Warning: Permanently added '[localhost]:31027' (ECDSA) to the list of known hosts.
2026/01/13 09:35:19 fuzzer started
2026/01/13 09:35:20 dialing manager at localhost:38155
syzkaller login: [   50.113003] cgroup: Unknown subsys name 'net'
[   50.170731] cgroup: Unknown subsys name 'cpuset'
[   50.182910] cgroup: Unknown subsys name 'rlimit'
2026/01/13 09:35:29 syscalls: 2214
2026/01/13 09:35:29 code coverage: enabled
2026/01/13 09:35:29 comparison tracing: enabled
2026/01/13 09:35:29 extra coverage: enabled
2026/01/13 09:35:29 setuid sandbox: enabled
2026/01/13 09:35:29 namespace sandbox: enabled
2026/01/13 09:35:29 Android sandbox: enabled
2026/01/13 09:35:29 fault injection: enabled
2026/01/13 09:35:29 leak checking: enabled
2026/01/13 09:35:29 net packet injection: enabled
2026/01/13 09:35:29 net device setup: enabled
2026/01/13 09:35:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/13 09:35:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/13 09:35:29 USB emulation: enabled
2026/01/13 09:35:29 hci packet injection: enabled
2026/01/13 09:35:29 wifi device emulation: enabled
2026/01/13 09:35:29 802.15.4 emulation: enabled
2026/01/13 09:35:29 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/13 09:35:30 fetching corpus: 45, signal 28715/32262 (executing program)
2026/01/13 09:35:30 fetching corpus: 95, signal 37077/42139 (executing program)
2026/01/13 09:35:30 fetching corpus: 145, signal 46657/53098 (executing program)
2026/01/13 09:35:30 fetching corpus: 195, signal 52827/60598 (executing program)
2026/01/13 09:35:30 fetching corpus: 245, signal 57907/66978 (executing program)
2026/01/13 09:35:30 fetching corpus: 295, signal 65352/75447 (executing program)
2026/01/13 09:35:30 fetching corpus: 345, signal 68700/80033 (executing program)
2026/01/13 09:35:30 fetching corpus: 394, signal 72324/84796 (executing program)
2026/01/13 09:35:30 fetching corpus: 444, signal 78587/91852 (executing program)
2026/01/13 09:35:31 fetching corpus: 494, signal 82201/96474 (executing program)
2026/01/13 09:35:31 fetching corpus: 544, signal 84520/99904 (executing program)
2026/01/13 09:35:31 fetching corpus: 594, signal 90221/106258 (executing program)
2026/01/13 09:35:31 fetching corpus: 644, signal 92072/109146 (executing program)
2026/01/13 09:35:31 fetching corpus: 694, signal 93986/112085 (executing program)
2026/01/13 09:35:31 fetching corpus: 744, signal 96611/115511 (executing program)
2026/01/13 09:35:31 fetching corpus: 794, signal 98609/118359 (executing program)
2026/01/13 09:35:31 fetching corpus: 844, signal 100639/121214 (executing program)
2026/01/13 09:35:31 fetching corpus: 894, signal 103333/124586 (executing program)
2026/01/13 09:35:31 fetching corpus: 943, signal 104765/126854 (executing program)
2026/01/13 09:35:32 fetching corpus: 993, signal 107406/130147 (executing program)
2026/01/13 09:35:32 fetching corpus: 1043, signal 109033/132534 (executing program)
2026/01/13 09:35:32 fetching corpus: 1093, signal 110549/134812 (executing program)
2026/01/13 09:35:32 fetching corpus: 1143, signal 112391/137352 (executing program)
2026/01/13 09:35:32 fetching corpus: 1193, signal 114568/140133 (executing program)
2026/01/13 09:35:32 fetching corpus: 1243, signal 115859/142161 (executing program)
2026/01/13 09:35:32 fetching corpus: 1293, signal 117341/144315 (executing program)
2026/01/13 09:35:32 fetching corpus: 1343, signal 118625/146257 (executing program)
2026/01/13 09:35:32 fetching corpus: 1393, signal 119989/148290 (executing program)
2026/01/13 09:35:33 fetching corpus: 1443, signal 121644/150477 (executing program)
2026/01/13 09:35:33 fetching corpus: 1493, signal 122975/152416 (executing program)
2026/01/13 09:35:33 fetching corpus: 1543, signal 124322/154340 (executing program)
2026/01/13 09:35:33 fetching corpus: 1593, signal 125400/156097 (executing program)
2026/01/13 09:35:33 fetching corpus: 1643, signal 127024/158185 (executing program)
2026/01/13 09:35:33 fetching corpus: 1693, signal 127927/159747 (executing program)
2026/01/13 09:35:33 fetching corpus: 1743, signal 129065/161474 (executing program)
2026/01/13 09:35:33 fetching corpus: 1793, signal 130144/163115 (executing program)
2026/01/13 09:35:33 fetching corpus: 1843, signal 131876/165243 (executing program)
2026/01/13 09:35:33 fetching corpus: 1892, signal 133007/166907 (executing program)
2026/01/13 09:35:34 fetching corpus: 1942, signal 134069/168482 (executing program)
2026/01/13 09:35:34 fetching corpus: 1991, signal 135520/170262 (executing program)
2026/01/13 09:35:34 fetching corpus: 2040, signal 136706/171896 (executing program)
2026/01/13 09:35:34 fetching corpus: 2090, signal 137988/173542 (executing program)
2026/01/13 09:35:34 fetching corpus: 2140, signal 138806/174920 (executing program)
2026/01/13 09:35:34 fetching corpus: 2190, signal 139940/176473 (executing program)
2026/01/13 09:35:34 fetching corpus: 2240, signal 141229/178078 (executing program)
2026/01/13 09:35:35 fetching corpus: 2290, signal 142320/179566 (executing program)
2026/01/13 09:35:35 fetching corpus: 2340, signal 143467/181036 (executing program)
2026/01/13 09:35:35 fetching corpus: 2390, signal 144391/182378 (executing program)
2026/01/13 09:35:35 fetching corpus: 2440, signal 145724/183896 (executing program)
2026/01/13 09:35:35 fetching corpus: 2490, signal 146531/185125 (executing program)
2026/01/13 09:35:35 fetching corpus: 2540, signal 147810/186602 (executing program)
2026/01/13 09:35:35 fetching corpus: 2590, signal 148396/187673 (executing program)
2026/01/13 09:35:35 fetching corpus: 2640, signal 149384/188931 (executing program)
2026/01/13 09:35:35 fetching corpus: 2690, signal 150121/190027 (executing program)
2026/01/13 09:35:36 fetching corpus: 2740, signal 150761/191071 (executing program)
2026/01/13 09:35:36 fetching corpus: 2790, signal 151562/192216 (executing program)
2026/01/13 09:35:36 fetching corpus: 2840, signal 152459/193389 (executing program)
2026/01/13 09:35:36 fetching corpus: 2890, signal 153288/194504 (executing program)
2026/01/13 09:35:36 fetching corpus: 2940, signal 153978/195502 (executing program)
2026/01/13 09:35:36 fetching corpus: 2990, signal 154712/196584 (executing program)
2026/01/13 09:35:36 fetching corpus: 3040, signal 155288/197550 (executing program)
2026/01/13 09:35:36 fetching corpus: 3090, signal 156031/198562 (executing program)
2026/01/13 09:35:36 fetching corpus: 3140, signal 156508/199486 (executing program)
2026/01/13 09:35:37 fetching corpus: 3189, signal 157312/200574 (executing program)
2026/01/13 09:35:37 fetching corpus: 3239, signal 157939/201506 (executing program)
2026/01/13 09:35:37 fetching corpus: 3289, signal 158482/202384 (executing program)
2026/01/13 09:35:37 fetching corpus: 3339, signal 159369/203428 (executing program)
2026/01/13 09:35:37 fetching corpus: 3389, signal 160229/204410 (executing program)
2026/01/13 09:35:37 fetching corpus: 3439, signal 161012/205342 (executing program)
2026/01/13 09:35:37 fetching corpus: 3488, signal 161725/206258 (executing program)
2026/01/13 09:35:37 fetching corpus: 3538, signal 162758/207272 (executing program)
2026/01/13 09:35:37 fetching corpus: 3588, signal 163251/208060 (executing program)
2026/01/13 09:35:38 fetching corpus: 3638, signal 163788/208923 (executing program)
2026/01/13 09:35:38 fetching corpus: 3688, signal 165588/210137 (executing program)
2026/01/13 09:35:38 fetching corpus: 3738, signal 166283/210989 (executing program)
2026/01/13 09:35:38 fetching corpus: 3788, signal 166884/211774 (executing program)
2026/01/13 09:35:38 fetching corpus: 3838, signal 167425/212568 (executing program)
2026/01/13 09:35:38 fetching corpus: 3888, signal 167976/213328 (executing program)
2026/01/13 09:35:38 fetching corpus: 3938, signal 168624/214128 (executing program)
2026/01/13 09:35:38 fetching corpus: 3988, signal 169125/214869 (executing program)
2026/01/13 09:35:38 fetching corpus: 4038, signal 169594/215565 (executing program)
2026/01/13 09:35:39 fetching corpus: 4088, signal 170004/216212 (executing program)
2026/01/13 09:35:39 fetching corpus: 4138, signal 170593/216956 (executing program)
2026/01/13 09:35:39 fetching corpus: 4188, signal 171127/217664 (executing program)
2026/01/13 09:35:39 fetching corpus: 4238, signal 171564/218310 (executing program)
2026/01/13 09:35:39 fetching corpus: 4288, signal 171987/218978 (executing program)
