Warning: Permanently added '[localhost]:36992' (ECDSA) to the list of known hosts.
2026/01/15 09:27:02 fuzzer started
2026/01/15 09:27:02 dialing manager at localhost:35245
syzkaller login: [   52.441471] cgroup: Unknown subsys name 'net'
[   52.525096] cgroup: Unknown subsys name 'cpuset'
[   52.546886] cgroup: Unknown subsys name 'rlimit'
2026/01/15 09:27:14 syscalls: 2214
2026/01/15 09:27:14 code coverage: enabled
2026/01/15 09:27:14 comparison tracing: enabled
2026/01/15 09:27:14 extra coverage: enabled
2026/01/15 09:27:14 setuid sandbox: enabled
2026/01/15 09:27:14 namespace sandbox: enabled
2026/01/15 09:27:14 Android sandbox: enabled
2026/01/15 09:27:14 fault injection: enabled
2026/01/15 09:27:14 leak checking: enabled
2026/01/15 09:27:14 net packet injection: enabled
2026/01/15 09:27:14 net device setup: enabled
2026/01/15 09:27:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/15 09:27:14 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/15 09:27:14 USB emulation: enabled
2026/01/15 09:27:14 hci packet injection: enabled
2026/01/15 09:27:14 wifi device emulation: enabled
2026/01/15 09:27:14 802.15.4 emulation: enabled
2026/01/15 09:27:14 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/15 09:27:14 fetching corpus: 50, signal 27322/30860 (executing program)
2026/01/15 09:27:14 fetching corpus: 100, signal 34999/40088 (executing program)
2026/01/15 09:27:14 fetching corpus: 150, signal 43148/49617 (executing program)
2026/01/15 09:27:14 fetching corpus: 200, signal 50034/57838 (executing program)
2026/01/15 09:27:15 fetching corpus: 250, signal 59216/68136 (executing program)
2026/01/15 09:27:15 fetching corpus: 300, signal 65289/75357 (executing program)
2026/01/15 09:27:15 fetching corpus: 350, signal 69782/80963 (executing program)
2026/01/15 09:27:15 fetching corpus: 400, signal 73472/85759 (executing program)
2026/01/15 09:27:15 fetching corpus: 450, signal 75882/89320 (executing program)
2026/01/15 09:27:15 fetching corpus: 500, signal 79568/94007 (executing program)
2026/01/15 09:27:15 fetching corpus: 550, signal 83421/98738 (executing program)
2026/01/15 09:27:15 fetching corpus: 600, signal 86929/103125 (executing program)
2026/01/15 09:27:16 fetching corpus: 650, signal 89409/106571 (executing program)
2026/01/15 09:27:16 fetching corpus: 700, signal 92364/110390 (executing program)
2026/01/15 09:27:16 fetching corpus: 750, signal 94632/113563 (executing program)
2026/01/15 09:27:16 fetching corpus: 800, signal 97415/117162 (executing program)
2026/01/15 09:27:16 fetching corpus: 850, signal 99685/120206 (executing program)
2026/01/15 09:27:16 fetching corpus: 900, signal 101469/122867 (executing program)
2026/01/15 09:27:16 fetching corpus: 950, signal 103056/125292 (executing program)
2026/01/15 09:27:16 fetching corpus: 1000, signal 105035/128050 (executing program)
2026/01/15 09:27:17 fetching corpus: 1050, signal 106982/130724 (executing program)
2026/01/15 09:27:17 fetching corpus: 1100, signal 108890/133346 (executing program)
2026/01/15 09:27:17 fetching corpus: 1150, signal 112402/137107 (executing program)
2026/01/15 09:27:17 fetching corpus: 1200, signal 113742/139167 (executing program)
2026/01/15 09:27:17 fetching corpus: 1250, signal 115531/141540 (executing program)
2026/01/15 09:27:17 fetching corpus: 1300, signal 118247/144605 (executing program)
2026/01/15 09:27:17 fetching corpus: 1350, signal 119369/146483 (executing program)
2026/01/15 09:27:17 fetching corpus: 1400, signal 121005/148664 (executing program)
2026/01/15 09:27:18 fetching corpus: 1450, signal 122799/150922 (executing program)
2026/01/15 09:27:18 fetching corpus: 1500, signal 123917/152669 (executing program)
2026/01/15 09:27:18 fetching corpus: 1550, signal 125340/154601 (executing program)
2026/01/15 09:27:18 fetching corpus: 1600, signal 126791/156541 (executing program)
2026/01/15 09:27:18 fetching corpus: 1650, signal 127649/158081 (executing program)
2026/01/15 09:27:18 fetching corpus: 1700, signal 128505/159594 (executing program)
2026/01/15 09:27:18 fetching corpus: 1750, signal 130049/161532 (executing program)
2026/01/15 09:27:18 fetching corpus: 1800, signal 131620/163475 (executing program)
2026/01/15 09:27:19 fetching corpus: 1850, signal 132945/165258 (executing program)
2026/01/15 09:27:19 fetching corpus: 1900, signal 133743/166651 (executing program)
2026/01/15 09:27:19 fetching corpus: 1950, signal 134846/168192 (executing program)
2026/01/15 09:27:19 fetching corpus: 2000, signal 136258/169920 (executing program)
2026/01/15 09:27:19 fetching corpus: 2050, signal 137549/171545 (executing program)
2026/01/15 09:27:19 fetching corpus: 2100, signal 138788/173122 (executing program)
2026/01/15 09:27:19 fetching corpus: 2150, signal 139538/174441 (executing program)
2026/01/15 09:27:19 fetching corpus: 2200, signal 140345/175728 (executing program)
2026/01/15 09:27:19 fetching corpus: 2250, signal 141761/177417 (executing program)
2026/01/15 09:27:20 fetching corpus: 2300, signal 142466/178594 (executing program)
2026/01/15 09:27:20 fetching corpus: 2350, signal 143120/179711 (executing program)
2026/01/15 09:27:20 fetching corpus: 2400, signal 144295/181165 (executing program)
2026/01/15 09:27:20 fetching corpus: 2450, signal 145010/182343 (executing program)
2026/01/15 09:27:20 fetching corpus: 2500, signal 145697/183473 (executing program)
2026/01/15 09:27:20 fetching corpus: 2550, signal 147111/184993 (executing program)
2026/01/15 09:27:20 fetching corpus: 2600, signal 147828/186134 (executing program)
2026/01/15 09:27:20 fetching corpus: 2650, signal 148425/187187 (executing program)
2026/01/15 09:27:20 fetching corpus: 2700, signal 148996/188176 (executing program)
2026/01/15 09:27:20 fetching corpus: 2750, signal 150032/189388 (executing program)
2026/01/15 09:27:21 fetching corpus: 2800, signal 150585/190374 (executing program)
2026/01/15 09:27:21 fetching corpus: 2850, signal 151040/191291 (executing program)
2026/01/15 09:27:21 fetching corpus: 2900, signal 151963/192424 (executing program)
2026/01/15 09:27:21 fetching corpus: 2950, signal 152861/193571 (executing program)
2026/01/15 09:27:21 fetching corpus: 3000, signal 153783/194723 (executing program)
2026/01/15 09:27:21 fetching corpus: 3050, signal 154437/195691 (executing program)
2026/01/15 09:27:21 fetching corpus: 3100, signal 155196/196695 (executing program)
2026/01/15 09:27:21 fetching corpus: 3150, signal 155680/197595 (executing program)
2026/01/15 09:27:21 fetching corpus: 3200, signal 156238/198483 (executing program)
2026/01/15 09:27:21 fetching corpus: 3250, signal 156827/199393 (executing program)
2026/01/15 09:27:22 fetching corpus: 3300, signal 157648/200398 (executing program)
2026/01/15 09:27:22 fetching corpus: 3350, signal 158634/201461 (executing program)
2026/01/15 09:27:22 fetching corpus: 3400, signal 159721/202500 (executing program)
2026/01/15 09:27:22 fetching corpus: 3450, signal 160314/203359 (executing program)
2026/01/15 09:27:22 fetching corpus: 3500, signal 161309/204331 (executing program)
2026/01/15 09:27:22 fetching corpus: 3550, signal 162171/205258 (executing program)
2026/01/15 09:27:22 fetching corpus: 3600, signal 162628/206070 (executing program)
2026/01/15 09:27:22 fetching corpus: 3650, signal 163003/206795 (executing program)
2026/01/15 09:27:22 fetching corpus: 3700, signal 163533/207596 (executing program)
2026/01/15 09:27:22 fetching corpus: 3750, signal 164206/208458 (executing program)
2026/01/15 09:27:23 fetching corpus: 3800, signal 164832/209265 (executing program)
2026/01/15 09:27:23 fetching corpus: 3850, signal 165347/210009 (executing program)
2026/01/15 09:27:23 fetching corpus: 3900, signal 166025/210787 (executing program)
2026/01/15 09:27:23 fetching corpus: 3950, signal 166604/211511 (executing program)
2026/01/15 09:27:23 fetching corpus: 4000, signal 167099/212226 (executing program)
