Warning: Permanently added '[localhost]:33187' (ECDSA) to the list of known hosts. 2026/01/16 14:40:02 fuzzer started 2026/01/16 14:40:02 dialing manager at localhost:42157 syzkaller login: [ 50.448126] cgroup: Unknown subsys name 'net' [ 50.525379] cgroup: Unknown subsys name 'cpuset' [ 50.540758] cgroup: Unknown subsys name 'rlimit' 2026/01/16 14:40:12 syscalls: 2214 2026/01/16 14:40:12 code coverage: enabled 2026/01/16 14:40:12 comparison tracing: enabled 2026/01/16 14:40:12 extra coverage: enabled 2026/01/16 14:40:12 setuid sandbox: enabled 2026/01/16 14:40:12 namespace sandbox: enabled 2026/01/16 14:40:12 Android sandbox: enabled 2026/01/16 14:40:12 fault injection: enabled 2026/01/16 14:40:12 leak checking: enabled 2026/01/16 14:40:12 net packet injection: enabled 2026/01/16 14:40:12 net device setup: enabled 2026/01/16 14:40:12 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/16 14:40:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/16 14:40:12 USB emulation: enabled 2026/01/16 14:40:12 hci packet injection: enabled 2026/01/16 14:40:12 wifi device emulation: enabled 2026/01/16 14:40:12 802.15.4 emulation: enabled 2026/01/16 14:40:12 fetching corpus: 0, signal 0/2000 (executing program) 2026/01/16 14:40:12 fetching corpus: 42, signal 21356/24932 (executing program) 2026/01/16 14:40:12 fetching corpus: 80, signal 32002/37087 (executing program) 2026/01/16 14:40:12 fetching corpus: 122, signal 38555/45109 (executing program) 2026/01/16 14:40:12 fetching corpus: 172, signal 47690/55400 (executing program) 2026/01/16 14:40:12 fetching corpus: 222, signal 52931/61881 (executing program) 2026/01/16 14:40:12 fetching corpus: 271, signal 60221/70238 (executing program) 2026/01/16 14:40:13 fetching corpus: 319, signal 66832/77788 (executing program) 2026/01/16 14:40:13 fetching corpus: 368, signal 70145/82215 (executing program) 2026/01/16 14:40:13 fetching corpus: 418, signal 74012/87021 (executing program) 2026/01/16 14:40:13 fetching corpus: 468, signal 77311/91229 (executing program) 2026/01/16 14:40:13 fetching corpus: 518, signal 80101/94948 (executing program) 2026/01/16 14:40:13 fetching corpus: 567, signal 83129/98844 (executing program) 2026/01/16 14:40:13 fetching corpus: 617, signal 87638/103995 (executing program) 2026/01/16 14:40:13 fetching corpus: 667, signal 89366/106663 (executing program) 2026/01/16 14:40:13 fetching corpus: 717, signal 92072/110132 (executing program) 2026/01/16 14:40:14 fetching corpus: 767, signal 94573/113342 (executing program) 2026/01/16 14:40:14 fetching corpus: 812, signal 97838/117111 (executing program) 2026/01/16 14:40:14 fetching corpus: 861, signal 100322/120214 (executing program) 2026/01/16 14:40:14 fetching corpus: 911, signal 102925/123414 (executing program) 2026/01/16 14:40:14 fetching corpus: 961, signal 104517/125662 (executing program) 2026/01/16 14:40:14 fetching corpus: 1010, signal 105783/127646 (executing program) 2026/01/16 14:40:14 fetching corpus: 1060, signal 107437/129913 (executing program) 2026/01/16 14:40:14 fetching corpus: 1110, signal 109515/132514 (executing program) 2026/01/16 14:40:15 fetching corpus: 1160, signal 111312/134834 (executing program) 2026/01/16 14:40:15 fetching corpus: 1210, signal 113114/137149 (executing program) 2026/01/16 14:40:15 fetching corpus: 1260, signal 114332/138988 (executing program) 2026/01/16 14:40:15 fetching corpus: 1310, signal 116441/141477 (executing program) 2026/01/16 14:40:15 fetching corpus: 1360, signal 117699/143298 (executing program) 2026/01/16 14:40:15 fetching corpus: 1410, signal 119131/145269 (executing program) 2026/01/16 14:40:15 fetching corpus: 1460, signal 120474/147088 (executing program) 2026/01/16 14:40:15 fetching corpus: 1510, signal 121827/148857 (executing program) 2026/01/16 14:40:15 fetching corpus: 1560, signal 122948/150472 (executing program) 2026/01/16 14:40:16 fetching corpus: 1610, signal 124945/152663 (executing program) 2026/01/16 14:40:16 fetching corpus: 1658, signal 126129/154227 (executing program) 2026/01/16 14:40:16 fetching corpus: 1706, signal 127404/155828 (executing program) 2026/01/16 14:40:16 fetching corpus: 1756, signal 128736/157467 (executing program) 2026/01/16 14:40:16 fetching corpus: 1806, signal 129963/159040 (executing program) 2026/01/16 14:40:16 fetching corpus: 1856, signal 131071/160475 (executing program) 2026/01/16 14:40:16 fetching corpus: 1904, signal 132146/161920 (executing program) 2026/01/16 14:40:16 fetching corpus: 1954, signal 133744/163588 (executing program) 2026/01/16 14:40:17 fetching corpus: 2004, signal 136128/165719 (executing program) 2026/01/16 14:40:17 fetching corpus: 2052, signal 137206/167046 (executing program) 2026/01/16 14:40:17 fetching corpus: 2101, signal 138102/168266 (executing program) 2026/01/16 14:40:17 fetching corpus: 2150, signal 139213/169612 (executing program) 2026/01/16 14:40:17 fetching corpus: 2200, signal 140250/170823 (executing program) 2026/01/16 14:40:17 fetching corpus: 2249, signal 141134/171935 (executing program) 2026/01/16 14:40:17 fetching corpus: 2298, signal 142068/173090 (executing program) 2026/01/16 14:40:17 fetching corpus: 2348, signal 142917/174174 (executing program) 2026/01/16 14:40:18 fetching corpus: 2398, signal 143723/175206 (executing program) 2026/01/16 14:40:18 fetching corpus: 2448, signal 144388/176197 (executing program) 2026/01/16 14:40:18 fetching corpus: 2498, signal 145236/177275 (executing program) 2026/01/16 14:40:18 fetching corpus: 2548, signal 146111/178368 (executing program) 2026/01/16 14:40:18 fetching corpus: 2598, signal 147047/179446 (executing program) 2026/01/16 14:40:18 fetching corpus: 2648, signal 148615/180791 (executing program) 2026/01/16 14:40:18 fetching corpus: 2698, signal 149398/181708 (executing program) 2026/01/16 14:40:18 fetching corpus: 2748, signal 150225/182652 (executing program) 2026/01/16 14:40:18 fetching corpus: 2798, signal 151375/183716 (executing program) 2026/01/16 14:40:19 fetching corpus: 2847, signal 151938/184509 (executing program) 2026/01/16 14:40:19 fetching corpus: 2897, signal 153049/185503 (executing program) 2026/01/16 14:40:19 fetching corpus: 2946, signal 153855/186367 (executing program) 2026/01/16 14:40:19 fetching corpus: 2995, signal 154523/187136 (executing program) 2026/01/16 14:40:19 fetching corpus: 3045, signal 155268/187979 (executing program) 2026/01/16 14:40:19 fetching corpus: 3094, signal 156031/188836 (executing program) 2026/01/16 14:40:19 fetching corpus: 3143, signal 156722/189602 (executing program) 2026/01/16 14:40:19 fetching corpus: 3192, signal 157496/190378 (executing program) 2026/01/16 14:40:20 fetching corpus: 3242, signal 157983/191041 (executing program) 2026/01/16 14:40:20 fetching corpus: 3291, signal 158964/191901 (executing program) 2026/01/16 14:40:20 fetching corpus: 3341, signal 159700/192578 (executing program) 2026/01/16 14:40:20 fetching corpus: 3390, signal 160380/193275 (executing program) 2026/01/16 14:40:20 fetching corpus: 3440, signal 160898/193916 (executing program) 2026/01/16 14:40:20 fetching corpus: 3490, signal 161519/194575 (executing program) 2026/01/16 14:40:20 fetching corpus: 3540, signal 162193/195199 (executing program) 2026/01/16 14:40:20 fetching corpus: 3588, signal 162634/195780 (executing program) 2026/01/16 14:40:20 fetching corpus: 3638, signal 163361/196452 (executing program) 2026/01/16 14:40:21 fetching corpus: 3688, signal 163950/197072 (executing