2026/01/13 09:35:39 fetching corpus: 4338, signal 172631/219640 (executing program)
2026/01/13 09:35:39 fetching corpus: 4388, signal 173182/220297 (executing program)
2026/01/13 09:35:39 fetching corpus: 4438, signal 173636/220942 (executing program)
2026/01/13 09:35:39 fetching corpus: 4488, signal 174025/221555 (executing program)
2026/01/13 09:35:40 fetching corpus: 4538, signal 174592/222270 (executing program)
2026/01/13 09:35:40 fetching corpus: 4588, signal 175352/222943 (executing program)
2026/01/13 09:35:40 fetching corpus: 4638, signal 175865/223559 (executing program)
2026/01/13 09:35:40 fetching corpus: 4688, signal 176391/224179 (executing program)
2026/01/13 09:35:40 fetching corpus: 4738, signal 176768/224741 (executing program)
2026/01/13 09:35:40 fetching corpus: 4788, signal 177110/225326 (executing program)
2026/01/13 09:35:40 fetching corpus: 4838, signal 177544/225870 (executing program)
2026/01/13 09:35:40 fetching corpus: 4887, signal 178162/226441 (executing program)
2026/01/13 09:35:40 fetching corpus: 4937, signal 178757/226993 (executing program)
2026/01/13 09:35:41 fetching corpus: 4987, signal 179283/227518 (executing program)
2026/01/13 09:35:41 fetching corpus: 5037, signal 179870/228062 (executing program)
2026/01/13 09:35:41 fetching corpus: 5087, signal 180378/228617 (executing program)
2026/01/13 09:35:41 fetching corpus: 5137, signal 180832/229139 (executing program)
2026/01/13 09:35:41 fetching corpus: 5187, signal 181175/229627 (executing program)
2026/01/13 09:35:41 fetching corpus: 5237, signal 181771/230132 (executing program)
2026/01/13 09:35:41 fetching corpus: 5287, signal 182171/230602 (executing program)
2026/01/13 09:35:41 fetching corpus: 5337, signal 182604/231067 (executing program)
2026/01/13 09:35:42 fetching corpus: 5386, signal 182999/231566 (executing program)
2026/01/13 09:35:42 fetching corpus: 5436, signal 183362/232065 (executing program)
2026/01/13 09:35:42 fetching corpus: 5486, signal 183802/232557 (executing program)
2026/01/13 09:35:42 fetching corpus: 5536, signal 184199/232998 (executing program)
2026/01/13 09:35:42 fetching corpus: 5586, signal 184587/233447 (executing program)
2026/01/13 09:35:42 fetching corpus: 5636, signal 184952/233901 (executing program)
2026/01/13 09:35:42 fetching corpus: 5686, signal 185398/234292 (executing program)
2026/01/13 09:35:42 fetching corpus: 5735, signal 185738/234743 (executing program)
2026/01/13 09:35:42 fetching corpus: 5785, signal 186153/235107 (executing program)
2026/01/13 09:35:43 fetching corpus: 5835, signal 186641/235107 (executing program)
2026/01/13 09:35:43 fetching corpus: 5885, signal 187114/235111 (executing program)
2026/01/13 09:35:43 fetching corpus: 5934, signal 187518/235111 (executing program)
2026/01/13 09:35:43 fetching corpus: 5984, signal 187943/235112 (executing program)
2026/01/13 09:35:43 fetching corpus: 6034, signal 188310/235115 (executing program)
2026/01/13 09:35:43 fetching corpus: 6084, signal 188697/235118 (executing program)
2026/01/13 09:35:43 fetching corpus: 6133, signal 189089/235118 (executing program)
2026/01/13 09:35:43 fetching corpus: 6182, signal 189470/235123 (executing program)
2026/01/13 09:35:43 fetching corpus: 6232, signal 189930/235123 (executing program)
2026/01/13 09:35:43 fetching corpus: 6282, signal 190254/235124 (executing program)
2026/01/13 09:35:44 fetching corpus: 6332, signal 190547/235126 (executing program)
2026/01/13 09:35:44 fetching corpus: 6382, signal 190890/235126 (executing program)
2026/01/13 09:35:44 fetching corpus: 6432, signal 191246/235131 (executing program)
2026/01/13 09:35:44 fetching corpus: 6482, signal 191600/235131 (executing program)
2026/01/13 09:35:44 fetching corpus: 6531, signal 192062/235131 (executing program)
2026/01/13 09:35:44 fetching corpus: 6581, signal 192441/235143 (executing program)
2026/01/13 09:35:44 fetching corpus: 6631, signal 192862/235144 (executing program)
2026/01/13 09:35:44 fetching corpus: 6681, signal 193204/235144 (executing program)
2026/01/13 09:35:44 fetching corpus: 6730, signal 193602/235158 (executing program)
2026/01/13 09:35:45 fetching corpus: 6780, signal 193911/235158 (executing program)
2026/01/13 09:35:45 fetching corpus: 6830, signal 194173/235160 (executing program)
2026/01/13 09:35:45 fetching corpus: 6880, signal 194585/235161 (executing program)
2026/01/13 09:35:45 fetching corpus: 6930, signal 194949/235161 (executing program)
2026/01/13 09:35:45 fetching corpus: 6980, signal 195313/235163 (executing program)
2026/01/13 09:35:45 fetching corpus: 7030, signal 195753/235184 (executing program)
2026/01/13 09:35:45 fetching corpus: 7080, signal 196133/235187 (executing program)
2026/01/13 09:35:45 fetching corpus: 7130, signal 196556/235199 (executing program)
2026/01/13 09:35:45 fetching corpus: 7180, signal 196933/235199 (executing program)
2026/01/13 09:35:45 fetching corpus: 7230, signal 197243/235211 (executing program)
2026/01/13 09:35:46 fetching corpus: 7280, signal 197777/235218 (executing program)
2026/01/13 09:35:46 fetching corpus: 7330, signal 198092/235220 (executing program)
2026/01/13 09:35:46 fetching corpus: 7380, signal 198505/235221 (executing program)
2026/01/13 09:35:46 fetching corpus: 7430, signal 198863/235221 (executing program)
2026/01/13 09:35:46 fetching corpus: 7480, signal 199165/235226 (executing program)
2026/01/13 09:35:46 fetching corpus: 7530, signal 199657/235228 (executing program)
2026/01/13 09:35:46 fetching corpus: 7580, signal 199872/235231 (executing program)
2026/01/13 09:35:46 fetching corpus: 7630, signal 200153/235231 (executing program)
2026/01/13 09:35:46 fetching corpus: 7680, signal 200350/235232 (executing program)
2026/01/13 09:35:46 fetching corpus: 7730, signal 200724/235232 (executing program)
2026/01/13 09:35:46 fetching corpus: 7780, signal 201042/235233 (executing program)
2026/01/13 09:35:47 fetching corpus: 7830, signal 201329/235233 (executing program)
2026/01/13 09:35:47 fetching corpus: 7880, signal 201707/235233 (executing program)
2026/01/13 09:35:47 fetching corpus: 7930, signal 201978/235233 (executing program)
2026/01/13 09:35:47 fetching corpus: 7980, signal 202284/235233 (executing program)
2026/01/13 09:35:47 fetching corpus: 8030, signal 202686/235234 (executing program)
2026/01/13 09:35:47 fetching corpus: 8080, signal 202984/235235 (executing program)
2026/01/13 09:35:47 fetching corpus: 8130, signal 203259/235235 (executing program)
2026/01/13 09:35:47 fetching corpus: 8180, signal 203652/235235 (executing program)
2026/01/13 09:35:48 fetching corpus: 8230, signal 203994/235235 (executing program)
2026/01/13 09:35:48 fetching corpus: 8280, signal 204267/235235 (executing program)
2026/01/13 09:35:48 fetching corpus: 8330, signal 204505/235235 (executing program)
2026/01/13 09:35:48 fetching corpus: 8380, signal 204808/235237 (executing program)
2026/01/13 09:35:48 fetching corpus: 8430, signal 205052/235237 (executing program)
2026/01/13 09:35:48 fetching corpus: 8480, signal 205437/235306 (executing program)
2026/01/13 09:35:48 fetching corpus: 8530, signal 205731/235306 (executing program)
2026/01/13 09:35:48 fetching corpus: 8580, signal 205969/235306 (executing program)
2026/01/13 09:35:48 fetching corpus: 8630, signal 206265/235306 (executing program)
2026/01/13 09:35:48 fetching corpus: 8680, signal 206521/235306 (executing program)
2026/01/13 09:35:49 fetching corpus: 8730, signal 206799/235306 (executing program)
2026/01/13 09:35:49 fetching corpus: 8780, signal 207064/235306 (executing program)
2026/01/13 09:35:49 fetching corpus: 8830, signal 207429/235307 (executing program)
2026/01/13 09:35:49 fetching corpus: 8880, signal 207706/235312 (executing program)
2026/01/13 09:35:49 fetching corpus: 8930, signal 207990/235312 (executing program)
2026/01/13 09:35:49 fetching corpus: 8980, signal 208217/235315 (executing program)
2026/01/13 09:35:49 fetching corpus: 9030, signal 208528/235319 (executing program)
2026/01/13 09:35:49 fetching corpus: 9080, signal 208747/235319 (executing program)
2026/01/13 09:35:49 fetching corpus: 9129, signal 209070/235321 (executing program)
2026/01/13 09:35:49 fetching corpus: 9179, signal 209439/235323 (executing program)
2026/01/13 09:35:50 fetching corpus: 9229, signal 209700/235323 (executing program)
2026/01/13 09:35:50 fetching corpus: 9279, signal 209947/235323 (executing program)
2026/01/13 09:35:50 fetching corpus: 9329, signal 210190/235323 (executing program)