2026/01/15 09:27:23 fetching corpus: 4050, signal 167595/212955 (executing program)
2026/01/15 09:27:23 fetching corpus: 4100, signal 168244/213700 (executing program)
2026/01/15 09:27:23 fetching corpus: 4150, signal 168886/214413 (executing program)
2026/01/15 09:27:24 fetching corpus: 4200, signal 169392/215107 (executing program)
2026/01/15 09:27:24 fetching corpus: 4250, signal 170094/215806 (executing program)
2026/01/15 09:27:24 fetching corpus: 4300, signal 170446/216467 (executing program)
2026/01/15 09:27:24 fetching corpus: 4350, signal 170989/217097 (executing program)
2026/01/15 09:27:24 fetching corpus: 4400, signal 171526/217755 (executing program)
2026/01/15 09:27:24 fetching corpus: 4450, signal 172224/218422 (executing program)
2026/01/15 09:27:24 fetching corpus: 4500, signal 172846/219089 (executing program)
2026/01/15 09:27:24 fetching corpus: 4550, signal 173366/219683 (executing program)
2026/01/15 09:27:25 fetching corpus: 4600, signal 173815/220232 (executing program)
2026/01/15 09:27:25 fetching corpus: 4650, signal 174266/220786 (executing program)
2026/01/15 09:27:25 fetching corpus: 4700, signal 174711/221397 (executing program)
2026/01/15 09:27:25 fetching corpus: 4750, signal 175032/221967 (executing program)
2026/01/15 09:27:25 fetching corpus: 4800, signal 175399/222533 (executing program)
2026/01/15 09:27:25 fetching corpus: 4850, signal 175917/223076 (executing program)
2026/01/15 09:27:25 fetching corpus: 4900, signal 176343/223629 (executing program)
2026/01/15 09:27:25 fetching corpus: 4950, signal 178666/224411 (executing program)
2026/01/15 09:27:25 fetching corpus: 5000, signal 179015/224904 (executing program)
2026/01/15 09:27:25 fetching corpus: 5050, signal 179532/225399 (executing program)
2026/01/15 09:27:26 fetching corpus: 5100, signal 180013/225880 (executing program)
2026/01/15 09:27:26 fetching corpus: 5150, signal 180489/226344 (executing program)
2026/01/15 09:27:26 fetching corpus: 5200, signal 181245/226837 (executing program)
2026/01/15 09:27:26 fetching corpus: 5250, signal 181608/227318 (executing program)
2026/01/15 09:27:26 fetching corpus: 5300, signal 182001/227786 (executing program)
2026/01/15 09:27:26 fetching corpus: 5350, signal 182393/228247 (executing program)
2026/01/15 09:27:26 fetching corpus: 5400, signal 182943/228707 (executing program)
2026/01/15 09:27:26 fetching corpus: 5450, signal 183285/229167 (executing program)
2026/01/15 09:27:26 fetching corpus: 5500, signal 183744/229582 (executing program)
2026/01/15 09:27:26 fetching corpus: 5550, signal 184105/230025 (executing program)
2026/01/15 09:27:27 fetching corpus: 5600, signal 184537/230476 (executing program)
2026/01/15 09:27:27 fetching corpus: 5650, signal 184840/230903 (executing program)
2026/01/15 09:27:27 fetching corpus: 5700, signal 185329/231289 (executing program)
2026/01/15 09:27:27 fetching corpus: 5750, signal 185704/231454 (executing program)
2026/01/15 09:27:27 fetching corpus: 5800, signal 186079/231468 (executing program)
2026/01/15 09:27:27 fetching corpus: 5850, signal 186759/231468 (executing program)
2026/01/15 09:27:27 fetching corpus: 5900, signal 187150/231468 (executing program)
2026/01/15 09:27:27 fetching corpus: 5950, signal 187499/231468 (executing program)
2026/01/15 09:27:27 fetching corpus: 6000, signal 187870/231472 (executing program)
2026/01/15 09:27:28 fetching corpus: 6050, signal 188237/231474 (executing program)
2026/01/15 09:27:28 fetching corpus: 6100, signal 188753/231474 (executing program)
2026/01/15 09:27:28 fetching corpus: 6150, signal 189098/231474 (executing program)
2026/01/15 09:27:28 fetching corpus: 6200, signal 189515/231474 (executing program)
2026/01/15 09:27:28 fetching corpus: 6250, signal 189758/231477 (executing program)
2026/01/15 09:27:28 fetching corpus: 6300, signal 190208/231480 (executing program)
2026/01/15 09:27:28 fetching corpus: 6350, signal 190727/231487 (executing program)
2026/01/15 09:27:28 fetching corpus: 6400, signal 191189/231490 (executing program)
2026/01/15 09:27:28 fetching corpus: 6450, signal 191514/231492 (executing program)
2026/01/15 09:27:28 fetching corpus: 6500, signal 191957/231492 (executing program)
2026/01/15 09:27:29 fetching corpus: 6550, signal 192352/231492 (executing program)
2026/01/15 09:27:29 fetching corpus: 6600, signal 192650/231499 (executing program)
2026/01/15 09:27:29 fetching corpus: 6650, signal 193213/231499 (executing program)
2026/01/15 09:27:29 fetching corpus: 6700, signal 193465/231500 (executing program)
2026/01/15 09:27:29 fetching corpus: 6750, signal 193884/231500 (executing program)
2026/01/15 09:27:29 fetching corpus: 6800, signal 194339/231510 (executing program)
2026/01/15 09:27:29 fetching corpus: 6850, signal 194667/231510 (executing program)
2026/01/15 09:27:29 fetching corpus: 6900, signal 195070/231510 (executing program)
2026/01/15 09:27:29 fetching corpus: 6950, signal 195371/231510 (executing program)
2026/01/15 09:27:29 fetching corpus: 7000, signal 195724/231517 (executing program)
2026/01/15 09:27:30 fetching corpus: 7050, signal 195985/231517 (executing program)
2026/01/15 09:27:30 fetching corpus: 7100, signal 196416/231517 (executing program)
2026/01/15 09:27:30 fetching corpus: 7150, signal 196918/231517 (executing program)
2026/01/15 09:27:30 fetching corpus: 7200, signal 197240/231531 (executing program)
2026/01/15 09:27:30 fetching corpus: 7250, signal 197643/231531 (executing program)
2026/01/15 09:27:30 fetching corpus: 7300, signal 198098/231531 (executing program)
2026/01/15 09:27:30 fetching corpus: 7350, signal 198527/231531 (executing program)
2026/01/15 09:27:30 fetching corpus: 7400, signal 198906/231531 (executing program)
2026/01/15 09:27:30 fetching corpus: 7450, signal 199184/231533 (executing program)
2026/01/15 09:27:31 fetching corpus: 7500, signal 199630/231533 (executing program)
2026/01/15 09:27:31 fetching corpus: 7550, signal 199915/231533 (executing program)
2026/01/15 09:27:31 fetching corpus: 7600, signal 200368/231533 (executing program)
2026/01/15 09:27:31 fetching corpus: 7650, signal 200722/231533 (executing program)
2026/01/15 09:27:31 fetching corpus: 7700, signal 201173/231541 (executing program)
2026/01/15 09:27:31 fetching corpus: 7750, signal 201618/231541 (executing program)
2026/01/15 09:27:31 fetching corpus: 7800, signal 201975/231543 (executing program)
2026/01/15 09:27:31 fetching corpus: 7850, signal 202375/231548 (executing program)
2026/01/15 09:27:31 fetching corpus: 7900, signal 202729/231549 (executing program)
2026/01/15 09:27:32 fetching corpus: 7950, signal 203100/231550 (executing program)
2026/01/15 09:27:32 fetching corpus: 8000, signal 203501/231550 (executing program)
2026/01/15 09:27:32 fetching corpus: 8050, signal 203850/231557 (executing program)
2026/01/15 09:27:32 fetching corpus: 8100, signal 204168/231557 (executing program)
2026/01/15 09:27:32 fetching corpus: 8150, signal 204653/231557 (executing program)
2026/01/15 09:27:32 fetching corpus: 8200, signal 204928/231558 (executing program)
2026/01/15 09:27:32 fetching corpus: 8250, signal 205300/231566 (executing program)
2026/01/15 09:27:32 fetching corpus: 8300, signal 205560/231568 (executing program)
2026/01/15 09:27:32 fetching corpus: 8350, signal 205841/231569 (executing program)
2026/01/15 09:27:33 fetching corpus: 8400, signal 206264/231570 (executing program)
2026/01/15 09:27:33 fetching corpus: 8450, signal 206541/231570 (executing program)
2026/01/15 09:27:33 fetching corpus: 8500, signal 206789/231570 (executing program)
2026/01/15 09:27:33 fetching corpus: 8550, signal 207092/231570 (executing program)
2026/01/15 09:27:33 fetching corpus: 8600, signal 207373/231578 (executing program)
2026/01/15 09:27:33 fetching corpus: 8650, signal 207645/231583 (executing program)
2026/01/15 09:27:33 fetching corpus: 8700, signal 207955/231584 (executing program)