program) 2026/01/16 14:40:21 fetching corpus: 3737, signal 164529/197615 (executing program) 2026/01/16 14:40:21 fetching corpus: 3787, signal 165466/198297 (executing program) 2026/01/16 14:40:21 fetching corpus: 3837, signal 165948/198836 (executing program) 2026/01/16 14:40:21 fetching corpus: 3887, signal 166425/199360 (executing program) 2026/01/16 14:40:21 fetching corpus: 3937, signal 166881/199864 (executing program) 2026/01/16 14:40:21 fetching corpus: 3987, signal 167265/200354 (executing program) 2026/01/16 14:40:21 fetching corpus: 4037, signal 168135/200932 (executing program) 2026/01/16 14:40:22 fetching corpus: 4087, signal 168723/201450 (executing program) 2026/01/16 14:40:22 fetching corpus: 4137, signal 169540/201974 (executing program) 2026/01/16 14:40:22 fetching corpus: 4187, signal 170271/202509 (executing program) 2026/01/16 14:40:22 fetching corpus: 4237, signal 170971/202976 (executing program) 2026/01/16 14:40:22 fetching corpus: 4287, signal 171605/203411 (executing program) 2026/01/16 14:40:22 fetching corpus: 4337, signal 172128/203827 (executing program) 2026/01/16 14:40:22 fetching corpus: 4387, signal 172712/204254 (executing program) 2026/01/16 14:40:22 fetching corpus: 4437, signal 173129/204649 (executing program) 2026/01/16 14:40:22 fetching corpus: 4487, signal 173497/205040 (executing program) 2026/01/16 14:40:22 fetching corpus: 4536, signal 173969/205420 (executing program) 2026/01/16 14:40:23 fetching corpus: 4585, signal 174963/205860 (executing program) 2026/01/16 14:40:23 fetching corpus: 4635, signal 175486/206249 (executing program) 2026/01/16 14:40:23 fetching corpus: 4685, signal 176093/206648 (executing program) 2026/01/16 14:40:23 fetching corpus: 4734, signal 176426/207010 (executing program) 2026/01/16 14:40:23 fetching corpus: 4784, signal 176955/207365 (executing program) 2026/01/16 14:40:23 fetching corpus: 4834, signal 177354/207680 (executing program) 2026/01/16 14:40:23 fetching corpus: 4884, signal 177922/207995 (executing program) 2026/01/16 14:40:24 fetching corpus: 4934, signal 178259/208284 (executing program) 2026/01/16 14:40:24 fetching corpus: 4984, signal 178672/208574 (executing program) 2026/01/16 14:40:24 fetching corpus: 5034, signal 179051/208867 (executing program) 2026/01/16 14:40:24 fetching corpus: 5084, signal 179542/208970 (executing program) 2026/01/16 14:40:24 fetching corpus: 5133, signal 180003/209019 (executing program) 2026/01/16 14:40:24 fetching corpus: 5182, signal 180583/209019 (executing program) 2026/01/16 14:40:24 fetching corpus: 5232, signal 180986/209019 (executing program) 2026/01/16 14:40:24 fetching corpus: 5282, signal 181511/209024 (executing program) 2026/01/16 14:40:24 fetching corpus: 5331, signal 182053/209024 (executing program) 2026/01/16 14:40:25 fetching corpus: 5381, signal 182337/209036 (executing program) 2026/01/16 14:40:25 fetching corpus: 5431, signal 182714/209039 (executing program) 2026/01/16 14:40:25 fetching corpus: 5481, signal 182988/209040 (executing program) 2026/01/16 14:40:25 fetching corpus: 5531, signal 183337/209047 (executing program) 2026/01/16 14:40:25 fetching corpus: 5581, signal 183712/209058 (executing program) 2026/01/16 14:40:25 fetching corpus: 5631, signal 184236/209070 (executing program) 2026/01/16 14:40:25 fetching corpus: 5679, signal 184703/209076 (executing program) 2026/01/16 14:40:25 fetching corpus: 5729, signal 185108/209085 (executing program) 2026/01/16 14:40:25 fetching corpus: 5779, signal 185445/209128 (executing program) 2026/01/16 14:40:25 fetching corpus: 5829, signal 185795/209128 (executing program) 2026/01/16 14:40:26 fetching corpus: 5879, signal 186185/209140 (executing program) 2026/01/16 14:40:26 fetching corpus: 5929, signal 186621/209140 (executing program) 2026/01/16 14:40:26 fetching corpus: 5979, signal 186906/209165 (executing program) 2026/01/16 14:40:26 fetching corpus: 6029, signal 187241/209166 (executing program) 2026/01/16 14:40:26 fetching corpus: 6079, signal 187598/209168 (executing program) 2026/01/16 14:40:26 fetching corpus: 6129, signal 187902/209168 (executing program) 2026/01/16 14:40:26 fetching corpus: 6178, signal 188147/209192 (executing program) 2026/01/16 14:40:26 fetching corpus: 6228, signal 188489/209209 (executing program) 2026/01/16 14:40:26 fetching corpus: 6278, signal 188802/209209 (executing program) 2026/01/16 14:40:26 fetching corpus: 6328, signal 189238/209209 (executing program) 2026/01/16 14:40:26 fetching corpus: 6378, signal 189609/209209 (executing program) 2026/01/16 14:40:27 fetching corpus: 6427, signal 189928/209209 (executing program) 2026/01/16 14:40:27 fetching corpus: 6477, signal 190270/209241 (executing program) 2026/01/16 14:40:27 fetching corpus: 6527, signal 190607/209271 (executing program) 2026/01/16 14:40:27 fetching corpus: 6577, signal 190872/209271 (executing program) 2026/01/16 14:40:27 fetching corpus: 6627, signal 191289/209272 (executing program) 2026/01/16 14:40:27 fetching corpus: 6677, signal 191811/209272 (executing program) 2026/01/16 14:40:27 fetching corpus: 6727, signal 192121/209280 (executing program) 2026/01/16 14:40:27 fetching corpus: 6777, signal 192684/209283 (executing program) 2026/01/16 14:40:27 fetching corpus: 6827, signal 193014/209308 (executing program) 2026/01/16 14:40:28 fetching corpus: 6876, signal 193403/209308 (executing program) 2026/01/16 14:40:28 fetching corpus: 6926, signal 193747/209329 (executing program) 2026/01/16 14:40:28 fetching corpus: 6976, signal 194270/209335 (executing program) 2026/01/16 14:40:28 fetching corpus: 7026, signal 194532/209348 (executing program) 2026/01/16 14:40:28 fetching corpus: 7076, signal 194893/209357 (executing program) 2026/01/16 14:40:28 fetching corpus: 7125, signal 195249/209368 (executing program) 2026/01/16 14:40:28 fetching corpus: 7175, signal 195630/209370 (executing program) 2026/01/16 14:40:28 fetching corpus: 7225, signal 196017/209393 (executing program) 2026/01/16 14:40:28 fetching corpus: 7274, signal 196292/209398 (executing program) 2026/01/16 14:40:29 fetching corpus: 7322, signal 196542/209401 (executing program) 2026/01/16 14:40:29 fetching corpus: 7372, signal 196950/209405 (executing program) 2026/01/16 14:40:29 fetching corpus: 7422, signal 197413/209405 (executing program) 2026/01/16 14:40:29 fetching corpus: 7472, signal 197853/209418 (executing program) 2026/01/16 14:40:29 fetching corpus: 7521, signal 198079/209426 (executing program) 2026/01/16 14:40:29 fetching corpus: 7571, signal 198428/209426 (executing program) 2026/01/16 14:40:29 fetching corpus: 7620, signal 198781/209426 (executing program) 2026/01/16 14:40:29 fetching corpus: 7670, signal 199046/209460 (executing program) 2026/01/16 14:40:29 fetching corpus: 7720, signal 199499/209468 (executing program) 2026/01/16 14:40:30 fetching corpus: 7769, signal 199819/209468 (executing program) 2026/01/16 14:40:30 fetching corpus: 7819, signal 200069/209477 (executing program) 2026/01/16 14:40:30 fetching corpus: 7869, signal 200386/209479 (executing program) 2026/01/16 14:40:30 fetching corpus: 7919, signal 200838/209479 (executing program) 2026/01/16 14:40:30 fetching corpus: 7969, signal 201097/209479 (executing program) 2026/01/16 14:40:30 fetching corpus: 8019, signal 201401/209479 (executing program) 2026/01/16 14:40:30 fetching corpus: 8069, signal 201720/209479 (executing program) 2026/01/16 14:40:30 fetching corpus: 8119, signal 