2026/01/13 09:35:50 fetching corpus: 9378, signal 210539/235323 (executing program)
2026/01/13 09:35:50 fetching corpus: 9428, signal 210780/235329 (executing program)
2026/01/13 09:35:50 fetching corpus: 9478, signal 211084/235330 (executing program)
2026/01/13 09:35:50 fetching corpus: 9528, signal 211352/235330 (executing program)
2026/01/13 09:35:50 fetching corpus: 9578, signal 211614/235330 (executing program)
2026/01/13 09:35:50 fetching corpus: 9628, signal 211841/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9678, signal 212184/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9728, signal 212434/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9778, signal 212668/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9827, signal 212933/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9877, signal 213204/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9927, signal 213503/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 9976, signal 213883/235330 (executing program)
2026/01/13 09:35:51 fetching corpus: 10026, signal 214142/235331 (executing program)
2026/01/13 09:35:52 fetching corpus: 10076, signal 214331/235332 (executing program)
2026/01/13 09:35:52 fetching corpus: 10126, signal 214617/235332 (executing program)
2026/01/13 09:35:52 fetching corpus: 10176, signal 214921/235332 (executing program)
2026/01/13 09:35:52 fetching corpus: 10226, signal 215119/235332 (executing program)
2026/01/13 09:35:52 fetching corpus: 10276, signal 215596/235332 (executing program)
2026/01/13 09:35:52 fetching corpus: 10326, signal 215892/235332 (executing program)
2026/01/13 09:35:52 fetching corpus: 10376, signal 216235/235335 (executing program)
2026/01/13 09:35:52 fetching corpus: 10426, signal 216412/235335 (executing program)
2026/01/13 09:35:52 fetching corpus: 10476, signal 216605/235338 (executing program)
2026/01/13 09:35:52 fetching corpus: 10526, signal 216867/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10576, signal 217134/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10626, signal 217329/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10676, signal 217577/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10726, signal 218316/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10776, signal 218642/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10826, signal 218866/235338 (executing program)
2026/01/13 09:35:53 fetching corpus: 10876, signal 219133/235339 (executing program)
2026/01/13 09:35:53 fetching corpus: 10925, signal 219305/235339 (executing program)
2026/01/13 09:35:53 fetching corpus: 10975, signal 219484/235339 (executing program)
2026/01/13 09:35:54 fetching corpus: 11025, signal 219743/235339 (executing program)
2026/01/13 09:35:54 fetching corpus: 11075, signal 220143/235346 (executing program)
2026/01/13 09:35:54 fetching corpus: 11125, signal 220300/235346 (executing program)
2026/01/13 09:35:54 fetching corpus: 11175, signal 220516/235346 (executing program)
2026/01/13 09:35:54 fetching corpus: 11225, signal 220743/235346 (executing program)
2026/01/13 09:35:54 fetching corpus: 11275, signal 221015/235348 (executing program)
2026/01/13 09:35:54 fetching corpus: 11325, signal 221300/235348 (executing program)
2026/01/13 09:35:54 fetching corpus: 11375, signal 221511/235348 (executing program)
2026/01/13 09:35:55 fetching corpus: 11425, signal 221786/235348 (executing program)
2026/01/13 09:35:55 fetching corpus: 11475, signal 222057/235348 (executing program)
2026/01/13 09:35:55 fetching corpus: 11525, signal 222312/235348 (executing program)
2026/01/13 09:35:55 fetching corpus: 11575, signal 222520/235348 (executing program)
2026/01/13 09:35:55 fetching corpus: 11625, signal 222744/235348 (executing program)
2026/01/13 09:35:55 fetching corpus: 11675, signal 222953/235349 (executing program)
2026/01/13 09:35:55 fetching corpus: 11725, signal 223185/235349 (executing program)
2026/01/13 09:35:55 fetching corpus: 11775, signal 223449/235349 (executing program)
2026/01/13 09:35:56 fetching corpus: 11825, signal 223685/235349 (executing program)
2026/01/13 09:35:56 fetching corpus: 11875, signal 223944/235349 (executing program)
2026/01/13 09:35:56 fetching corpus: 11925, signal 224259/235351 (executing program)
2026/01/13 09:35:56 fetching corpus: 11973, signal 224426/235351 (executing program)
2026/01/13 09:35:56 fetching corpus: 12022, signal 224709/235351 (executing program)
2026/01/13 09:35:56 fetching corpus: 12072, signal 224879/235351 (executing program)
2026/01/13 09:35:56 fetching corpus: 12122, signal 225051/235351 (executing program)
2026/01/13 09:35:56 fetching corpus: 12172, signal 225240/235356 (executing program)
2026/01/13 09:35:56 fetching corpus: 12222, signal 225615/235357 (executing program)
2026/01/13 09:35:56 fetching corpus: 12272, signal 225904/235357 (executing program)
2026/01/13 09:35:57 fetching corpus: 12322, signal 226159/235357 (executing program)
2026/01/13 09:35:57 fetching corpus: 12372, signal 226368/235362 (executing program)
2026/01/13 09:35:57 fetching corpus: 12421, signal 226534/235362 (executing program)
2026/01/13 09:35:57 fetching corpus: 12471, signal 226843/235362 (executing program)
2026/01/13 09:35:57 fetching corpus: 12521, signal 227026/235370 (executing program)
2026/01/13 09:35:57 fetching corpus: 12571, signal 227282/235370 (executing program)
2026/01/13 09:35:57 fetching corpus: 12621, signal 227574/235370 (executing program)
2026/01/13 09:35:57 fetching corpus: 12671, signal 227772/235370 (executing program)
2026/01/13 09:35:57 fetching corpus: 12721, signal 227918/235370 (executing program)
2026/01/13 09:35:58 fetching corpus: 12771, signal 228058/235370 (executing program)
2026/01/13 09:35:58 fetching corpus: 12821, signal 228286/235370 (executing program)
2026/01/13 09:35:58 fetching corpus: 12871, signal 228478/235370 (executing program)
2026/01/13 09:35:58 fetching corpus: 12921, signal 228640/235371 (executing program)
2026/01/13 09:35:58 fetching corpus: 12971, signal 228876/235392 (executing program)
2026/01/13 09:35:58 fetching corpus: 13021, signal 229080/235392 (executing program)
2026/01/13 09:35:58 fetching corpus: 13071, signal 229229/235392 (executing program)
2026/01/13 09:35:58 fetching corpus: 13120, signal 229469/235392 (executing program)
2026/01/13 09:35:58 fetching corpus: 13170, signal 229693/235397 (executing program)
2026/01/13 09:35:58 fetching corpus: 13220, signal 229865/235397 (executing program)
2026/01/13 09:35:59 fetching corpus: 13270, signal 230025/235397 (executing program)
2026/01/13 09:35:59 fetching corpus: 13320, signal 230158/235397 (executing program)
2026/01/13 09:35:59 fetching corpus: 13370, signal 230342/235401 (executing program)
2026/01/13 09:35:59 fetching corpus: 13420, signal 230557/235401 (executing program)
2026/01/13 09:35:59 fetching corpus: 13470, signal 230796/235401 (executing program)
2026/01/13 09:35:59 fetching corpus: 13520, signal 230958/235401 (executing program)
2026/01/13 09:35:59 fetching corpus: 13570, signal 231126/235401 (executing program)
2026/01/13 09:35:59 fetching corpus: 13619, signal 231342/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13669, signal 231562/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13719, signal 231732/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13769, signal 231954/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13819, signal 232178/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13869, signal 232391/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13919, signal 232576/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 13969, signal 232729/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 14019, signal 232936/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 14069, signal 233130/235404 (executing program)
2026/01/13 09:36:00 fetching corpus: 14119, signal 233280/235404 (executing program)
2026/01/13 09:36:01 fetching corpus: 14169, signal 233457/235404 (executing program)
2026/01/13 09:36:01 fetching corpus: 14219, signal 233710/235406 (executing program)
2026/01/13 09:36:01 fetching corpus: 14231, signal 233750/235406 (executing program)
2026/01/13 09:36:01 fetching corpus: 14231, signal 233750/235406 (executing program)
2026/01/13 09:36:03 starting 8 fuzzer processes
09:36:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x11, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}}, 0x3)