2026/01/15 09:27:33 fetching corpus: 8750, signal 208167/231592 (executing program)
2026/01/15 09:27:33 fetching corpus: 8800, signal 208402/231601 (executing program)
2026/01/15 09:27:34 fetching corpus: 8850, signal 208664/231601 (executing program)
2026/01/15 09:27:34 fetching corpus: 8900, signal 208911/231601 (executing program)
2026/01/15 09:27:34 fetching corpus: 8950, signal 209259/231601 (executing program)
2026/01/15 09:27:34 fetching corpus: 9000, signal 209542/231602 (executing program)
2026/01/15 09:27:34 fetching corpus: 9050, signal 209966/231627 (executing program)
2026/01/15 09:27:34 fetching corpus: 9100, signal 210188/231627 (executing program)
2026/01/15 09:27:34 fetching corpus: 9150, signal 210512/231630 (executing program)
2026/01/15 09:27:34 fetching corpus: 9200, signal 210796/231636 (executing program)
2026/01/15 09:27:34 fetching corpus: 9250, signal 211072/231636 (executing program)
2026/01/15 09:27:34 fetching corpus: 9300, signal 211426/231636 (executing program)
2026/01/15 09:27:35 fetching corpus: 9350, signal 211685/231636 (executing program)
2026/01/15 09:27:35 fetching corpus: 9400, signal 211931/231636 (executing program)
2026/01/15 09:27:35 fetching corpus: 9450, signal 212236/231636 (executing program)
2026/01/15 09:27:35 fetching corpus: 9500, signal 212469/231638 (executing program)
2026/01/15 09:27:35 fetching corpus: 9550, signal 212725/231638 (executing program)
2026/01/15 09:27:35 fetching corpus: 9600, signal 213027/231638 (executing program)
2026/01/15 09:27:35 fetching corpus: 9650, signal 213239/231667 (executing program)
2026/01/15 09:27:35 fetching corpus: 9700, signal 213549/231672 (executing program)
2026/01/15 09:27:35 fetching corpus: 9750, signal 213795/231672 (executing program)
2026/01/15 09:27:35 fetching corpus: 9800, signal 214028/231672 (executing program)
2026/01/15 09:27:36 fetching corpus: 9850, signal 214250/231672 (executing program)
2026/01/15 09:27:36 fetching corpus: 9900, signal 214460/231672 (executing program)
2026/01/15 09:27:36 fetching corpus: 9950, signal 214778/231673 (executing program)
2026/01/15 09:27:36 fetching corpus: 10000, signal 215068/231673 (executing program)
2026/01/15 09:27:36 fetching corpus: 10050, signal 215413/231675 (executing program)
2026/01/15 09:27:36 fetching corpus: 10100, signal 215685/231679 (executing program)
2026/01/15 09:27:36 fetching corpus: 10150, signal 215936/231679 (executing program)
2026/01/15 09:27:36 fetching corpus: 10200, signal 216188/231684 (executing program)
2026/01/15 09:27:36 fetching corpus: 10250, signal 216396/231684 (executing program)
2026/01/15 09:27:36 fetching corpus: 10300, signal 216649/231684 (executing program)
2026/01/15 09:27:37 fetching corpus: 10350, signal 216839/231685 (executing program)
2026/01/15 09:27:37 fetching corpus: 10400, signal 217101/231685 (executing program)
2026/01/15 09:27:37 fetching corpus: 10450, signal 217405/231686 (executing program)
2026/01/15 09:27:37 fetching corpus: 10500, signal 217917/231706 (executing program)
2026/01/15 09:27:37 fetching corpus: 10550, signal 218134/231708 (executing program)
2026/01/15 09:27:37 fetching corpus: 10600, signal 218478/231708 (executing program)
2026/01/15 09:27:37 fetching corpus: 10650, signal 218681/231708 (executing program)
2026/01/15 09:27:37 fetching corpus: 10700, signal 218981/231708 (executing program)
2026/01/15 09:27:37 fetching corpus: 10750, signal 219180/231715 (executing program)
2026/01/15 09:27:37 fetching corpus: 10800, signal 219470/231715 (executing program)
2026/01/15 09:27:38 fetching corpus: 10850, signal 219779/231715 (executing program)
2026/01/15 09:27:38 fetching corpus: 10900, signal 219964/231715 (executing program)
2026/01/15 09:27:38 fetching corpus: 10950, signal 220180/231715 (executing program)
2026/01/15 09:27:38 fetching corpus: 11000, signal 220375/231719 (executing program)
2026/01/15 09:27:38 fetching corpus: 11050, signal 220565/231719 (executing program)
2026/01/15 09:27:38 fetching corpus: 11100, signal 220799/231719 (executing program)
2026/01/15 09:27:38 fetching corpus: 11150, signal 221036/231724 (executing program)
2026/01/15 09:27:38 fetching corpus: 11200, signal 221331/231724 (executing program)
2026/01/15 09:27:38 fetching corpus: 11250, signal 221513/231724 (executing program)
2026/01/15 09:27:39 fetching corpus: 11300, signal 221798/231724 (executing program)
2026/01/15 09:27:39 fetching corpus: 11350, signal 221970/231724 (executing program)
2026/01/15 09:27:39 fetching corpus: 11400, signal 222157/231724 (executing program)
2026/01/15 09:27:39 fetching corpus: 11450, signal 222426/231724 (executing program)
2026/01/15 09:27:39 fetching corpus: 11500, signal 222600/231724 (executing program)
2026/01/15 09:27:39 fetching corpus: 11550, signal 222904/231743 (executing program)
2026/01/15 09:27:39 fetching corpus: 11600, signal 223094/231748 (executing program)
2026/01/15 09:27:39 fetching corpus: 11650, signal 223336/231748 (executing program)
2026/01/15 09:27:39 fetching corpus: 11700, signal 223524/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 11750, signal 223765/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 11800, signal 223931/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 11850, signal 224095/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 11900, signal 224331/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 11950, signal 224520/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 12000, signal 224784/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 12050, signal 224983/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 12100, signal 225259/231748 (executing program)
2026/01/15 09:27:40 fetching corpus: 12150, signal 225490/231749 (executing program)
2026/01/15 09:27:41 fetching corpus: 12200, signal 225639/231749 (executing program)
2026/01/15 09:27:41 fetching corpus: 12250, signal 225869/231749 (executing program)
2026/01/15 09:27:41 fetching corpus: 12300, signal 226082/231755 (executing program)
2026/01/15 09:27:41 fetching corpus: 12350, signal 226305/231755 (executing program)
2026/01/15 09:27:41 fetching corpus: 12400, signal 226567/231757 (executing program)
2026/01/15 09:27:41 fetching corpus: 12450, signal 226733/231762 (executing program)
2026/01/15 09:27:41 fetching corpus: 12500, signal 226926/231772 (executing program)
2026/01/15 09:27:41 fetching corpus: 12550, signal 227183/231775 (executing program)
2026/01/15 09:27:41 fetching corpus: 12600, signal 227431/231775 (executing program)
2026/01/15 09:27:41 fetching corpus: 12650, signal 227629/231775 (executing program)
2026/01/15 09:27:41 fetching corpus: 12700, signal 227851/231775 (executing program)
2026/01/15 09:27:42 fetching corpus: 12750, signal 228240/231775 (executing program)
2026/01/15 09:27:42 fetching corpus: 12800, signal 228442/231787 (executing program)
2026/01/15 09:27:42 fetching corpus: 12850, signal 228625/231789 (executing program)
2026/01/15 09:27:42 fetching corpus: 12900, signal 228858/231794 (executing program)
2026/01/15 09:27:42 fetching corpus: 12950, signal 229057/231794 (executing program)
2026/01/15 09:27:42 fetching corpus: 13000, signal 229255/231796 (executing program)
2026/01/15 09:27:42 fetching corpus: 13050, signal 229569/231797 (executing program)
2026/01/15 09:27:42 fetching corpus: 13100, signal 229805/231798 (executing program)
2026/01/15 09:27:42 fetching corpus: 13150, signal 230062/231799 (executing program)
2026/01/15 09:27:42 fetching corpus: 13200, signal 230214/231804 (executing program)
2026/01/15 09:27:43 fetching corpus: 13220, signal 230294/231804 (executing program)
2026/01/15 09:27:43 fetching corpus: 13220, signal 230294/231804 (executing program)
2026/01/15 09:27:44 starting 8 fuzzer processes
09:27:44 executing program 0:
mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x2)