202036/209481 (executing program) 2026/01/16 14:40:30 fetching corpus: 8169, signal 202312/209492 (executing program) 2026/01/16 14:40:31 fetching corpus: 8218, signal 202592/209507 (executing program) 2026/01/16 14:40:31 fetching corpus: 8268, signal 202856/209522 (executing program) 2026/01/16 14:40:31 fetching corpus: 8317, signal 203168/209522 (executing program) 2026/01/16 14:40:31 fetching corpus: 8367, signal 203435/209522 (executing program) 2026/01/16 14:40:31 fetching corpus: 8415, signal 203688/209522 (executing program) 2026/01/16 14:40:31 fetching corpus: 8464, signal 204138/209522 (executing program) 2026/01/16 14:40:31 fetching corpus: 8514, signal 204395/209537 (executing program) 2026/01/16 14:40:31 fetching corpus: 8564, signal 204653/209551 (executing program) 2026/01/16 14:40:31 fetching corpus: 8614, signal 204974/209551 (executing program) 2026/01/16 14:40:32 fetching corpus: 8664, signal 205216/209555 (executing program) 2026/01/16 14:40:32 fetching corpus: 8714, signal 205531/209560 (executing program) 2026/01/16 14:40:32 fetching corpus: 8764, signal 205865/209589 (executing program) 2026/01/16 14:40:32 fetching corpus: 8813, signal 206213/209592 (executing program) 2026/01/16 14:40:32 fetching corpus: 8863, signal 206618/209595 (executing program) 2026/01/16 14:40:32 fetching corpus: 8913, signal 206893/209595 (executing program) 2026/01/16 14:40:32 fetching corpus: 8963, signal 207127/209595 (executing program) 2026/01/16 14:40:32 fetching corpus: 9013, signal 207533/209606 (executing program) 2026/01/16 14:40:32 fetching corpus: 9063, signal 207844/209634 (executing program) 2026/01/16 14:40:33 fetching corpus: 9113, signal 208103/209634 (executing program) 2026/01/16 14:40:33 fetching corpus: 9137, signal 208281/209634 (executing program) 2026/01/16 14:40:33 fetching corpus: 9137, signal 208281/209634 (executing program) 2026/01/16 14:40:35 starting 8 fuzzer processes 14:40:35 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 14:40:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x24, 0x64, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="abdf951b9e8bd02259"}]}]}, 0x24}], 0x1}, 0x0) 14:40:35 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) getdents64(r0, 0x0, 0x0) 14:40:35 executing program 2: write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) [ 83.149212] audit: type=1400 audit(1768574435.401:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:40:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4bfa, 0xffffffffffffffff) 14:40:35 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:40:35 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) flock(r0, 0x1) 14:40:35 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 84.262929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.268060] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.273173] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.280309] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.288107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.382158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.387221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.388759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.391222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.392731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.394599] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.397294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.402497] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.404467] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.425287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.525313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.527418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.528917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.533465] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.537085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.592299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.597973] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.601319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.604137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.610721] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.612299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.613522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.614950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.616617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.617969] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.619027] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.624076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.625383] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.627602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.675441] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.677248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.682700] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.684963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.700970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.704742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.352517] Bluetooth: hci0: command tx timeout [ 86.478654] Bluetooth: hci2: command tx timeout [ 86.479265] Bluetooth: hci1: command tx timeout [ 86.605905] Bluetooth: hci3: command tx timeout [ 86.733932] Bluetooth: hci7: command tx timeout [ 86.733989] Bluetooth: hci6: command tx timeout [ 86.734687] Bluetooth: hci5: command tx timeout [ 86.799624] Bluetooth: hci4: command tx timeout [ 88.397923] Bluetooth: hci0: command tx timeout [ 88.525949] Bluetooth: hci1: command tx timeout [ 88.526015] Bluetooth: hci2: command tx timeout [ 88.653879] Bluetooth: hci3: command tx timeout [ 88.781940] Bluetooth: hci6: command tx timeout [ 88.781959] Bluetooth: hci7: command tx timeout [ 88.782648] Bluetooth: hci5: command tx timeout [ 88.845890] Bluetooth: hci4: command tx timeout [ 90.446899] Bluetooth: hci0: command tx timeout [ 90.573906] Bluetooth: hci2: command tx timeout [ 90.574027] Bluetooth: hci1: command tx timeout [ 90.701904] Bluetooth: hci3: command tx timeout [ 90.830856] Bluetooth: hci7: command tx timeout [ 90.830924] Bluetooth: hci6: command tx timeout [ 90.831307] Bluetooth: hci5: command tx timeout [ 90.894887] Bluetooth: hci4: command tx timeout [ 92.494162] Bluetooth: hci0: command tx timeout [ 92.621865] Bluetooth: hci1: command tx timeout [ 92.622393] Bluetooth: hci2: command tx timeout [ 92.755281] Bluetooth: hci3: command tx timeout [ 92.882425] Bluetooth: hci6: command tx timeout [ 92.886246] Bluetooth: hci7: command tx timeout [ 92.886572] Bluetooth: hci5: command tx timeout [ 92.947125] Bluetooth: hci4: command tx timeout [ 120.837597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.838281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.049889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.050509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.199126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.199740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:41:13 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 121.415099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.415707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.440186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.440781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:41:13 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:41:13 