09:36:03 executing program 1:
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)

09:36:03 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc)

09:36:03 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000002"], 0x24}], 0x1}, 0x0)

[   93.046846] audit: type=1400 audit(1768296963.116:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:36:03 executing program 4:
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x78ac}], 0x0, &(0x7f0000000480)={[{@session}]})

09:36:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0a85322, &(0x7f0000000040))

09:36:03 executing program 6:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4)
r1 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
write(r1, 0x0, 0x0)

09:36:03 executing program 7:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000001b40)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x0)

[   94.260997] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   94.263747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   94.268714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   94.278124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   94.282722] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   94.322531] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   94.331598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   94.334714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   94.337398] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.342851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.346139] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.350599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   94.353133] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.356093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.356820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.410004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.413706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.415358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.416768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.418083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.423649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.428405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.436576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.438694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.448808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.459260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   94.461037] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   94.462821] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   94.464443] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   94.466812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   94.467698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   94.469579] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   94.471536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   94.474948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   94.476199] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   94.480029] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   94.481232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   94.484404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   94.485019] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   94.487716] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   96.353579] Bluetooth: hci0: command tx timeout
[   96.416541] Bluetooth: hci2: command tx timeout
[   96.416581] Bluetooth: hci1: command tx timeout
[   96.481269] Bluetooth: hci3: command tx timeout
[   96.544994] Bluetooth: hci4: command tx timeout
[   96.545094] Bluetooth: hci5: command tx timeout
[   96.546107] Bluetooth: hci6: command tx timeout
[   96.609498] Bluetooth: hci7: command tx timeout
[   98.401644] Bluetooth: hci0: command tx timeout
[   98.464576] Bluetooth: hci1: command tx timeout
[   98.464631] Bluetooth: hci2: command tx timeout
[   98.528602] Bluetooth: hci3: command tx timeout
[   98.593509] Bluetooth: hci6: command tx timeout
[   98.593530] Bluetooth: hci5: command tx timeout
[   98.593560] Bluetooth: hci4: command tx timeout
[   98.656561] Bluetooth: hci7: command tx timeout
[  100.448533] Bluetooth: hci0: command tx timeout
[  100.512545] Bluetooth: hci2: command tx timeout
[  100.512998] Bluetooth: hci1: command tx timeout
[  100.577631] Bluetooth: hci3: command tx timeout
[  100.640541] Bluetooth: hci6: command tx timeout
[  100.640590] Bluetooth: hci5: command tx timeout
[  100.640948] Bluetooth: hci4: command tx timeout
[  100.705553] Bluetooth: hci7: command tx timeout
[  102.496614] Bluetooth: hci0: command tx timeout
[  102.561261] Bluetooth: hci1: command tx timeout
[  102.561604] Bluetooth: hci2: command tx timeout
[  102.624788] Bluetooth: hci3: command tx timeout
[  102.688574] Bluetooth: hci4: command tx timeout
[  102.689566] Bluetooth: hci5: command tx timeout
[  102.689954] Bluetooth: hci6: command tx timeout
[  102.752575] Bluetooth: hci7: command tx timeout
[  127.502225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.502944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.738794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.739427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.211491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.212126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:36:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init()

[  128.326719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.327326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.368033] audit: type=1400 audit(1768296998.436:8): avc:  denied  { open } for  pid=3854 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  128.371892] audit: type=1400 audit(1768296998.437:9): avc:  denied  { kernel } for  pid=3854 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  128.445796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.446407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:36:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init()

[  128.532103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.532748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.593180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.593853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:36:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init()

[  128.673957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.674567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:36:38 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
inotify_init()

[  128.822088] loop4: detected capacity change from 0 to 120
[  128.829543] isofs_fill_super: bread failed, dev=loop4, iso_blknum=30, block=60
[  128.835762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  128.837120] loop4: detected capacity change from 0 to 120
[  128.845076] isofs_fill_super: bread failed, dev=loop4, iso_blknum=30, block=60
[  128.881588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.882174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.919569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.920175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:36:38 executing program 4:
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x78ac}], 0x0, &(0x7f0000000480)={[{@session}]})