09:27:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e)
fcntl$setstatus(r1, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040))
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5})
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b)
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3)
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:27:44 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x8, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

09:27:44 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x101001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb)

09:27:44 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x410, &(0x7f0000000100)={0x0, 0x3})

[   92.082705] audit: type=1400 audit(1768469264.855:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:27:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x8}})

09:27:44 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

09:27:44 executing program 7:
syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[{'port'}]})

[   93.254668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.260382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.262928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.267472] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.271935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.328331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.331735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.335263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.337605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.338972] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.343543] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   93.348409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.350311] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   93.356231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.368374] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.387416] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   93.397507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   93.402237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   93.405245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   93.407988] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   93.456545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   93.482880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   93.486598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   93.497283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   93.508172] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   93.510776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   93.515436] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   93.517904] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   93.519452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   93.522079] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   93.523722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   93.534089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   93.538632] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   93.544078] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   93.580370] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   93.585345] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   93.588625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   93.589804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   93.592630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   93.629314] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   95.346907] Bluetooth: hci0: command tx timeout
[   95.411622] Bluetooth: hci1: command tx timeout
[   95.411651] Bluetooth: hci2: command tx timeout
[   95.474076] Bluetooth: hci3: command tx timeout
[   95.602856] Bluetooth: hci4: command tx timeout
[   95.603336] Bluetooth: hci5: command tx timeout
[   95.667064] Bluetooth: hci7: command tx timeout
[   95.730087] Bluetooth: hci6: command tx timeout
[   97.394093] Bluetooth: hci0: command tx timeout
[   97.458170] Bluetooth: hci1: command tx timeout
[   97.458220] Bluetooth: hci2: command tx timeout
[   97.523098] Bluetooth: hci3: command tx timeout
[   97.651069] Bluetooth: hci4: command tx timeout
[   97.651165] Bluetooth: hci5: command tx timeout
[   97.714706] Bluetooth: hci7: command tx timeout
[   97.779107] Bluetooth: hci6: command tx timeout
[   99.442100] Bluetooth: hci0: command tx timeout
[   99.506279] Bluetooth: hci2: command tx timeout
[   99.506325] Bluetooth: hci1: command tx timeout
[   99.570139] Bluetooth: hci3: command tx timeout
[   99.698114] Bluetooth: hci4: command tx timeout
[   99.698450] Bluetooth: hci5: command tx timeout
[   99.762100] Bluetooth: hci7: command tx timeout
[   99.826323] Bluetooth: hci6: command tx timeout
[  101.490080] Bluetooth: hci0: command tx timeout
[  101.554120] Bluetooth: hci2: command tx timeout
[  101.555189] Bluetooth: hci1: command tx timeout
[  101.618082] Bluetooth: hci3: command tx timeout
[  101.746930] Bluetooth: hci4: command tx timeout
[  101.747511] Bluetooth: hci5: command tx timeout
[  101.811066] Bluetooth: hci7: command tx timeout
[  101.875048] Bluetooth: hci6: command tx timeout
[  127.313380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.318091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.398956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.399601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.633076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.633849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.715480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.716261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.897279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.897911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.002357] audit: type=1400 audit(1768469300.775:8): avc:  denied  { open } for  pid=3815 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  128.017187] audit: type=1400 audit(1768469300.775:9): avc:  denied  { kernel } for  pid=3815 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  128.058527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.060181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.069684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.070918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.077766] audit: type=1400 audit(1768469300.849:10): avc:  denied  { write } for  pid=3818 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
09:28:20 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0))

[  128.087933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.088624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.178359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.178998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:28:20 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

09:28:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e)
fcntl$setstatus(r1, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040))
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5})
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b)
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3)
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  128.355991] nfs4: Bad value for 'port'
[  128.359636] nfs4: Bad value for 'port'
09:28:21 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0xffff, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)

[  128.393960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.394699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:28:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

[  128.433716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.434395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:28:21 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

09:28:21 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e)
fcntl$setstatus(r1, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040))
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5})
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b)
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3)
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:28:21 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

[  128.542350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.542950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.142378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.143001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.192057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.192684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.317175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.317805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.324635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.325309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
09:28:22 executing program 0:
syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)
r1 = io_uring_setup(0x222f, &(0x7f0000000a00)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000a80), 0x1)

09:28:22 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

09:28:22 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00')
pread64(r0, &(0x7f0000000040)=""/156, 0x9c, 0x0)

09:28:22 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

09:28:22 executing program 3:
r0 = fsopen(&(0x7f0000000000)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='mand\x00', 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)

09:28:22 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
r2 = fork()
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:28:22 executing program 1:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e)
fcntl$setstatus(r1, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040))
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x0, 0x80, 0x0, 0x5})
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8b)
lstat(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440))
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa3, 0x27888, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_config_ext={0x10000, 0x7}, 0xa401, 0x4, 0x5, 0x6, 0x101, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0x3)
io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x200, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}])
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001500)=ANY=[@ANYBLOB="0100000001000000180000004ae25d64f35be56587157f06834bf1e273e946cc0ed3fcef404929ae2800e9cdd2968df9f69e0d620708b434b174eb3f81dca2b1451758d64ff9b4a59adc78df85429018b9bf8c36", @ANYRES32, @ANYBLOB="0d0000000000cc1ba2f230000000009ab43ee99efb56f11f00e643cf0082046b34a254b153eba553f12fc091c4b7955e5d746be02d561e6e28ae2a0dd6772126556463670ee47a43602ec2455f3454280200f0576800000000"])
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000014c0)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:28:22 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000001100)={"03bdca493e77bb1945402d1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  129.469603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3927 comm=syz-executor.0
[  129.477869] =======================================================
[  129.477869] WARNING: The mand mount option has been deprecated and
[  129.477869]          and is ignored by this kernel. Remove the mand
[  129.477869]          option from the mount to silence this warning.
[  129.477869] =======================================================
09:28:22 executing program 4:
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x66)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x14)

09:28:22 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_script(r0, 0x0, 0x144)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@flushpolicy={0x18, 0x12, 0xe01, 0x0, 0x0, "", [@proto={0x5}]}, 0x18}}, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x80, @none}}}, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000001240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0xbb, 0xe}, {0x6, 0x401, 0x5, 0x0, [0xfd36, 0x20, 0x826b]}}}}, 0x1b)

09:28:22 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2000000}])

09:28:23 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_script(r0, 0x0, 0x144)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@flushpolicy={0x18, 0x12, 0xe01, 0x0, 0x0, "", [@proto={0x5}]}, 0x18}}, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x80, @none}}}, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000001240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0xbb, 0xe}, {0x6, 0x401, 0x5, 0x0, [0xfd36, 0x20, 0x826b]}}}}, 0x1b)

09:28:23 executing program 7:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x13, 0x0, "fbe4c38fab9581c35914da678464e30e7b94913fcc961721ebef9195a339256e176a8a7369aea56f32cb8e41049c555c8a6fad19a9a551e70a4d64a88d249735ca34d3f4ad120552d0448eed2f9701d2"}, 0xd8)
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
dup3(r1, r0, 0x0)

09:28:23 executing program 0:
syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)
r1 = io_uring_setup(0x222f, &(0x7f0000000a00)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000a80), 0x1)