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 121.615435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.616079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:41:13 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:41:14 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:41:14 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 121.975057] audit: type=1400 audit(1768574474.222:8): avc: denied { open } for pid=3850 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 121.976679] audit: type=1400 audit(1768574474.222:9): avc: denied { kernel } for pid=3850 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 14:41:14 executing program 6: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) socketpair(0xa, 0x0, 0x0, &(0x7f0000000dc0)) 14:41:14 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) flock(r0, 0x1) [ 122.269552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.270132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.320768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.321392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.366109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.366736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.449238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.449887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.531881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.532510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.582999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.583569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.593199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.593864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.636139] loop3: detected capacity change from 0 to 64 [ 122.643081] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 122.663641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.664256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.687182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.687759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.760196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.760837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:41:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x24, 0x64, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="abdf951b9e8bd02259"}]}]}, 0x24}], 0x1}, 0x0) 14:41:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:41:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:41:15 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) flock(r0, 0x1) 14:41:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) getdents64(r0, 0x0, 0x0) 14:41:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty=0xfffffffe}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty=0xfffffffe}}) 14:41:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4bfa, 0xffffffffffffffff) 14:41:15 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) [ 122.903420] loop3: detected capacity change from 0 to 64 [ 122.916067] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:41:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x24, 0x64, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="abdf951b9e8bd02259"}]}]}, 0x24}], 0x1}, 0x0) 14:41:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:41:15 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) flock(r0, 0x2) flock(r0, 0x1) 14:41:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) getdents64(r0, 0x0, 0x0) 14:41:15 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 14:41:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4bfa, 0xffffffffffffffff) 14:41:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000300)=ANY=[], 0xffd3) io_setup(0x6b, &(0x7f00000000c0)=0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000001040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\r', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:41:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 123.044422] loop3: detected capacity change from 0 to 64 [ 123.049603] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:41:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4bfa, 0xffffffffffffffff) 14:41:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)={0x24, 0x64, 0x1, 0x0, 0x0, "", [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="abdf951b9e8bd02259"}]}]}, 0x24}], 0x1}, 0x0) 14:41:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:41:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 14:41:15 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}]}, 0x28}}, 0x0) 14:41:15 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[]) getdents64(r0, 0x0, 0x0) 14:41:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)) [ 123.172286] loop3: detected capacity change from 0 to 64 [ 123.179848] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 14:41:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000051c0)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002a00)=0xe8) 14:41:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000300)=ANY=[], 0xffd3) io_setup(0x6b, &(0x7f00000000c0)=0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000001040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\r', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:41:15 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000500)={0xff}) 14:41:15 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:15 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b44, &(0x7f00000000c0)) 14:41:15 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14:41:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)) 14:41:15 executing program 4: perf_event_open(&(0x7f0000001740)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 14:41:15 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b44, &(0x7f00000000c0)) 14:41:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000051c0)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002a00)=0xe8) 14:41:15 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000500)={0xff}) 14:41:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)) 14:41:15 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000300)=ANY=[], 0xffd3) io_setup(0x6b, &(0x7f00000000c0)=0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000001040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\r', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:41:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x540a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "684d4a33bbaf06af10a18af111d43e747819b7"}) 14:41:15 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b44, &(0x7f00000000c0)) 14:41:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)) 14:41:15 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14:41:15 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000500)={0xff}) 14:41:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000051c0)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002a00)=0xe8) 14:41:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x540a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "684d4a33bbaf06af10a18af111d43e747819b7"}) 14:41:16 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000500)={0xff}) 14:41:16 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTAT(r1, &(0x7f0000000300)=ANY=[], 0xffd3) io_setup(0x6b, &(0x7f00000000c0)=0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) io_submit(r2, 0x2, &(0x7f0000001040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\r', 