddf660869be4a2cca438cc7aa65e78e49148551ef9dfb726d9f1693", 0xd1}], 0x1}}], 0x1, 0x0)
r0 = syz_io_uring_setup(0x77bc, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000001240))
r1 = fcntl$dupfd(r0, 0x0, r0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x16, &(0x7f0000000380)=[{0x0}], 0x1)

[  141.891477] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:24:53 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

09:24:53 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

09:24:53 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

09:24:53 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

09:24:53 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4)

09:24:53 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

09:24:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getpid()
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

[  142.064445] loop5: detected capacity change from 0 to 512
[  142.067745] Bluetooth: hci2: unexpected event for opcode 0x4241
[  142.083644] Bluetooth: hci2: unexpected event for opcode 0x4241
[  142.088328] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
09:24:53 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgrp(0x0)
sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0)

[  142.096671] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:24:53 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x20202)
ioctl$EVIOCSMASK(r0, 0x40044591, 0x0)
write$evdev(r0, 0x0, 0x0)

09:24:53 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

09:24:53 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

[  142.184677] Bluetooth: hci2: unexpected event for opcode 0x4241
09:24:53 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getpid()
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900))

09:24:53 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

09:24:53 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
ftruncate(r0, 0x9)
finit_module(r0, 0x0, 0x6)

[  142.273123] loop5: detected capacity change from 0 to 512
09:24:53 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

[  142.295709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
09:24:53 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:53 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

[  142.306483] Bluetooth: hci2: unexpected event for opcode 0x4241
[  142.309622] Bluetooth: hci5: unexpected event for opcode 0x20e5
09:24:53 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xe8)
close(r0)

[  142.324445] kauditd_printk_skb: 26 callbacks suppressed
[  142.324458] audit: type=1400 audit(1768382693.574:47): avc:  denied  { block_suspend } for  pid=4439 comm="syz-executor.2" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  142.335620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
09:24:53 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

09:24:53 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

[  142.372762] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  142.375975] Bluetooth: hci4: unexpected event for opcode 0x4241
[  142.381785] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  142.403641] Bluetooth: hci2: unexpected event for opcode 0x4241
[  142.438492] Bluetooth: hci5: unexpected event for opcode 0x20e5
09:24:53 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@updpolicy={0x13c, 0x19, 0x441, 0x0, 0x0, {{@in=@dev, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x84, 0x5, [{{@in, 0x0, 0x33}}, {{@in6=@private0}, 0x0, @in6=@mcast2}]}]}, 0x13c}}, 0x0)

09:24:53 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

[  142.454647] Bluetooth: hci5: ACL packet for unknown connection handle 200
09:24:53 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0)

[  142.492736] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  142.496629] Bluetooth: hci4: unexpected event for opcode 0x4241
09:24:53 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

09:24:53 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:53 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

09:24:53 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setsig(r0, 0xa, 0x0)
fcntl$setown(r0, 0xb, 0x0)

09:24:53 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:53 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

09:24:53 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

[  142.593767] Bluetooth: hci0: unexpected event for opcode 0x20e5
[  142.603777] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  142.604833] Bluetooth: hci4: unexpected event for opcode 0x4241
[  142.606511] Bluetooth: hci5: unexpected event for opcode 0x20e5
[  142.640906] Bluetooth: hci2: unexpected event for opcode 0x20e5
09:24:53 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

[  142.680122] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.680458] Bluetooth: hci2: Opcode 0x0c03 failed: -110
09:24:53 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

[  142.690881] Bluetooth: hci0: ACL packet for unknown connection handle 200
09:24:53 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

[  142.743641] Bluetooth: hci7: command 0x0c1a tx timeout
[  142.744119] Bluetooth: hci6: command 0x0c1a tx timeout
[  142.744447] Bluetooth: hci3: command 0x0c1a tx timeout
09:24:53 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

[  142.777851] Bluetooth: hci5: ACL packet for unknown connection handle 200
09:24:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:54 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

[  142.821492] Bluetooth: hci0: unexpected event for opcode 0x20e5
[  142.884531] Bluetooth: hci0: ACL packet for unknown connection handle 200
09:24:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:54 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

09:24:54 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:54 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

09:24:54 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

09:24:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

09:24:54 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:54 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

[  142.946612] Bluetooth: hci5: unexpected event for opcode 0x20e5
[  142.973482] Bluetooth: hci0: unexpected event for opcode 0x20e5
[  143.009822] Bluetooth: hci5: ACL packet for unknown connection handle 200
09:24:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

09:24:54 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000240)=""/143)

09:24:54 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

09:24:54 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

09:24:54 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:54 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

[  143.118937] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  143.191704] Bluetooth: hci5: unexpected event for opcode 0x20e5
[  143.243826] Bluetooth: hci5: ACL packet for unknown connection handle 200
09:24:54 executing program 7:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r5})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0800000089de7f8c6a88877dd053019b5026ee334caebbcb7b204c8658bc69df99d54d89b210ca32375528e304360d9f13b30bba474c73bf7a58b032", @ANYRES16=0x0, @ANYBLOB="0feddb472301007ce78f1d77f025237402316d45049f1d6014", @ANYRES32=r2, @ANYBLOB="0800030001000000080003000000000008000300020000000800030002000000080003000300000044000180080003000100000014000200767863616e310000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="08000300000000001400020076657468305f746f5f626f6e64000000", @ANYRES32], 0x8c}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000090)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r8})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@dev, 0x35, r8})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x2000000)
write$binfmt_aout(r9, 0x0, 0x1001)
close(r9)

09:24:54 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040fc728dee520"], 0x7)
kexec_load(0x0, 0x0, 0x0, 0x0)
r1 = epoll_create(0xe9)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xefe, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x2}, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280))
syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x6}, @hci_evt_le_ext_adv_set_term={{}, {0x0, 0x0, 0xc8, 0x84}}}}, 0x9)
syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x0, 0x2}, {0xd1}}}}, 0xf)

09:24:54 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r2})
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x
VM DIAGNOSIS:
09:24:48  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b377b18
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff1100366ef64 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b377b50
RIP=ffffffff84d17302 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557b087400 00000000 00000000
GS =0000 ffff8880e5343000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557b090c58 CR3=000000000db80000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88804a597488
R8 =0000000000000000 R9 =ffffed10015f1046 R10=000000000000005f R11=666666203a312320
R12=000000000000005f R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0
RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555563395400 00000000 00000000
GS =0000 ffff8880e5443000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4b6fbb4544 CR3=00000000486ae000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000