09:28:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x12f1)
getpid()
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

09:28:23 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001500)={@private2}, 0x14)

09:28:23 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000001100)={"03bdca493e77bb1945402d1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:23 executing program 2:
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setresuid(0x0, r0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x19, 0x0, 0x0)

09:28:23 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
r2 = fork()
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

[  130.499398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3970 comm=syz-executor.0
09:28:23 executing program 2:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000240)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2821, 0x0)

09:28:24 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)={0x18, 0x15, 0x1, 0x0, 0x0, "", [@generic="02fb92b16c"]}, 0x18}], 0x1}, 0x0)

09:28:24 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

09:28:24 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_script(r0, 0x0, 0x144)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@flushpolicy={0x18, 0x12, 0xe01, 0x0, 0x0, "", [@proto={0x5}]}, 0x18}}, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x80, @none}}}, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000001240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0xbb, 0xe}, {0x6, 0x401, 0x5, 0x0, [0xfd36, 0x20, 0x826b]}}}}, 0x1b)

09:28:24 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
r2 = fork()
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:28:24 executing program 0:
syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)
r1 = io_uring_setup(0x222f, &(0x7f0000000a00)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000a80), 0x1)

09:28:24 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000001100)={"03bdca493e77bb1945402d1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

09:28:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[  131.502226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3995 comm=syz-executor.0
09:28:24 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
write$binfmt_script(r0, 0x0, 0x144)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@flushpolicy={0x18, 0x12, 0xe01, 0x0, 0x0, "", [@proto={0x5}]}, 0x18}}, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x80, @none}}}, 0xa)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000001240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_conn_req={{0x17, 0xbb, 0xe}, {0x6, 0x401, 0x5, 0x0, [0xfd36, 0x20, 0x826b]}}}}, 0x1b)

09:28:24 executing program 0:
syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)
r1 = io_uring_setup(0x222f, &(0x7f0000000a00)={0x0, 0x0, 0x2})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000a80), 0x1)

09:28:24 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x1002000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:24 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ptrace(0x10, 0x0)
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
ioctl$CDROM_SEND_PACKET(r0, 0x2201, &(0x7f0000001100)={"03bdca493e77bb1945402d1c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

09:28:24 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:24 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

[  131.918198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4019 comm=syz-executor.0
09:28:24 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

09:28:24 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x1002000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:24 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:25 executing program 7:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x20, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)

09:28:25 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x1002000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:25 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @random="d8f4d14d8f2d"}, 0x80, 0x0, 0x0, 0x0, 0x3d0}, 0x0, 0x8000000, 0x1}, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000002940)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x401)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4)

09:28:25 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

09:28:25 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
r2 = fork()
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

09:28:25 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_script(r0, 0x0, 0x101e)

09:28:25 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]})

09:28:25 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000880)={<r0=>0xffffffffffffffff})
fcntl$setstatus(r0, 0x407, 0x1002000)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:25 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe6, 0x8, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xee0c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
r1 = fork()
ptrace(0x10, r1)
waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x3c}, &(0x7f00000006c0)=""/241, 0xf1, &(0x7f0000000400)=""/158, &(0x7f0000000680)=[r1, r0, r1, r1, r1, r1, r0, r0], 0x8}, 0x58)
r2 = getpid()
pidfd_open(r2, 0x0)
r3 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0xffffffffffffffff)
ptrace$poke(0x1, r1, &(0x7f0000000100), 0x1400000)

[  132.692709] audit: type=1326 audit(1768469305.444:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4051 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee3b84b19 code=0x0
09:28:25 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sync()

[  132.723863] 
[  132.724078] =====================================
[  132.724587] WARNING: bad unlock balance detected!
[  132.725095] 6.19.0-rc5-next-20260115 #1 Not tainted
[  132.725618] -------------------------------------
[  132.726120] syz-executor.4/287 is trying to release lock (rcu_read_lock) at:
[  132.728112] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  132.729539] but there are no more locks to release!
[  132.730667] 
[  132.730667] other info that might help us debug this:
[  132.732586] 4 locks held by syz-executor.4/287:
[  132.733650]  #0: ffff88800f9f63f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  132.735654]  #1: ffff88801c123388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  132.736720]  #2: ffff88800f9e2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  132.737661]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  132.738645] 
[  132.738645] stack backtrace:
[  132.739113] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  132.739132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  132.739141] Call Trace:
[  132.739146]  <TASK>
[  132.739152]  dump_stack_lvl+0xca/0x120
[  132.739182]  ? __wait_on_freeing_inode+0x105/0x350
[  132.739202]  print_unlock_imbalance_bug+0x118/0x130
[  132.739221]  ? __wait_on_freeing_inode+0x105/0x350
[  132.739240]  lock_release+0x1ee/0x270
[  132.739260]  __wait_on_freeing_inode+0x10a/0x350
[  132.739279]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  132.739300]  ? __pfx_var_wake_function+0x10/0x10
[  132.739323]  ? lock_is_held_type+0x9e/0x120
[  132.739338]  insert_inode_locked+0x25f/0x890
[  132.739361]  __ext4_new_inode+0x223d/0x4cd0
[  132.739383]  ? __pfx___ext4_new_inode+0x10/0x10
[  132.739402]  ? __pfx_avc_has_perm+0x10/0x10
[  132.739420]  ? __pfx___dquot_initialize+0x10/0x10
[  132.739446]  ext4_mkdir+0x331/0xb30
[  132.739470]  ? __pfx_ext4_mkdir+0x10/0x10
[  132.739491]  ? security_inode_permission+0x72/0xe0
[  132.739508]  vfs_mkdir+0x6d8/0xc00
[  132.739529]  filename_mkdirat+0x118/0x430
[  132.739547]  ? __pfx_filename_mkdirat+0x10/0x10
[  132.739564]  ? strncpy_from_user+0x21b/0x2f0
[  132.739586]  __x64_sys_mkdir+0x6e/0xd0
[  132.739602]  do_syscall_64+0xbf/0x420
[  132.739619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.739635] RIP: 0033:0x7f3b8e59fc27
[  132.739647] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  132.739662] RSP: 002b:00007ffea7695bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[  132.739676] RAX: ffffffffffffffda RBX: 00007ffea7695c40 RCX: 00007f3b8e59fc27
[  132.739686] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffea7695c40
[  132.739696] RBP: 00007ffea7695c1c R08: 0000000000000000 R09: 0000000000000003
[  132.739705] R10: 00007ffea7695957 R11: 0000000000000206 R12: 0000000000000032
[  132.739715] R13: 0000000000020590 R14: 0000000000000002 R15: 00007ffea7695c80
[  132.739729]  </TASK>
[  132.759747] ------------[ cut here ]------------
[  132.760291] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/287
[  132.761456] Modules linked in:
[  132.761830] CPU: 1 UID: 0 PID: 287 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) 
[  132.762888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  132.763770] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  132.764424] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  132.766313] RSP: 0018:ffff88801bd779e0 EFLAGS: 00010286
[  132.766857] RAX: 00000000ffffffff RBX: ffff888016629b80 RCX: ffffffff815660f7
[  132.767633] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888016629f7c
[  132.768405] RBP: ffff888016629b80 R08: 0000000000000000 R09: fffffbfff0ba7040
[  132.769313] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016629b80
[  132.770101] R13: 0000000000000001 R14: ffffffff85c0ea00 R15: ffff88801c3c4f58
[  132.770844] FS:  000055556421f400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  132.771725] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.772382] CR2: 0000555573994c58 CR3: 000000000cebc000 CR4: 0000000000350ef0
[  132.773169] Call Trace:
[  132.773478]  <TASK>
[  132.777773]  __wait_on_freeing_inode+0x10f/0x350
[  132.778858]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  132.780339]  ? __pfx_var_wake_function+0x10/0x10
[  132.781939]  ? lock_is_held_type+0x9e/0x120
[  132.783460]  insert_inode_locked+0x25f/0x890
[  132.785683]  __ext4_new_inode+0x223d/0x4cd0
[  132.788992]  ? __pfx___ext4_new_inode+0x10/0x10
[  132.790284]  ? __pfx_avc_has_perm+0x10/0x10
[  132.791133]  ? __pfx___dquot_initialize+0x10/0x10
[  132.793977]  ext4_mkdir+0x331/0xb30
[  132.796599]  ? __pfx_ext4_mkdir+0x10/0x10
[  132.797434]  ? security_inode_permission+0x72/0xe0
[  132.799640]  vfs_mkdir+0x6d8/0xc00
[  132.801509]  filename_mkdirat+0x118/0x430
[  132.802824]  ? __pfx_filename_mkdirat+0x10/0x10
[  132.803821]  ? strncpy_from_user+0x21b/0x2f0
[  132.806346]  __x64_sys_mkdir+0x6e/0xd0
[  132.807164]  do_syscall_64+0xbf/0x420
[  132.808202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.808840] RIP: 0033:0x7f3b8e59fc27
[  132.809359] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  132.811230] RSP: 002b:00007ffea7695bb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[  132.811989] RAX: ffffffffffffffda RBX: 00007ffea7695c40 RCX: 00007f3b8e59fc27
[  132.812746] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffea7695c40
[  132.813504] RBP: 00007ffea7695c1c R08: 0000000000000000 R09: 0000000000000003
[  132.814275] R10: 00007ffea7695957 R11: 0000000000000206 R12: 0000000000000032
[  132.814979] R13: 0000000000020590 R14: 0000000000000002 R15: 00007ffea7695c80
[  132.818507]  </TASK>
[  132.818752] irq event stamp: 198975
[  132.819164] hardirqs last  enabled at (198975): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  132.820260] hardirqs last disabled at (198974): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  132.821308] softirqs last  enabled at (198970): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  132.822304] softirqs last disabled at (198968): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  132.823357] ---[ end trace 0000000000000000 ]---
09:28:25 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:25 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup3(r0, r1, 0x0)
recvmmsg$unix(r0, &(0x7f0000001700)=[{{0x0, 0xfffffffffffffe1c, 0x0, 0x0, 0x0, 0x57}}], 0x572, 0x0, 0x0)