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 14:41:16 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$KDGETMODE(r0, 0x4b44, &(0x7f00000000c0)) 14:41:16 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:41:16 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14:41:16 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:16 executing program 6: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0xfe8) 14:41:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x540a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "684d4a33bbaf06af10a18af111d43e747819b7"}) 14:41:16 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:41:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000051c0)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000002a00)=0xe8) 14:41:16 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x40004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup2(r1, r2) read(r0, 0x0, 0x40004) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 14:41:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') writev(r0, &(0x7f0000002680)=[{&(0x7f0000001540)="04", 0x1}], 0x1) 14:41:16 executing program 6: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0xfe8) 14:41:16 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:41:16 executing program 1: select(0x2a00, 0x0, 0x0, 0x0, &(0x7f0000000140)) 14:41:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x540a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "684d4a33bbaf06af10a18af111d43e747819b7"}) 14:41:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:16 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') writev(r0, &(0x7f0000002680)=[{&(0x7f0000001540)="04", 0x1}], 0x1) 14:41:16 executing program 5: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:41:16 executing program 6: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0xfe8) 14:41:16 executing program 1: select(0x2a00, 0x0, 0x0, 0x0, &(0x7f0000000140)) [ 124.407117] [ 124.407477] ===================================== [ 124.407919] WARNING: bad unlock balance detected! [ 124.408308] 6.19.0-rc5-next-20260116 #1 Not tainted [ 124.408698] ------------------------------------- [ 124.409068] syz-executor.1/4053 is trying to release lock (rcu_read_lock) at: [ 124.410251] [] __wait_on_freeing_inode+0x105/0x350 [ 124.411619] but there are no more locks to release! [ 124.412648] [ 124.412648] other info that might help us debug this: [ 124.414399] 4 locks held by syz-executor.1/4053: [ 124.415280] #0: ffff88800fc803f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 124.416921] #1: ffff8880096e4698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 124.418064] #2: ffff88800fc84950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 124.418772] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 124.419491] [ 124.419491] stack backtrace: [ 124.419843] CPU: 1 UID: 0 PID: 4053 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 124.419857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.419865] Call Trace: [ 124.419869] [ 124.419874] dump_stack_lvl+0xca/0x120 [ 124.419903] ? __wait_on_freeing_inode+0x105/0x350 [ 124.419917] print_unlock_imbalance_bug+0x118/0x130 [ 124.419932] ? __wait_on_freeing_inode+0x105/0x350 [ 124.419947] lock_release+0x1ee/0x270 [ 124.419961] __wait_on_freeing_inode+0x10a/0x350 [ 124.419976] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 124.419991] ? __pfx_var_wake_function+0x10/0x10 [ 124.420008] ? lock_is_held_type+0x9e/0x120 [ 124.420020] insert_inode_locked+0x25f/0x890 [ 124.420036] __ext4_new_inode+0x223d/0x4cd0 [ 124.420053] ? __pfx___ext4_new_inode+0x10/0x10 [ 124.420067] ? __pfx___dquot_initialize+0x10/0x10 [ 124.420085] ? __pfx_avc_has_perm+0x10/0x10 [ 124.420101] ext4_symlink+0x623/0xb40 [ 124.420119] ? __pfx_ext4_symlink+0x10/0x10 [ 124.420135] ? security_inode_permission+0x72/0xe0 [ 124.420148] vfs_symlink+0x44b/0x840 [ 124.420164] filename_symlinkat+0x158/0x440 [ 124.420178] ? __pfx_filename_symlinkat+0x10/0x10 [ 124.420191] ? strncpy_from_user+0x21b/0x2f0 [ 124.420208] __x64_sys_symlink+0x82/0x110 [ 124.420221] do_syscall_64+0xbf/0x420 [ 124.420234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.420247] RIP: 0033:0x7fead1efc427 [ 124.420256] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.420267] RSP: 002b:00007fffb59bb138 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 124.420278] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fead1efc427 [ 124.420285] RDX: 00007fffb59bb213 RSI: 00007fead1f5702f RDI: 00007fffb59bb200 [ 124.420293] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffb59bafd0 [ 124.420300] R10: 00007fffb59bae87 R11: 0000000000000202 R12: 0000000000000001 [ 124.420307] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffb59bb200 [ 124.420317] [ 124.435576] ------------[ cut here ]------------ [ 124.435993] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/4053 [ 124.436885] Modules linked in: [ 124.437175] CPU: 1 UID: 0 PID: 4053 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 124.438022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 124.438668] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 124.439170] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 124.440635] RSP: 0018:ffff88804e58f9a0 EFLAGS: 00010286 [ 124.441099] RAX: 00000000ffffffff RBX: ffff888017058000 RCX: ffffffff815660f7 [ 124.441661] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880170583fc [ 124.442279] RBP: ffff888017058000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 124.442880] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888017058000 [ 124.443443] R13: 0000000000000001 R14: ffffffff85c0eaa0 R15: ffff88800964d8e0 [ 124.445193] FS: 0000555590b55400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 124.446748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.447267] CR2: 0000555590b55708 CR3: 00000000146b8000 CR4: 0000000000350ef0 [ 124.447873] Call Trace: [ 124.448114] [ 124.448752] __wait_on_freeing_inode+0x10f/0x350 [ 124.449547] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 124.450682] ? __pfx_var_wake_function+0x10/0x10 [ 124.451943] ? lock_is_held_type+0x9e/0x120 [ 124.453026] insert_inode_locked+0x25f/0x890 [ 124.454637] __ext4_new_inode+0x223d/0x4cd0 [ 124.457253] ? __pfx___ext4_new_inode+0x10/0x10 [ 124.458492] ? __pfx___dquot_initialize+0x10/0x10 [ 124.459271] ? __pfx_avc_has_perm+0x10/0x10 [ 124.461035] ext4_symlink+0x623/0xb40 [ 124.463268] ? __pfx_ext4_symlink+0x10/0x10 [ 124.464275] ? security_inode_permission+0x72/0xe0 [ 124.465921] vfs_symlink+0x44b/0x840 [ 124.467187] filename_symlinkat+0x158/0x440 [ 124.468305] ? __pfx_filename_symlinkat+0x10/0x10 [ 124.469072] ? strncpy_from_user+0x21b/0x2f0 [ 124.470964] __x64_sys_symlink+0x82/0x110 [ 124.471676] do_syscall_64+0xbf/0x420 [ 124.472479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.473022] RIP: 0033:0x7fead1efc427 [ 124.473378] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 124.474866] RSP: 002b:00007fffb59bb138 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 124.475464] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fead1efc427 [ 124.476069] RDX: 00007fffb59bb213 RSI: 00007fead1f5702f RDI: 00007fffb59bb200 [ 124.476630] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffb59bafd0 [ 124.477233] R10: 00007fffb59bae87 R11: 0000000000000202 R12: 0000000000000001 [ 124.477795] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffb59bb200 [ 124.480435] [ 124.480632] irq