[  128.938134] loop4: detected capacity change from 0 to 120
[  128.951292] isofs_fill_super: bread failed, dev=loop4, iso_blknum=30, block=60
09:36:39 executing program 4:
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x78ac}], 0x0, &(0x7f0000000480)={[{@session}]})

[  128.994365] loop4: detected capacity change from 0 to 120
[  129.020110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.020739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.039970] isofs_fill_super: bread failed, dev=loop4, iso_blknum=30, block=60
09:36:39 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000002"], 0x24}], 0x1}, 0x0)

[  129.057795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.058419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:36:39 executing program 6:
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)

[  129.098276] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  129.106610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.107236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.204751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.205383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.240782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.241386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.265719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.266302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.272687] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  130.274080] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  130.292195] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  130.298107] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  130.300218] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  130.305149] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  130.311404] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  130.313099] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  130.318341] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  130.325297] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  130.328435] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  130.332890] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  130.337054] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  130.341651] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  130.346143] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  130.351916] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  130.353041] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  130.357286] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  130.360441] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  130.363942] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  130.367242] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  130.371222] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  130.372886] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  130.375701] Bluetooth: hci7: Opcode 0x0406 failed: -4
09:36:40 executing program 0:
modify_ldt$read(0x0, 0x0, 0x0)

09:36:40 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

09:36:40 executing program 7:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)

09:36:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0a85322, &(0x7f0000000040))

09:36:40 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
fcntl$setstatus(r0, 0x4, 0x44000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendfile(r0, r1, 0x0, 0xfdef)

09:36:40 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@none}}}, 0xa)

09:36:40 executing program 4:
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0x78ac}], 0x0, &(0x7f0000000480)={[{@session}]})

09:36:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000002"], 0x24}], 0x1}, 0x0)

[  130.459450] loop4: detected capacity change from 0 to 120
[  130.472963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  130.499302] isofs_fill_super: bread failed, dev=loop4, iso_blknum=30, block=60
[  130.501894] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  130.513530] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
09:36:40 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001500010000008000000000000200000002"], 0x24}], 0x1}, 0x0)

09:36:40 executing program 7:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)

[  130.569068] 
[  130.569312] =====================================
[  130.569876] WARNING: bad unlock balance detected!
[  130.570447] 6.19.0-rc5-next-20260113 #1 Not tainted
[  130.571035] -------------------------------------
[  130.571596] syz-executor.7/289 is trying to release lock (rcu_read_lock) at:
[  130.574133] [<ffffffff81c20365>] __wait_on_freeing_inode+0x105/0x350
[  130.576871] but there are no more locks to release!
[  130.578270] 
[  130.578270] other info that might help us debug this:
[  130.579801] 4 locks held by syz-executor.7/289:
[  130.581135]  #0: ffff88800fb183f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  130.582453]  #1: ffff88801b5a96f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  130.583626]  #2: ffff88800fb1c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  130.584689]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  130.585775] 
[  130.585775] stack backtrace:
[  130.586302] CPU: 0 UID: 0 PID: 289 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  130.586323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  130.586333] Call Trace:
[  130.586339]  <TASK>
[  130.586345]  dump_stack_lvl+0xca/0x120
[  130.586383]  ? __wait_on_freeing_inode+0x105/0x350
[  130.586404]  print_unlock_imbalance_bug+0x118/0x130
[  130.586429]  ? __wait_on_freeing_inode+0x105/0x350
[  130.586452]  lock_release+0x1ee/0x270
[  130.586475]  __wait_on_freeing_inode+0x10a/0x350
[  130.586497]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  130.586521]  ? __pfx_var_wake_function+0x10/0x10
[  130.586547]  ? lock_is_held_type+0x9e/0x120
[  130.586564]  insert_inode_locked+0x25f/0x890
[  130.586590]  __ext4_new_inode+0x223d/0x4cd0
[  130.586616]  ? __pfx___ext4_new_inode+0x10/0x10
[  130.586637]  ? __pfx_avc_has_perm+0x10/0x10
[  130.586658]  ? __pfx___dquot_initialize+0x10/0x10
[  130.586689]  ext4_mkdir+0x331/0xb30
[  130.586718]  ? __pfx_ext4_mkdir+0x10/0x10
[  130.586741]  ? security_inode_permission+0x72/0xe0
[  130.586760]  vfs_mkdir+0x6d8/0xc00
[  130.586786]  do_mkdirat+0x11a/0x440
[  130.586805]  ? __pfx_do_mkdirat+0x10/0x10
[  130.586823]  ? strncpy_from_user+0x21b/0x2f0
[  130.586849]  __x64_sys_mkdir+0x65/0x80
[  130.586868]  do_syscall_64+0xbf/0x420
[  130.586887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.586905] RIP: 0033:0x7fb1a88acc27
[  130.586918] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  130.586933] RSP: 002b:00007ffcb4831538 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
[  130.586949] RAX: ffffffffffffffda RBX: 00007ffcb48315c0 RCX: 00007fb1a88acc27
[  130.586960] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffcb48315c0
[  130.586970] RBP: 00007ffcb483159c R08: 0000000000000000 R09: 0000000000000003
[  130.586980] R10: 00007ffcb48312d7 R11: 0000000000000202 R12: 0000000000000032
[  130.586991] R13: 000000000001fd3d R14: 0000000000000003 R15: 00007ffcb4831600
[  130.587006]  </TASK>
[  130.611208] ------------[ cut here ]------------
[  130.614318] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.7/289
[  130.615684] Modules linked in:
[  130.616116] CPU: 0 UID: 0 PID: 289 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  130.617331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  130.618354] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  130.619085] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9
[  130.621267] RSP: 0018:ffff8880167af9e0 EFLAGS: 00010286
[  130.621951] RAX: 00000000ffffffff RBX: ffff88801af6d280 RCX: ffffffff815664c7
[  130.622840] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88801af6d67c
[  130.623742] RBP: ffff88801af6d280 R08: 0000000000000000 R09: fffffbfff0ba6ff4
[  130.624646] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801af6d280
[  130.625543] R13: 0000000000000001 R14: ffffffff85c10080 R15: ffff88804a4ab2c0
[  130.626376] FS:  000055558af75400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  130.627379] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  130.628123] CR2: 0000555557980c58 CR3: 000000001b1bc000 CR4: 0000000000350ef0
[  130.629026] Call Trace:
[  130.629380]  <TASK>
[  130.630356]  __wait_on_freeing_inode+0x10f/0x350
[  130.631373]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  130.632994]  ? __pfx_var_wake_function+0x10/0x10
[  130.634806]  ? lock_is_held_type+0x9e/0x120
[  130.636373]  insert_inode_locked+0x25f/0x890
[  130.638752]  __ext4_new_inode+0x223d/0x4cd0
[  130.642275]  ? __pfx___ext4_new_inode+0x10/0x10
[  130.643677]  ? __pfx_avc_has_perm+0x10/0x10
[  130.644602]  ? __pfx___dquot_initialize+0x10/0x10
[  130.647764]  ext4_mkdir+0x331/0xb30
[  130.650570]  ? __pfx_ext4_mkdir+0x10/0x10
[  130.651417]  ? security_inode_permission+0x72/0xe0
[  130.653806]  vfs_mkdir+0x6d8/0xc00
[  130.655772]  do_mkdirat+0x11a/0x440
[  130.657182]  ? __pfx_do_mkdirat+0x10/0x10
[  130.658280]  ? strncpy_from_user+0x21b/0x2f0
[  130.660989]  __x64_sys_mkdir+0x65/0x80
[  130.661903]  do_syscall_64+0xbf/0x420
[  130.663064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.663852] RIP: 0033:0x7fb1a88acc27
[  130.664384] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  130.666565] RSP: 002b:00007ffcb4831538 EFLAGS: 00000202 ORIG_RAX: 0000000000000053
[  130.667447] RAX: ffffffffffffffda RBX: 00007ffcb48315c0 RCX: 00007fb1a88acc27
[  130.668338] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffcb48315c0
[  130.669230] RBP: 00007ffcb483159c R08: 0000000000000000 R09: 0000000000000003
[  130.670112] R10: 00007ffcb48312d7 R11: 0000000000000202 R12: 0000000000000032
[  130.671003] R13: 000000000001fd3d R14: 0000000000000003 R15: 00007ffcb4831600
[  130.674812]  </TASK>
[  130.675099] irq event stamp: 167939
[  130.675583] hardirqs last  enabled at (167939): [<ffffffff84ce830b>] irqentry_exit+0x17b/0x650
[  130.676734] hardirqs last disabled at (167938): [<ffffffff84ce700f>] sysvec_apic_timer_interrupt+0xf/0x80
[  130.678007] softirqs last  enabled at (167932): [<ffffffff812cdb99>] kernel_fpu_end+0x59/0x70
[  130.679184] softirqs last disabled at (167930): [<ffffffff812cea6b>] kernel_fpu_begin_mask+0x1bb/0x300
[  130.680423] ---[ end trace 0000000000000000 ]---
[  130.691430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
09:36:41 executing program 0:
modify_ldt$read(0x0, 0x0, 0x0)