09:28:25 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @random="d8f4d14d8f2d"}, 0x80, 0x0, 0x0, 0x0, 0x3d0}, 0x0, 0x8000000, 0x1}, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000002940)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x401)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4)

09:28:26 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00')
pread64(r0, &(0x7f0000000100)=""/196, 0xc4, 0x300)

09:28:26 executing program 3:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)

09:28:26 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r1 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000)
shmdt(r1)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff7000/0x3000)=nil)

09:28:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @random="d8f4d14d8f2d"}, 0x80, 0x0, 0x0, 0x0, 0x3d0}, 0x0, 0x8000000, 0x1}, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000002940)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x401)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4)

09:28:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2286, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:26 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe6, 0x8, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xee0c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
r1 = fork()
ptrace(0x10, r1)
waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x3c}, &(0x7f00000006c0)=""/241, 0xf1, &(0x7f0000000400)=""/158, &(0x7f0000000680)=[r1, r0, r1, r1, r1, r1, r0, r0], 0x8}, 0x58)
r2 = getpid()
pidfd_open(r2, 0x0)
r3 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0xffffffffffffffff)
ptrace$poke(0x1, r1, &(0x7f0000000100), 0x1400000)

09:28:26 executing program 1:
recvmsg$unix(0xffffffffffffffff, 0x0, 0x80010180)

09:28:26 executing program 5:
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1005841, 0x0)
syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x84000, &(0x7f0000000140))
mount$9p_unix(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x40000, 0x0)

[  133.353062] audit: type=1326 audit(1768469306.116:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4078 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff248b19 code=0x0
09:28:26 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x30a4, &(0x7f0000000300)={0x0, 0x0, 0x6}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0))

09:28:26 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)

09:28:26 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)

09:28:26 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1ffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r2, 0x0, r0, 0x0, 0x1ffff, 0x0)

09:28:26 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2286, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:26 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x0, 0x6, @random="d8f4d14d8f2d"}, 0x80, 0x0, 0x0, 0x0, 0x3d0}, 0x0, 0x8000000, 0x1}, 0x6)
syz_io_uring_submit(r1, 0x0, &(0x7f0000002940)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x401)
socket$packet(0x11, 0x3, 0x300)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x49, &(0x7f0000000080)=0x68bbd9b0592ebacf, 0x4)

[  134.175486] audit: type=1326 audit(1768469306.947:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4078 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0ff248b19 code=0x0
09:28:27 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f00000001c0)={0x0, 0x0, 0x41, 0x8, 0x0, r0, 0x0}])

09:28:27 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2286, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)

09:28:27 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1ffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r2, 0x0, r0, 0x0, 0x1ffff, 0x0)

09:28:27 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:28:27 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)

09:28:27 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x60e2, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'})
read(r0, &(0x7f00000001c0)=""/251, 0xfb)
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e605a8", 0xe, 0x0, 0x0, 0x0)

09:28:27 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe6, 0x8, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xee0c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
r1 = fork()
ptrace(0x10, r1)
waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x3c}, &(0x7f00000006c0)=""/241, 0xf1, &(0x7f0000000400)=""/158, &(0x7f0000000680)=[r1, r0, r1, r1, r1, r1, r0, r0], 0x8}, 0x58)
r2 = getpid()
pidfd_open(r2, 0x0)
r3 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0xffffffffffffffff)
ptrace$poke(0x1, r1, &(0x7f0000000100), 0x1400000)

09:28:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)

09:28:27 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:27 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)

09:28:27 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
ioctl$SG_IO(r1, 0x2286, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:27 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000840)={'\x00', 0x0, 0xe5e4, 0x1})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)

09:28:27 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:28:27 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:27 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40)
sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0)

09:28:27 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe6, 0x8, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0xee0c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fork()
r1 = fork()
ptrace(0x10, r1)
waitid(0x0, r1, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000500)={0x1100, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), {0x3c}, &(0x7f00000006c0)=""/241, 0xf1, &(0x7f0000000400)=""/158, &(0x7f0000000680)=[r1, r0, r1, r1, r1, r1, r0, r0], 0x8}, 0x58)
r2 = getpid()
pidfd_open(r2, 0x0)
r3 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0xffffffffffffffff)
ptrace$poke(0x1, r1, &(0x7f0000000100), 0x1400000)

09:28:27 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:28 executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)

09:28:28 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x60e2, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'})
read(r0, &(0x7f00000001c0)=""/251, 0xfb)
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e605a8", 0xe, 0x0, 0x0, 0x0)

09:28:28 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

09:28:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1ffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r2, 0x0, r0, 0x0, 0x1ffff, 0x0)

09:28:28 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:28 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0))

09:28:28 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:28 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0)
close(r0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00')
dup2(r0, r1)

09:28:28 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:28 executing program 4:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x41, 0x0, 0x0)

09:28:28 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x40081271, 0x0)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:28 executing program 2:
r0 = socket$unix(0x1, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

09:28:28 executing program 7:
r0 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xffffffff, 0x200041)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$bt_hci(r0, 0x0, 0x0)

09:28:28 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x20, r2, 0xb267, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}}, 0x0)

09:28:28 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r0, &(0x7f00000000c0)="d0", 0x1, 0x11de60)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

[  135.532984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
09:28:28 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0))

[  135.544698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:28:28 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc)

09:28:28 executing program 2:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080), 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0), 0x2)

09:28:28 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
splice(r1, 0x0, r0, 0x0, 0x1ffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
splice(r2, 0x0, r0, 0x0, 0x1ffff, 0x0)

09:28:28 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x60e2, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'})
read(r0, &(0x7f00000001c0)=""/251, 0xfb)
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e605a8", 0xe, 0x0, 0x0, 0x0)

09:28:28 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)

09:28:28 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000840)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)

09:28:28 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0))

09:28:28 executing program 0:
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @source_quench={0x2a, 0xc, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private}}}}}}, 0x0)

09:28:28 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x40081271, 0x0)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  136.285633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.294867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:28:29 executing program 2:
getxattr(0x0, 0x0, 0x0, 0x0)

09:28:29 executing program 0:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = dup(r0)
connect$bt_l2cap(r1, &(0x7f0000000080), 0xe)

09:28:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x3, 0x8040)

09:28:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@journal_path={'journal_path', 0x2c, './file0'}}]})

09:28:29 executing program 7:
r0 = syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00')
lchown(&(0x7f0000000080)='./file0/file0\x00', 0xee01, 0x0)
mount$9p_fd(0x0, &(0x7f0000000bc0)='./file0/file0\x00', 0x0, 0x0, 0x0)

09:28:29 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0))