event stamp: 815 [ 124.480942] hardirqs last enabled at (815): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 124.481747] hardirqs last disabled at (814): [] _raw_spin_lock_irqsave+0x53/0x60 [ 124.482571] softirqs last enabled at (810): [] kernel_fpu_end+0x59/0x70 [ 124.483342] softirqs last disabled at (808): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 124.484157] ---[ end trace 0000000000000000 ]--- 14:41:17 executing program 6: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0xfe8) 14:41:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:17 executing program 1: select(0x2a00, 0x0, 0x0, 0x0, &(0x7f0000000140)) 14:41:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') writev(r0, &(0x7f0000002680)=[{&(0x7f0000001540)="04", 0x1}], 0x1) 14:41:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="dfb04f67455fc340cd4f8d9c42aa4becb86ddec0decdb137058c08b82f9f230552dc1b1d7c6a1f32d7c5d58633fb26baf80f1bb98d54ef9327170a7f36dd5adb509e8373b42190e5ff3b85b091888037fd03c0f73094a14141b12f43986733333501ada3e1eb934e75294f44b0cfb75abf905ebfea372ed46006e3761d9114f4b948cabb36bbd116", 0x88}, {&(0x7f0000000100)="5a47dc1a4b94e824de0d3657a81ae0cc81469192185f878b35cb0fb8d64be45a37eda988396e3ae413903368d19b5bed1fabed302d0fd3f0adecf54688c7cece325efa959aba951550ea86f245da320d22b7209bddcf76c72e0298e20071fea88f99b852d72f33d7663a341647c0657f33030624af6753f4ced7bb781f786fa1", 0x80}, {&(0x7f0000000180)="cccb530e102b56470b5bb529069a3615ceff8333adc01645fd53527200c53afc7b75f2cffba978e316adec8eaacf2a3d8d4333f12191237a54227f188874fc4dfb08c2df7b9de3e6f18d62f68d4295eef6", 0x51}, {&(0x7f0000000200)="6aaf7c82907820963ef06e0799b6b8d42e0bc69a5bfc98cc535e8307bcd53ca0ed088c5a02915c0bc1fd5e8de914e79af1d58348ad105900d9e14290cd39f8514f49061f2acdc50f442e78f24f6c02f2d959775d519beddb8a31adb44b45580c485239289152d7a1b40f63ab070448fa5607fcb6969a97a531c9770c82fdf60180ee511a8f40592726e2738b593c85826569a46d91abd9da9b3a9fa3cbaee41f5bcc09a28d3a2fd084be", 0xaa}, {&(0x7f00000002c0)="fb367cb19c76471e4263886db5f8d919cc7cdb05560631520a1197c1a2b0e84bc7a95c78c3f2ac", 0x27}, {&(0x7f00000011c0)="0246974813466f9ce217b435d846be5f584cc7117d1e22dd10fef8f862bac3766e1ad724b9d5dab81147c1fda626bedcf093cfede0dbafd77d6b487d2eb99505294f6e8f920dec92d4f2ab76e5cc33c26e53875aa9c2b5e4575a7b5d7bed29a9668bf8dab96939b36b0da6f6142ead4cdfb06b6ac2c7cb3db94980dda7616b7ff453dc95ac25856eb096ba440bacc7c43d203b01640f0ad5b7cb338a67fcf259bb17d2a1779fc04d13b68cc2cecd8f6c180079a5915717e61adf8d24a9c2aa2025a86d7306a4b8c411b730785d44dd8f331188e428dc3ae9c933ebff727428951cf030ab715f36ce262a9d92bdd0e61031bbccaf8e73d362912cefddf9772d3d1fba78c24bc51a3e708b7a5bd4adae842d92df509aea76a2734852e84c200723df8c50ce362c8676d1dfd5b471823233189ff429f08528e9c83d9d080802dce7e38ac9e4bbe05ee3843d818e7a810c0806ef8a6a0b07ffbb8e7d6a8e8d93b9c16c3d7dc4e7edf5a705e97df5b19e6d4131da8745d6c12b192f08f08ce7a190a4d922465a612c6675a768c5026d208202bde5c2e42f62de599dbb5d54a0074593189ca342bd3a4babc3bf588d8cf859fe1ab8765f8a8c865b3ee83ad570de278f46fa420973cb50693664e6ad4e7787ba6453215fc373a6ab9d6a2e8ec9f831b91a64be3d2f6d3546311b6c1491c44cca4a2c53dbb275a831252e27532957688b42fb32d8328b6ad5e27f7e096c39d05564012e041c884b9da3d92fe8ed8086881f6832831b48cf95fd3f52f576864fd7a89dcd82f5326203276e551dd3b3e6bb", 0x240}], 0x6) 14:41:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:18 executing program 1: select(0x2a00, 0x0, 0x0, 0x0, &(0x7f0000000140)) 14:41:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='uid_map\x00') writev(r0, &(0x7f0000002680)=[{&(0x7f0000001540)="04", 0x1}], 0x1) 14:41:18 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="dfb04f67455fc340cd4f8d9c42aa4becb86ddec0decdb137058c08b82f9f230552dc1b1d7c6a1f32d7c5d58633fb26baf80f1bb98d54ef9327170a7f36dd5adb509e8373b42190e5ff3b85b091888037fd03c0f73094a14141b12f43986733333501ada3e1eb934e75294f44b0cfb75abf905ebfea372ed46006e3761d9114f4b948cabb36bbd116", 0x88}, {&(0x7f0000000100)="5a47dc1a4b94e824de0d3657a81ae0cc81469192185f878b35cb0fb8d64be45a37eda988396e3ae413903368d19b5bed1fabed302d0fd3f0adecf54688c7cece325efa959aba951550ea86f245da320d22b7209bddcf76c72e0298e20071fea88f99b852d72f33d7663a341647c0657f33030624af6753f4ced7bb781f786fa1", 0x80}, {&(0x7f0000000180)="cccb530e102b56470b5bb529069a3615ceff8333adc01645fd53527200c53afc7b75f2cffba978e316adec8eaacf2a3d8d4333f12191237a54227f188874fc4dfb08c2df7b9de3e6f18d62f68d4295eef6", 0x51}, {&(0x7f0000000200)="6aaf7c82907820963ef06e0799b6b8d42e0bc69a5bfc98cc535e8307bcd53ca0ed088c5a02915c0bc1fd5e8de914e79af1d58348ad105900d9e14290cd39f8514f49061f2acdc50f442e78f24f6c02f2d959775d519beddb8a31adb44b45580c485239289152d7a1b40f63ab070448fa5607fcb6969a97a531c9770c82fdf60180ee511a8f40592726e2738b593c85826569a46d91abd9da9b3a9fa3cbaee41f5bcc09a28d3a2fd084be", 0xaa}, {&(0x7f00000002c0)="fb367cb19c76471e4263886db5f8d919cc7cdb05560631520a1197c1a2b0e84bc7a95c78c3f2ac", 0x27}, {&(0x7f00000011c0)="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", 0x240}], 0x6) 14:41:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:18 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14:41:18 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) fallocate(r0, 0x20, 0x0, 0xffffffff000) 14:41:18 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 14:41:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14:41:19 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) fallocate(r0, 0x20, 0x0, 0xffffffff000) 14:41:19 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 14:41:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x10, 0x0, 0x4}, 0x10}], 0x1}, 0x0) 14:41:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="dfb04f67455fc340cd4f8d9c42aa4becb86ddec0decdb137058c08b82f9f230552dc1b1d7c6a1f32d7c5d58633fb26baf80f1bb98d54ef9327170a7f36dd5adb509e8373b42190e5ff3b85b091888037fd03c0f73094a14141b12f43986733333501ada3e1eb934e75294f44b0cfb75abf905ebfea372ed46006e3761d9114f4b948cabb36bbd116", 0x88}, {&(0x7f0000000100)="5a47dc1a4b94e824de0d3657a81ae0cc81469192185f878b35cb0fb8d64be45a37eda988396e3ae413903368d19b5bed1fabed302d0fd3f0adecf54688c7cece325efa959aba951550ea86f245da320d22b7209bddcf76c72e0298e20071fea88f99b852d72f33d7663a341647c0657f33030624af6753f4ced7bb781f786fa1", 0x80}, {&(0x7f0000000180)="cccb530e102b56470b5bb529069a3615ceff8333adc01645fd53527200c53afc7b75f2cffba978e316adec8eaacf2a3d8d4333f12191237a54227f188874fc4dfb08c2df7b9de3e6f18d62f68d4295eef6", 0x51}, {&(0x7f0000000200)="6aaf7c82907820963ef06e0799b6b8d42e0bc69a5bfc98cc535e8307bcd53ca0ed088c5a02915c0bc1fd5e8de914e79af1d58348ad105900d9e14290cd39f8514f49061f2acdc50f442e78f24f6c02f2d959775d519beddb8a31adb44b45580c485239289152d7a1b40f63ab070448fa5607fcb6969a97a531c9770c82fdf60180ee511a8f40592726e2738b593c85826569a46d91abd9da9b3a9fa3cbaee41f5bcc09a28d3a2fd084be", 0xaa}, {&(0x7f00000002c0)="fb367cb19c76471e4263886db5f8d919cc7cdb05560631520a1197c1a2b0e84bc7a95c78c3f2ac", 0x27}, {&(0x7f00000011c0)="0246974813466f9ce217b435d846be5f584cc7117d1e22dd10fef8f862bac3766e1ad724b9d5dab81147c1fda626bedcf093cfede0dbafd77d6b487d2eb99505294f6e8f920dec92d4f2ab76e5cc33c26e53875aa9c2b5e4575a7b5d7bed29a9668bf8dab96939b36b0da6f6142ead4cdfb06b6ac2c7cb3db94980dda7616b7ff453dc95ac25856eb096ba440bacc7c43d203b01640f0ad5b7cb338a67fcf259bb17d2a1779fc04d13b68cc2cecd8f6c180079a5915717e61adf8d24a9c2aa2025a86d7306a4b8c411b730785d44dd8f331188e428dc3ae9c933ebff727428951cf030ab715f36ce262a9d92bdd0e61031bbccaf8e73d362912cefddf9772d3d1fba78c24bc51a3e708b7a5bd4adae842d92df509aea76a2734852e84c200723df8c50ce362c8676d1dfd5b471823233189ff429f08528e9c83d9d080802dce7e38ac9e4bbe05ee3843d818e7a810c0806ef8a6a0b07ffbb8e7d6a8e8d93b9c16c3d7dc4e7edf5a705e97df5b19e6d4131da8745d6c12b192f08f08ce7a190a4d922465a612c6675a768c5026d208202bde5c2e42f62de599dbb5d54a0074593189ca342bd3a4babc3bf588d8cf859fe1ab8765f8a8c865b3ee83ad570de278f46fa420973cb50693664e6ad4e7787ba6453215fc373a6ab9d6a2e8ec9f831b91a64be3d2f6d3546311b6c1491c44cca4a2c53dbb275a831252e27532957688b42fb32d8328b6ad5e27f7e096c39d05564012e041c884b9da3d92fe8ed8086881f6832831b48cf95fd3f52f576864fd7a89dcd82f5326203276e551dd3b3e6bb", 