09:36:41 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
fcntl$setstatus(r0, 0x4, 0x44000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendfile(r0, r1, 0x0, 0xfdef)

09:36:41 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

09:36:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0a85322, &(0x7f0000000040))

09:36:41 executing program 7:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)

09:36:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f00000000c0)='*-%\x00')

09:36:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0xc}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}}, 0x0)

09:36:41 executing program 3:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)

[  131.074788] audit: type=1400 audit(1768297001.142:10): avc:  denied  { write } for  pid=3946 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  131.099820] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
09:36:41 executing program 4:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)

09:36:41 executing program 7:
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x28002, 0x0)
fcntl$setstatus(r0, 0x407, 0x0)

09:36:41 executing program 0:
modify_ldt$read(0x0, 0x0, 0x0)

09:36:41 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

09:36:41 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}]}, 0x20}}, 0x0)

09:36:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0a85322, &(0x7f0000000040))

09:36:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f00000000c0)='*-%\x00')

[  131.257537] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
09:36:41 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/173}, {&(0x7f0000000440)=""/156}], 0x100000000000032e, 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/110, 0x6e)

09:36:41 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$VT_ACTIVATE(r1, 0x2288, 0x0)

09:36:41 executing program 0:
modify_ldt$read(0x0, 0x0, 0x0)

09:36:41 executing program 4:
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0xa]}}}}]})

09:36:41 executing program 1:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

09:36:41 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108)

09:36:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f00000000c0)='*-%\x00')

09:36:41 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
fcntl$setstatus(r0, 0x4, 0x44000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendfile(r0, r1, 0x0, 0xfdef)

[  131.425513] Bluetooth: hci0: command 0x0c1a tx timeout
09:36:41 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x0, 0x1ff}})

09:36:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000a00))

[  131.479078] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
09:36:41 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001500)={0x9, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

09:36:41 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)

09:36:41 executing program 4:
r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[])
r1 = inotify_init()
r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b)
inotify_rm_watch(r1, r2)
mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

09:36:41 executing program 2:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f00000000c0)='*-%\x00')

[  131.620856] audit: type=1400 audit(1768297001.688:11): avc:  denied  { watch_reads } for  pid=4006 comm="syz-executor.4" path="/syzkaller-testdir812494100/syzkaller.qQRV2e/9/file0" dev="tmpfs" ino=1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
09:36:41 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f00000000c0)={'syz_tun\x00', 0x0})

09:36:41 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r0, &(0x7f0000002f00)=""/102400, 0x19000)

09:36:41 executing program 0:
r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r2 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x20000008})
close_range(r1, 0xffffffffffffffff, 0x0)

09:36:41 executing program 4:
r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[])
r1 = inotify_init()
r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b)
inotify_rm_watch(r1, r2)
mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

09:36:41 executing program 3:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rmdir(&(0x7f0000000580)='./file0\x00')

09:36:41 executing program 5:
perf_event_open(&(0x7f0000002a80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  131.722141] audit: type=1400 audit(1768297001.791:12): avc:  denied  { block_suspend } for  pid=4017 comm="syz-executor.0" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
09:36:41 executing program 4:
r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[])
r1 = inotify_init()
r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b)
inotify_rm_watch(r1, r2)
mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

09:36:41 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41002, 0x0)

09:36:41 executing program 2:
r0 = memfd_create(&(0x7f0000001b80)='(\xc8\xf5\x82j\xca', 0x3)
ftruncate(r0, 0x10000)
fcntl$addseals(r0, 0x409, 0x4)
pwrite64(r0, &(0x7f0000000100)="8a", 0x1, 0x0)

[  131.807734] =======================================================
[  131.807734] WARNING: The mand mount option has been deprecated and
[  131.807734]          and is ignored by this kernel. Remove the mand
[  131.807734]          option from the mount to silence this warning.
[  131.807734] =======================================================
[  131.827866] tmpfs: Unknown parameter './file0'
09:36:41 executing program 4:
r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[])
r1 = inotify_init()
r2 = inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0xd400080b)
inotify_rm_watch(r1, r2)
mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
unlink(&(0x7f0000000080)='./file0/file0\x00')

09:36:41 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0)
clone(0x4c200300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x0)

09:36:41 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@broadcast}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @loopback}, 0x1c)

09:36:41 executing program 2:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21648, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x486, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5446)
pipe(&(0x7f0000000040))
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5446)
ioctl$CDROMREADMODE2(r2, 0x530c, &(0x7f00000003c0)={0x1, 0x20, 0x0, 0x6, 0x6, 0x7})

09:36:41 executing program 3:
prctl$PR_SET_SECCOMP(0x41, 0x3, 0x0)
io_setup(0x572, &(0x7f0000000140))

09:36:41 executing program 0:
r0 = socket$inet(0x2, 0xa, 0x0)
bind(r0, 0x0, 0x0)

09:36:42 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41002, 0x0)

09:36:42 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x7e)
fcntl$setstatus(r0, 0x4, 0x44000)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendfile(r0, r1, 0x0, 0xfdef)

[  131.963829] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET)
[  131.972831] audit: type=1400 audit(1768297002.038:13): avc:  denied  { tracepoint } for  pid=4038 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
09:36:42 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TCSETAW(r0, 0x5410, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "e4e79ceb733d1c16"})

09:36:42 executing program 3:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{}]})

09:36:42 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee00)

09:36:42 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0)
clone(0x4c200300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x0)

09:36:42 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41002, 0x0)

09:36:42 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

09:36:42 executing program 5:
r0 = mq_open(&(0x7f0000000080)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8de\xe5\xa8?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04/\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x8b\xe0\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x11\x00\x00\x00\xc7\f\xd8|\xd9\x8d]<p\xd1\xea\xb3\x965;\xd8\x99\xe6\v\xecH\xce\xac\a5\x80d\x1d\x9f\x1e\xf4\xc07K\ai\xa4I\x9aq\xf1\xe9\xc8\x102\x8c\xeb\xbd\r\xe5\x87\x9c\xf7v\xccv\x15\x8d\x14\x91>\x1c\xbe\x9e\xc7w\x1fG\x8f\xb9\x87\xe3n\a\xb8\xeak\xd22\x9a|8\\Xq\xd2\xa0\xdf7\x84\x11D;M\x1d\x97\xb4\xc0\xd5,|\xcfO\xce\x82-9\xa8?*\x04S\x96\x05\x8f\x83\x9b}Xy\xc3\x95\x84\xf4\xe7\xea\xf1|e\v4\xd8`V\xaf\xa4\xaf\x14\xb4Bfs\xb3$\xcc\xd9\xbe9WUM\x1e\x04\xdcg;\xec\xe3', 0x41, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[])
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2001851, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41002, 0x0)

09:36:42 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x420, 0x3f4, 0x1}, 0x420}}, 0x0)

09:36:42 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x6}, 0x0, 0x3)