[  136.439374] journal_path: not usable as path
[  136.441132] tmpfs: Unknown parameter './file0/file0'
[  136.443451] EXT4-fs: error: could not find journal device path
[  136.447960] journal_path: not usable as path
[  136.449813] EXT4-fs: error: could not find journal device path
09:28:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x3, 0x8040)

09:28:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
ptrace(0x8, r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x5fe)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)

09:28:29 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x60e2, 0x4)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'})
read(r0, &(0x7f00000001c0)=""/251, 0xfb)
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e605a8", 0xe, 0x0, 0x0, 0x0)

09:28:29 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

09:28:29 executing program 2:
syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@journal_path={'journal_path', 0x2c, './file0'}}]})

09:28:29 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x3, 0x8040)

09:28:29 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)

09:28:29 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x40081271, 0x0)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:29 executing program 5:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}}, 0x0)

[  137.180652] journal_path: not usable as path
[  137.182965] loop6: detected capacity change from 0 to 6
[  137.187100] EXT4-fs: error: could not find journal device path
[  137.199181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.199248] FAT-fs (loop6): Directory bread(block 6) failed
[  137.213896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:28:30 executing program 2:
syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@journal_path={'journal_path', 0x2c, './file0'}}]})

09:28:30 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:30 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)

09:28:30 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x3, 0x8040)

09:28:30 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

09:28:30 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)

[  137.331168] journal_path: not usable as path
[  137.331911] EXT4-fs: error: could not find journal device path
[  137.391971] loop6: detected capacity change from 0 to 6
09:28:30 executing program 2:
syz_mount_image$ext4(&(0x7f0000000600)='ext3\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={[{@journal_path={'journal_path', 0x2c, './file0'}}]})

[  137.405323] FAT-fs (loop6): Directory bread(block 6) failed
[  137.451442] journal_path: not usable as path
[  137.471921] EXT4-fs: error: could not find journal device path
[  138.185805] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  138.187767] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  138.190644] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  138.195400] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  138.197422] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  138.200756] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  138.209954] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  138.212242] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  138.214433] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  138.217252] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  138.219950] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  138.222967] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  138.226885] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  138.227911] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  138.230584] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  138.234547] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  138.235584] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  138.239303] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  138.243495] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  138.247155] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  138.249308] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  138.254016] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  138.256362] Bluetooth: hci7: Opcode 0x0406 failed: -4
[  138.259840] Bluetooth: hci7: Opcode 0x0406 failed: -4
09:28:31 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)

09:28:31 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x0)
syz_open_dev$usbmon(&(0x7f0000000300), 0x10000, 0x0)
r0 = mq_open(0x0, 0x0, 0x0, &(0x7f0000001a00)={0xffffffff, 0x0, 0x6, 0x5})
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mincore(&(0x7f000053f000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/44)

09:28:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108)

09:28:31 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 1:
r0 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140))
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x40081271, 0x0)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000d40)=ANY=[], 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

09:28:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

[  138.337004] loop6: detected capacity change from 0 to 6
[  138.349170] FAT-fs (loop6): Directory bread(block 6) failed
[  138.366172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.372177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
09:28:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108)

09:28:31 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

09:28:31 executing program 7:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10)

[  138.495694] loop6: detected capacity change from 0 to 6
09:28:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

[  138.516366] FAT-fs (loop6): Directory bread(block 6) failed
09:28:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108)

09:28:31 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x0)
syz_open_dev$usbmon(&(0x7f0000000300), 0x10000, 0x0)
r0 = mq_open(0x0, 0x0, 0x0, &(0x7f0000001a00)={0xffffffff, 0x0, 0x6, 0x5})
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mincore(&(0x7f000053f000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/44)

09:28:31 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001880)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x196}]]}, 0x2c}}, 0x0)

09:28:31 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000007fc0)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108)

09:28:31 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x81)

09:28:31 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x0)
syz_open_dev$usbmon(&(0x7f0000000300), 0x10000, 0x0)
r0 = mq_open(0x0, 0x0, 0x0, &(0x7f0000001a00)={0xffffffff, 0x0, 0x6, 0x5})
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mincore(&(0x7f000053f000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/44)

09:28:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r0, 0x0, 0x0)

09:28:31 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="edbc08196769616e5ec353cafc477b3496e78e8dac8e8cd1ac4b02706fbb057b22", 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:31 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r0, 0x0, 0x0)

09:28:31 executing program 0:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
eventfd(0x0)
syz_open_dev$usbmon(&(0x7f0000000300), 0x10000, 0x0)
r0 = mq_open(0x0, 0x0, 0x0, &(0x7f0000001a00)={0xffffffff, 0x0, 0x6, 0x5})
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x5000, 0x1800, &(0x7f0000ffb000/0x5000)=nil)
shmat(r1, &(0x7f0000400000/0xc00000)=nil, 0x5000)
mincore(&(0x7f000053f000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/44)

09:28:31 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)

09:28:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0))
dup2(0xffffffffffffffff, 0xffffffffffffffff)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:28:31 executing program 1:
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff81000000, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:28:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r0, 0x0, 0x0)

09:28:31 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="edbc08196769616e5ec353cafc477b3496e78e8dac8e8cd1ac4b02706fbb057b22", 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockname(r0, 0x0, 0x0)

09:28:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)

09:28:31 executing program 0:
clock_gettime(0x0, &(0x7f0000000000))
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r0, 0x227b, &(0x7f0000000000))
read(r0, &(0x7f0000000040)=""/192, 0xc0)

09:28:31 executing program 1:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000040)={0x20000})

09:28:32 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
syncfs(r0)

09:28:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)

[  139.379184] Bluetooth: hci0: command 0x0c1a tx timeout
09:28:32 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

09:28:32 executing program 6:
syz_genetlink_get_family_id$batadv(&(0x7f0000001300), 0xffffffffffffffff)

09:28:32 executing program 4:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000380)=@chain)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0)

09:28:32 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:28:32 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0)

09:28:32 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="edbc08196769616e5ec353cafc477b3496e78e8dac8e8cd1ac4b02706fbb057b22", 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x30, 0x0, &(0x7f0000000040)=0x1b00)

09:28:32 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff)
fork()

09:28:32 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

09:28:32 executing program 4:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000380)=@chain)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0)

[  140.157706] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  140.159149] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  140.172234] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  140.173459] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00
[  140.181563] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 3 prio class 2
[  140.183350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.201097] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.211059] Bluetooth: hci1: command 0x0c1a tx timeout
[  140.219556] Buffer I/O error on dev sr0, logical block 0, async page read
[  140.220720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.233157] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.237299] Buffer I/O error on dev sr0, logical block 1, async page read
[  140.240957] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.248793] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.254728] Buffer I/O error on dev sr0, logical block 2, async page read
[  140.257111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.257913] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.261842] Buffer I/O error on dev sr0, logical block 3, async page read
[  140.264177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.264980] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.273142] Buffer I/O error on dev sr0, logical block 4, async page read
[  140.274260] Bluetooth: hci7: command 0x0c1a tx timeout
[  140.275084] Bluetooth: hci6: command 0x0c1a tx timeout
[  140.275881] Bluetooth: hci5: command 0x0c1a tx timeout
[  140.276720] Bluetooth: hci4: command 0x0c1a tx timeout
[  140.277524] Bluetooth: hci3: command 0x0c1a tx timeout
[  140.278382] Bluetooth: hci2: command 0x0c1a tx timeout
[  140.279573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.280600] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.284408] Buffer I/O error on dev sr0, logical block 5, async page read
[  140.285536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.286931] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.291312] Buffer I/O error on dev sr0, logical block 6, async page read
[  140.292449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.294456] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.295762] Buffer I/O error on dev sr0, logical block 7, async page read
[  140.299237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.300099] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  140.301527] Buffer I/O error on dev sr0, logical block 0, async page read
[  140.303811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.304658] Buffer I/O error on dev sr0, logical block 1, async page read
[  140.308058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.308923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.312117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.312981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.315060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.315937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.351318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.358348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.359321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.368152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.373090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.373972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.376607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.379170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.380132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.380993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.383384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.386184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.389187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.390131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.391021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.394278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.397233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.398286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.399769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.404349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.407537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.408462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.410810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  140.413156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:28:33 executing program 1:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0xf9ffffff}, 0x0)

09:28:33 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x21, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="edbc08196769616e5ec353cafc477b3496e78e8dac8e8cd1ac4b02706fbb057b22", 0x0, 0x0, 0x0, 0x0, 0x0})

09:28:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:28:33 executing program 4:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000380)=@chain)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0)