0x240}], 0x6) 14:41:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) 14:41:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x80000001, 0x0, 0x0, 'queue1\x00'}) 14:41:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 14:41:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14:41:19 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) fallocate(r0, 0x20, 0x0, 0xffffffff000) 14:41:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x80000001, 0x0, 0x0, 'queue1\x00'}) 14:41:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) 14:41:19 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14:41:19 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) fallocate(r0, 0x20, 0x0, 0xffffffff000) 14:41:19 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 14:41:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) 14:41:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="dfb04f67455fc340cd4f8d9c42aa4becb86ddec0decdb137058c08b82f9f230552dc1b1d7c6a1f32d7c5d58633fb26baf80f1bb98d54ef9327170a7f36dd5adb509e8373b42190e5ff3b85b091888037fd03c0f73094a14141b12f43986733333501ada3e1eb934e75294f44b0cfb75abf905ebfea372ed46006e3761d9114f4b948cabb36bbd116", 0x88}, {&(0x7f0000000100)="5a47dc1a4b94e824de0d3657a81ae0cc81469192185f878b35cb0fb8d64be45a37eda988396e3ae413903368d19b5bed1fabed302d0fd3f0adecf54688c7cece325efa959aba951550ea86f245da320d22b7209bddcf76c72e0298e20071fea88f99b852d72f33d7663a341647c0657f33030624af6753f4ced7bb781f786fa1", 0x80}, {&(0x7f0000000180)="cccb530e102b56470b5bb529069a3615ceff8333adc01645fd53527200c53afc7b75f2cffba978e316adec8eaacf2a3d8d4333f12191237a54227f188874fc4dfb08c2df7b9de3e6f18d62f68d4295eef6", 0x51}, {&(0x7f0000000200)="6aaf7c82907820963ef06e0799b6b8d42e0bc69a5bfc98cc535e8307bcd53ca0ed088c5a02915c0bc1fd5e8de914e79af1d58348ad105900d9e14290cd39f8514f49061f2acdc50f442e78f24f6c02f2d959775d519beddb8a31adb44b45580c485239289152d7a1b40f63ab070448fa5607fcb6969a97a531c9770c82fdf60180ee511a8f40592726e2738b593c85826569a46d91abd9da9b3a9fa3cbaee41f5bcc09a28d3a2fd084be", 0xaa}, {&(0x7f00000002c0)="fb367cb19c76471e4263886db5f8d919cc7cdb05560631520a1197c1a2b0e84bc7a95c78c3f2ac", 0x27}, {&(0x7f00000011c0)="0246974813466f9ce217b435d846be5f584cc7117d1e22dd10fef8f862bac3766e1ad724b9d5dab81147c1fda626bedcf093cfede0dbafd77d6b487d2eb99505294f6e8f920dec92d4f2ab76e5cc33c26e53875aa9c2b5e4575a7b5d7bed29a9668bf8dab96939b36b0da6f6142ead4cdfb06b6ac2c7cb3db94980dda7616b7ff453dc95ac25856eb096ba440bacc7c43d203b01640f0ad5b7cb338a67fcf259bb17d2a1779fc04d13b68cc2cecd8f6c180079a5915717e61adf8d24a9c2aa2025a86d7306a4b8c411b730785d44dd8f331188e428dc3ae9c933ebff727428951cf030ab715f36ce262a9d92bdd0e61031bbccaf8e73d362912cefddf9772d3d1fba78c24bc51a3e708b7a5bd4adae842d92df509aea76a2734852e84c200723df8c50ce362c8676d1dfd5b471823233189ff429f08528e9c83d9d080802dce7e38ac9e4bbe05ee3843d818e7a810c0806ef8a6a0b07ffbb8e7d6a8e8d93b9c16c3d7dc4e7edf5a705e97df5b19e6d4131da8745d6c12b192f08f08ce7a190a4d922465a612c6675a768c5026d208202bde5c2e42f62de599dbb5d54a0074593189ca342bd3a4babc3bf588d8cf859fe1ab8765f8a8c865b3ee83ad570de278f46fa420973cb50693664e6ad4e7787ba6453215fc373a6ab9d6a2e8ec9f831b91a64be3d2f6d3546311b6c1491c44cca4a2c53dbb275a831252e27532957688b42fb32d8328b6ad5e27f7e096c39d05564012e041c884b9da3d92fe8ed8086881f6832831b48cf95fd3f52f576864fd7a89dcd82f5326203276e551dd3b3e6bb", 0x240}], 0x6) 14:41:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 14:41:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) 14:41:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x80000001, 0x0, 0x0, 'queue1\x00'}) 14:41:19 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 14:41:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) 14:41:19 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x44032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 14:41:19 executing program 6: rseq(&(0x7f0000000040), 0xffffffffffffff85, 0x0, 0x0) 14:41:19 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 14:41:19 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x80000001, 0x0, 0x0, 'queue1\x00'}) 14:41:19 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 14:41:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 14:41:19 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:19 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) 14:41:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) 14:41:19 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 14:41:19 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) [ 127.322735] audit: type=1400 audit(1768574479.575:10): avc: denied { tracepoint } for pid=4156 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 127.341941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 14:41:19 executing program 7: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 14:41:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r0, 0x0) mlockall(0x3) [ 127.354426] Bluetooth: hci0: Opcode 0x0406 failed: -4 14:41:19 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) 14:41:19 executing program 2: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) [ 127.382790] Bluetooth: hci0: Opcode 0x0406 failed: -4 14:41:19 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) [ 127.418373] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.419366] Bluetooth: hci2: Opcode 0x0406 failed: -4 14:41:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) [ 127.430469] Bluetooth: hci2: Opcode 0x0406 failed: -4 14:41:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) [ 127.448240] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.449196] Bluetooth: hci1: Opcode 0x0406 failed: -4 14:41:19 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)={0x1c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) [ 127.461131] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.484742] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.485966] Bluetooth: hci3: Opcode 0x0406 failed: -4 14:41:19 executing program 6: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) [ 127.511323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.539314] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.539788] Bluetooth: hci4: Opcode 0x0406 failed: -4 14:41:19 executing program 6: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) [ 127.576727] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 127.596286] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 127.596757] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 127.602329] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 127.603345] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 127.603795] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 127.604864] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 127.611504] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 127.612413] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 127.617537] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 