[  132.312278] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1012 sclass=netlink_tcpdiag_socket pid=4073 comm=syz-executor.5
[  132.320497] Bluetooth: hci2: command 0x0c1a tx timeout
[  132.321073] Bluetooth: hci1: command 0x0c1a tx timeout
09:36:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

[  132.384590] Bluetooth: hci7: command 0x0c1a tx timeout
[  132.385169] Bluetooth: hci6: command 0x0c1a tx timeout
[  132.385760] Bluetooth: hci5: command 0x0c1a tx timeout
[  132.386334] Bluetooth: hci4: command 0x0c1a tx timeout
[  132.386476] Bluetooth: hci3: command 0x0c1a tx timeout
09:36:42 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x6}, 0x0, 0x3)

09:36:42 executing program 1:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.max\x00', &(0x7f0000000040)={0x0, 0x0, 0x10}, 0x18)

09:36:42 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0)
clone(0x4c200300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x0)

09:36:42 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

09:36:42 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001400)={0x20, 0x18, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='wla\x021\x00'}, @typed={0x4, 0x1e, 0x0, 0x0, @binary}]}, 0x20}], 0x1}, 0x0)

09:36:42 executing program 0:
msgsnd(0x0, &(0x7f0000000180)={0x2}, 0x2000, 0x0)

09:36:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

[  132.471049] netlink: 'syz-executor.6': attribute type 30 has an invalid length.
[  132.472066] netlink: 'syz-executor.6': attribute type 30 has an invalid length.
09:36:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x3)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)

09:36:42 executing program 1:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0)

09:36:42 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x6}, 0x0, 0x3)

09:36:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 7:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002500)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='(n\x00'}]}, 0x18}], 0x1}, 0x0)
clone(0x4c200300, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x0)

09:36:42 executing program 1:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0xc4c03d16, 0x0)

09:36:42 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

09:36:42 executing program 4:
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@ceph_nfs_snapfh={0x6}, 0x0, 0x3)

09:36:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:36:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:36:42 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000001800), 0x0, 0x0)
r1 = dup(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2)

09:36:42 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x0, 0x0, 0x0)

09:36:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:36:42 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:36:42 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x3)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)

09:36:42 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0xeb, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0))

09:36:42 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:36:42 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
open_tree(0xffffffffffffffff, 0x0, 0x0)

09:36:42 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

09:36:42 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xc842, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
ioctl$CDROMREADTOCENTRY(r0, 0x401070ca, 0x0)

09:36:42 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000014c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/182, 0xb6}], 0x1}}], 0x2, 0x0, &(0x7f0000002380))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:36:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0)

09:36:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

09:36:43 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x11, r0, 0xee00, 0xee00)

09:36:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:36:43 executing program 3:
move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil], 0xffffffffffffffff, 0x0, 0x0)

09:36:43 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_default\x00')

09:36:43 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x3)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)

09:36:43 executing program 5:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22}})

09:36:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

[  133.102716] 9pnet_fd: Insufficient options for proto=fd
[  133.109025] 9pnet_fd: Insufficient options for proto=fd
[  133.179617] syz-executor.0 (4178) used greatest stack depth: 23984 bytes left
[  133.472691] Bluetooth: hci0: command 0x0c1a tx timeout
09:36:43 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x18, 0x5a, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0)

09:36:43 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

09:36:43 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0)

09:36:43 executing program 5:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22}})

09:36:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

09:36:43 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
truncate(&(0x7f0000000180)='./file0\x00', 0x3)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)

09:36:43 executing program 1:
mlock(&(0x7f0000874000/0x1000)=nil, 0x1000)
mlock2(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x1)
set_mempolicy(0x3, &(0x7f0000000080)=0x51, 0x6)
mbind(&(0x7f0000872000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3)

09:36:43 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:36:43 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

[  133.947668] FAT-fs (loop3): unable to read boot sector
[  133.957689] 9pnet_fd: Insufficient options for proto=fd
[  134.368506] Bluetooth: hci1: command 0x0c1a tx timeout
[  134.368992] Bluetooth: hci2: command 0x0c1a tx timeout
[  134.432553] Bluetooth: hci4: command 0x0c1a tx timeout
[  134.432582] Bluetooth: hci5: command 0x0c1a tx timeout
[  134.433577] Bluetooth: hci3: command 0x0c1a tx timeout
[  134.434152] Bluetooth: hci6: command 0x0c1a tx timeout
[  134.435085] Bluetooth: hci7: command 0x0c1a tx timeout
09:36:44 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:36:44 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0)

09:36:44 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

09:36:44 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0)

09:36:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

09:36:44 executing program 5:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22}})

09:36:44 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

09:36:44 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

[  134.910389] FAT-fs (loop3): unable to read boot sector
[  134.923840] 9pnet_fd: Insufficient options for proto=fd
09:36:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)

09:36:45 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xb, &(0x7f0000000000), 0x4)

09:36:45 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0)

09:36:45 executing program 5:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22}})

09:36:45 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

[  135.099405] FAT-fs (loop3): unable to read boot sector
09:36:45 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

[  135.167998] 9pnet_fd: Insufficient options for proto=fd
09:36:45 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0)

09:36:45 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x0)

[  135.272790] FAT-fs (loop3): unable to read boot sector
[  135.521912] Bluetooth: hci0: command 0x0c1a tx timeout
09:36:45 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:36:45 executing program 7:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x1, 0x0, 0x2, 0x40, 0x0, 0xa4f6, 0x1010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x50248, 0x8001, 0x8001, 0x6, 0x9, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xa, r1, 0x0)
fork()
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x1006})
pread64(r0, &(0x7f0000001500)=""/143, 0x8f, 0x0)

09:36:45 executing program 3:
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "af1eb3", 0x1}}}, 0xd)

09:36:45 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x0)

09:36:45 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00')
getdents(r0, &(0x7f0000000000)=""/95, 0x5f)
getdents(r0, &(0x7f0000000340)=""/65, 0x41)

09:36:45 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x4b64, &(0x7f0000000000))

09:36:45 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:36:45 executing program 5:
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x9, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:36:45 executing program 4:
syz_mount_image$iso9660(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(&(0x7f0000000200)=@sr0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0)

09:36:46 executing program 3:
semctl$IPC_RMID(0x0, 0x0, 0x8)

09:36:46 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x0)

09:36:46 executing program 3:
semctl$IPC_RMID(0x0, 0x0, 0x8)

[  136.079112] /dev/sr0: Can't open blockdev
09:36:46 executing program 0:
setgroups(0x2901, 0x0)

[  136.173554] /dev/sr0: Can't open blockdev
[  136.416607] Bluetooth: hci1: command 0x0c1a tx timeout
[  136.417416] Bluetooth: hci2: command 0x0c1a tx timeout
[  136.480549] Bluetooth: hci5: command 0x0c1a tx timeout
[  136.481369] Bluetooth: hci6: command 0x0c1a tx timeout
[  136.482137] Bluetooth: hci7: command 0x0c1a tx timeout
[  136.482178] Bluetooth: hci3: command 0x0c1a tx timeout
[  136.482881] Bluetooth: hci4: command 0x0c1a tx timeout
09:36:46 executing program 3:
semctl$IPC_RMID(0x0, 0x0, 0x8)

09:36:46 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x0)

09:36:46 executing program 7:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x66)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3)

09:36:46 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/152, 0x98, 0x20000000000)

09:36:46 executing program 0:
r0 = syz_io_uring_setup(0x77b6, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000001240))
io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1e, 0x0, 0x0)

09:36:46 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000ac0))

09:36:46 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:36:46 executing program 1:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:36:46 executing program 3:
semctl$IPC_RMID(0x0, 0x0, 0x8)

09:36:46 executing program 7:
openat$autofs(0xffffffffffffff9c, &(0x7f0000000940), 0x4001, 0x0)

09:36:46 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)

09:36:47 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f00000001c0)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x0)

09:36:47 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0})
r1 = dup2(r0, r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={0x0, 0x0})