09:28:33 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0xa, &(0x7f00000004c0), 0x4)

09:28:33 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r1, 0x0)

09:28:33 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

09:28:33 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff)
fork()

09:28:33 executing program 4:
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000380)=@chain)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r1, 0x0)

09:28:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:28:33 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}], 0x0, &(0x7f0000014100))

09:28:33 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

09:28:33 executing program 7:
getpriority(0x0, 0xffffffffffffffff)

[  140.688537] loop1: detected capacity change from 0 to 4
09:28:33 executing program 3:
syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0x20882)
syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x24800)

[  140.715375] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks)
09:28:33 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

09:28:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x2321, &(0x7f0000002300)={0x0, 0x0, 0x2})
io_uring_enter(r0, 0x0, 0x0, 0x2, 0x0, 0x0)

[  140.739100] loop1: detected capacity change from 0 to 4
[  140.741846] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks)
09:28:33 executing program 0:
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/152, 0x98, 0x20000000000)

09:28:33 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r1, 0x0)

09:28:33 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}}, 0x0)

09:28:33 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x42, 0x4)

09:28:33 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff)
fork()

[  141.011694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.017189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.018013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.018996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.025240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.028147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.028964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.036296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.037309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.039154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.039974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.053254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.056151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.056966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.060315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.061180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.083485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.084679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.085545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.087761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.090354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.091208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.091996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.095185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:28:33 executing program 7:
getpriority(0x0, 0xffffffffffffffff)

09:28:33 executing program 2:
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setuid(r0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r1, 0x89e0, 0x0)

09:28:33 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r1, 0x0)

09:28:33 executing program 4:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "000000000000200020027bc378dc2b7a02005efeeeff3f00", "0000000057252c9a51770000000000000000000000000000000000000000000800"}}}}}}, 0x0)

09:28:33 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}}, 0x0)

09:28:33 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140))

09:28:33 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2d, &(0x7f0000000080)=0x480, 0x4)

09:28:33 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
syz_io_uring_submit(r1, 0x0, 0x0, 0xffffffff)
fork()

[  141.230899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.231636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.235884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.236000] sit: Dst spoofed 0.0.0.0/2002::2000 -> 0.0.0.0/2002:7bc3:78dc:2b7a:200:5efe:238.255.63.0
[  141.238164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.238856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.238927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.238996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:28:34 executing program 7:
getpriority(0x0, 0xffffffffffffffff)

[  141.239660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:28:34 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0xffffffffffffffff)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, r1, 0x0)

09:28:34 executing program 2:
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dummy0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)

[  141.239821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.239885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:28:34 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}}, 0x0)

[  141.239950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.240013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.247215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.247327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.247426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[  141.247530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
09:28:34 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120366", 0x67, 0x400}], 0x0, &(0x7f0000014100))

[  141.249561] sit: Dst spoofed 0.0.0.0/2002::2000 -> 0.0.0.0/2002:7bc3:78dc:2b7a:200:5efe:238.255.63.0
09:28:34 executing program 4:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "000000000000200020027bc378dc2b7a02005efeeeff3f00", "0000000057252c9a51770000000000000000000000000000000000000000000800"}}}}}}, 0x0)

[  141.362050] perf: interrupt took too long (3241 > 3155), lowering kernel.perf_event_max_sample_rate to 61000
[  141.364275] perf: interrupt took too long (5149 > 5096), lowering kernel.perf_event_max_sample_rate to 38000
[  141.399100] perf: interrupt took too long (6476 > 6436), lowering kernel.perf_event_max_sample_rate to 30000
[  141.408902] loop0: detected capacity change from 0 to 4
[  141.410931] perf: interrupt took too long (8108 > 8095), lowering kernel.perf_event_max_sample_rate to 24000
[  141.420151] sit: Dst spoofed 0.0.0.0/2002::2000 -> 0.0.0.0/2002:7bc3:78dc:2b7a:200:5efe:238.255.63.0
[  141.422776] perf: interrupt took too long (10156 > 10135), lowering kernel.perf_event_max_sample_rate to 19000
[  141.425814] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (660000)
[  141.427220] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.434716] loop0: detected capacity change from 0 to 4
[  141.441515] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (660000)
[  141.445824] perf: interrupt took too long (12702 > 12695), lowering kernel.perf_event_max_sample_rate to 15000
09:28:34 executing program 2:
syz_mount_image$vfat(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]})

09:28:34 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

09:28:34 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x20, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x20}}, 0x0)

09:28:34 executing program 4:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "000000000000200020027bc378dc2b7a02005efeeeff3f00", "0000000057252c9a51770000000000000000000000000000000000000000000800"}}}}}}, 0x0)

09:28:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

09:28:34 executing program 7:
getpriority(0x0, 0xffffffffffffffff)

09:28:34 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140))

[  141.605841] No source specified
[  141.612539] No source specified
[  141.617166] sit: Dst spoofed 0.0.0.0/2002::2000 -> 0.0.0.0/2002:7bc3:78dc:2b7a:200:5efe:238.255.63.0
09:28:34 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

09:28:34 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140))

09:28:34 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000940)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x2}])

09:28:34 executing program 7:
mq_open(&(0x7f0000001bc0)='-}^\xee.\x00', 0x40, 0x0, &(0x7f0000001c00)={0x0, 0x9, 0xffffffffffffffff, 0x1})
openat$nvram(0xffffffffffffff9c, &(0x7f00000063c0), 0x40, 0x0)

09:28:34 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utime(0x0, 0xfffffffffffffffd)

09:28:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

09:28:34 executing program 4:
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x220, 0x0, "000000000000200020027bc378dc2b7a02005efeeeff3f00", "0000000057252c9a51770000000000000000000000000000000000000000000800"}}}}}}, 0x0)

09:28:34 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

09:28:34 executing program 7:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)

09:28:34 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000140))

[  141.765181] sit: Dst spoofed 0.0.0.0/2002::2000 -> 0.0.0.0/2002:7bc3:78dc:2b7a:200:5efe:238.255.63.0
09:28:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0)

09:28:34 executing program 3:
write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff9648613cf5ad74457b1ff00000000645f0ae3094e59e50bfee32de576970308a41f0dd6c2cf47288f8895dca6e8681f1f7d4666d7035828c4690bca329e"], 0x52)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netdevsim0\x00'})
ioctl$TUNSETTXFILTER(r0, 0x800454d2, &(0x7f0000000140))

09:28:34 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utime(0x0, 0xfffffffffffffffd)

09:28:34 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

09:28:34 executing program 4:
r0 = socket$unix(0x1, 0x5, 0x0)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)

09:28:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00')
pread64(r0, &(0x7f0000000080)=""/203, 0xcb, 0x0)

09:28:34 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x20, r1, 0xb341daa0822653b3, 0x0, 0x0, {0x19}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

09:28:34 executing program 7:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x8000)
fcntl$setstatus(r0, 0x4, 0x44000)
sendfile(r0, r1, 0x0, 0xfdef)

09:28:34 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
utime(0x0, 0xfffffffffffffffd)

09:28:34 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[  142.147980] audit: type=1326 audit(1768469314.920:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4525 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b8e5a0b19 code=0x0
[  142.258090] Bluetooth: hci1: command 0x0c1a tx timeout
[  142.323499] Bluetooth: hci2: command 0x0c1a tx timeout
[  142.323997] Bluetooth: hci3: command 0x0c1a tx timeout
[  142.324497] Bluetooth: hci4: command 0x0c1a tx timeout
[  142.324956] Bluetooth: hci5: command 0x0c1a tx timeout
[  142.325482] Bluetooth: hci6: command 0x0c1a tx timeout
[  142.325613] Bluetooth: hci7: command 0x0c1a tx timeout

VM DIAGNOSIS:
09:28:25  Registers:
info registers vcpu 0
RAX=0000000000000286 RBX=ffff88801ef9ff58 RCX=ffffffff813be8a3 RDX=ffff888016693700
RSI=000000000000003d RDI=0000000000000007 RBP=ffff88801ef9ff48 RSP=ffff88801ef9ff30
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000
R12=0000000000000000 R13=000000000000003d R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84ce5a97 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555567ba400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e759c2000 CR3=000000000e56a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000007d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88801bd774c8
R8 =0000000000000000 R9 =ffffed10016a6046 R10=000000000000007d R11=666666203a302320
R12=000000000000007d R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055556421f400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555573994c58 CR3=000000000cebc000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000