09:36:47 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})

09:36:47 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f0000000340)='./file0\x00', 0x29)
fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000040)='system_u:object_r:hald_cache_t:s0\x00', 0x45, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000500)={0x0, 0x5, 0x2})

09:36:47 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:36:47 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
accept$packet(r0, 0x0, 0x0)

[  137.093741] SELinux:  Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped).
[  137.099329] audit: type=1400 audit(1768297007.169:14): avc:  denied  { associate } for  pid=4316 comm="syz-executor.5" name="loop-control" dev="devtmpfs" ino=101 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0"
[  137.110168] SELinux:  Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped).
09:36:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)

09:36:47 executing program 5:
r0 = memfd_create(&(0x7f0000000000)=':^/\x00', 0x6)
ftruncate(r0, 0x8800000)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/243, 0xf3}, {0x0, 0x2}], 0x2)

09:36:47 executing program 4:
clone3(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000180)=""/249, 0xf9, 0x0)

09:36:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)

09:36:47 executing program 5:
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x0, @none, 0x1}}}, 0xe)

09:36:47 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0})
r1 = dup2(r0, r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={0x0, 0x0})

09:36:47 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

09:36:47 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1)

09:36:47 executing program 3:
syz_open_dev$mouse(&(0x7f0000000140), 0x0, 0x0)
r0 = io_uring_setup(0x1ff, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_FILES(r0, 0x1d, &(0x7f0000000140), 0x0)

09:36:47 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:36:48 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

09:36:48 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x1, 0x0, 0x0, @private2, @loopback}})

09:36:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)

09:36:48 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)

09:36:48 executing program 7:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
mlock(&(0x7f0000525000/0x4000)=nil, 0x4000)
mlock2(&(0x7f00007df000/0x3000)=nil, 0x3000, 0x0)
munmap(&(0x7f00004a2000/0x1000)=nil, 0x1000)
mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000)
munmap(&(0x7f00008b4000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x97d, 0x8000, 0x0)
madvise(&(0x7f00007f6000/0x2000)=nil, 0x2000, 0x1)
mlock(&(0x7f00009a9000/0x2000)=nil, 0x2000)
mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0)
munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

[  138.105616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
09:36:48 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0)

09:36:48 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:36:48 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1)

[  138.528534] Bluetooth: hci4: command 0x0c1a tx timeout
09:36:48 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0})
r1 = dup2(r0, r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={0x0, 0x0})

09:36:48 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = epoll_create(0xe9)
r1 = epoll_create(0xe9)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x20000000})

09:36:48 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1)

09:36:48 executing program 2:
keyctl$get_keyring_id(0x0, 0x0, 0x0)

09:36:48 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newsa={0x150, 0x1a, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x58, 0x1, {{'cmac(aes)\x00'}, 0x80, "3c5dfa6b44580a10723498887adb7b7e"}}, @replay_thresh={0x8}]}, 0x150}}, 0x0)

09:36:48 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000006400)='./file0\x00', 0x0, 0x8, &(0x7f0000006980)=[{&(0x7f0000006440)='*', 0x1, 0x80000000}, {&(0x7f0000006580)='+', 0x1}, {&(0x7f0000006600)='G', 0x1}, {&(0x7f0000006680)="ad59f3", 0x3}, {&(0x7f0000006700)="31119f42cc9357f7fbfe7c997e470bc3b1e068a8861fdd633ce2b29c3bc3c4638811a4988c243123a393d79b0ce5935e1e5c268525244c45c2cd79b9162adaa54d38dd1ebdace61700db33811f7042afaac9a2ed6fd83965a9a61b2534a88844", 0x60}, {&(0x7f00000067c0)="c8", 0x1, 0x10001}, {0x0}, {&(0x7f00000068c0)='r-', 0x2, 0xffffffff}], 0x0, 0x0)

09:36:48 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)

09:36:48 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000180)=""/249, 0xf9, 0x0)

[  138.908838] loop0: detected capacity change from 0 to 264192
09:36:49 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)

09:36:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = gettid()
pidfd_open(r0, 0x0)

09:36:49 executing program 2:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xff64, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0)
umount2(&(0x7f00000018c0)='./file0\x00', 0x4)
open(&(0x7f00000000c0)='./file0\x00', 0x204a00, 0x0)

09:36:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000180)=""/249, 0xf9, 0x0)

09:36:49 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b5bc6b4b43b2defe569d74a79b9547b166104407a99cd9323d1fae48108d54c68312152b74460953c99e3bcdb8a09cfb7d6", 0x66}], 0x1)

09:36:49 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)

09:36:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = dup2(r1, r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}}, 0x0)

09:36:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newsa={0x150, 0x1a, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x58, 0x1, {{'cmac(aes)\x00'}, 0x80, "3c5dfa6b44580a10723498887adb7b7e"}}, @replay_thresh={0x8}]}, 0x150}}, 0x0)

09:36:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000180)=""/249, 0xf9, 0x0)

09:36:49 executing program 6:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={0x0})
r1 = dup2(r0, r0)
ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000080)={0x0, 0x0})

09:36:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newsa={0x150, 0x1a, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x58, 0x1, {{'cmac(aes)\x00'}, 0x80, "3c5dfa6b44580a10723498887adb7b7e"}}, @replay_thresh={0x8}]}, 0x150}}, 0x0)

09:36:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = dup2(r1, r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}}, 0x0)

09:36:49 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
socket$packet(0x11, 0x0, 0x300)

09:36:49 executing program 4:
io_submit(0x0, 0x0, 0x0)

09:36:49 executing program 2:
r0 = syz_io_uring_setup(0x453, &(0x7f0000000000), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0))
close(r0)
clock_nanosleep(0x2, 0xb, &(0x7f0000000080)={0x77359400}, 0x0)

09:36:49 executing program 1:
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xfffffffffffffffc, 0x50)

09:36:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = dup2(r1, r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}}, 0x0)

09:36:49 executing program 1:
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xfffffffffffffffc, 0x50)

09:36:49 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newsa={0x150, 0x1a, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x58, 0x1, {{'cmac(aes)\x00'}, 0x80, "3c5dfa6b44580a10723498887adb7b7e"}}, @replay_thresh={0x8}]}, 0x150}}, 0x0)

09:36:50 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = dup2(r1, r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}}, 0x0)

09:36:50 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000180)=""/249, 0xf9, 0x0)

09:36:50 executing program 4:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000880)={0x1, 0x7}, 0x8)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @link_local}, 0x10)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @random="a2836ee8dbe1"}, 0x10)
syz_io_uring_setup(0x1e20, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  140.116919] syz_tun: entered allmulticast mode
[  140.122053] syz_tun: entered promiscuous mode
[  140.133841] syz_tun: left promiscuous mode
[  140.134835] syz_tun: left allmulticast mode
[  140.576530] Bluetooth: hci4: command 0x0c1a tx timeout

VM DIAGNOSIS:
09:36:40  Registers:
info registers vcpu 0
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff82977eb0 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff8880167af450
R8 =0000000000000000 R9 =ffffed100169b046 R10=00000000000fe503 R11=6666666666663c5b
R12=0000000000000823 R13=0000000000000060 R14=fffffbfff1138392 R15=dffffc0000000000
RIP=ffffffff82977f05 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558af75400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe5a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555557980c58 CR3=000000001b1bc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000021de6 RBX=ffff88806ce3f1c0 RCX=ffffc900015f4000 RDX=0000000000040000
RSI=ffffffff8169db94 RDI=0000000000000005 RBP=0000000000000003 RSP=ffff88804ada75a0
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000
R12=ffffed100d9c7e39 R13=ffff88806ce3f1c8 R14=0000000000000001 R15=dffffc0000000000
RIP=ffffffff8169db96 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f80fa303700 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe3b00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564401a95008 CR3=000000000cf92000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f80fce747c000007f80fce747c8
XMM02=00007f80fce747e000007f80fce747c0 XMM03=00007f80fce747c800007f80fce747c0
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000