127.655203] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 127.655758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.656562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.657506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 127.658068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.658584] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 127.659128] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 127.659646] Bluetooth: hci7: Opcode 0x0c1a failed: -4 14:41:20 executing program 6: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 14:41:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 14:41:20 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[]) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 14:41:20 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) 14:41:20 executing program 5: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:41:20 executing program 2: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:41:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 128.222055] 9pnet_fd: p9_fd_create_unix (4210): problem connecting socket: ./file0: -30 [ 128.232246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 128.236965] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.237468] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 128.247993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.248541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.265085] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 128.267081] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 128.268398] Bluetooth: hci7: Opcode 0x0c1a failed: -4 14:41:20 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[]) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 14:41:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) [ 128.364226] 9pnet_fd: p9_fd_create_unix (4218): problem connecting socket: ./file0: -30 14:41:21 executing program 6: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) 14:41:21 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:21 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[]) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 14:41:21 executing program 5: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:41:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x1d, 0x0, &(0x7f0000007dc0)) 14:41:21 executing program 2: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:41:21 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e2", 0x1}], 0x1) [ 129.094147] 9pnet_fd: p9_fd_create_unix (4220): problem connecting socket: ./file0: -30 14:41:21 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x1, &(0x7f0000001980)=ANY=[]) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 14:41:21 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:21 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 14:41:21 executing program 5: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) [ 129.211665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.212696] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.218713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.221055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.226465] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.227575] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 129.229329] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 129.234164] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 129.262909] 9pnet_fd: p9_fd_create_unix (4237): problem connecting socket: ./file0: -30 [ 129.351879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.356352] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.366614] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.369235] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.385094] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.387744] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 129.390143] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 129.391229] Bluetooth: hci7: Opcode 0x0c1a failed: -4 14:41:22 executing program 2: madvise(&(0x7f0000904000/0x3000)=nil, 0x3000, 0x10) mlock(&(0x7f0000aff000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000f13000/0x1000)=nil, 0x1000) munmap(&(0x7f0000bae000/0x4000)=nil, 0x4000) mlock(&(0x7f00008b5000/0x3000)=nil, 0x3000) mlock(&(0x7f00005bf000/0x4000)=nil, 0x4000) mremap(&(0x7f0000beb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 14:41:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) dup2(r1, r0) 14:41:22 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 14:41:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4c, &(0x7f0000000000), 0x8) 14:41:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x1a, 0x0, &(0x7f0000000480)) 14:41:22 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) accept(r0, 0x0, 0x0) 14:41:22 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 130.021662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 14:41:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4c, &(0x7f0000000000), 0x8) 14:41:22 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) [ 130.146916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 14:41:22 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) [ 130.148458] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.149555] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.150597] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.156220] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.158620] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 130.164089] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 130.165155] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 130.187936] tmpfs: Bad value for 'mpol' 14:41:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x1a, 0x0, &(0x7f0000000480)) [ 130.190451] tmpfs: Bad value for 'mpol' 14:41:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) dup2(r1, r0) 14:41:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) 14:41:23 executing program 6: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 14:41:23 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824", 0x4b51}) r1 = syz_io_uring_setup(0x2260, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1de}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000003ac0)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r3 = dup(r2) ioctl$BLKSECTGET(r3, 0x2270, 0x0) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x19664}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x79) dup2(r3, r5) r6 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x6, 0x0, 0x0, 0x0) r7 = dup2(r6, r6) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x5) dup2(r1, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 14:41:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x1a, 0x0, &(0x7f0000000480)) 14:41:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4c, &(0x7f0000000000), 0x8) 14:41:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:41:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) dup2(r1, r0) 14:41:23 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) [ 130.911737] tmpfs: Bad value for 'mpol' 14:41:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) [ 130.970515] audit: type=1400 audit(1768574483.219:11): avc: denied { read } for pid=4276 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 131.003496] tmpfs: Bad value for 'mpol' 14:41:23 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:41:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x1a, 0x0, &(0x7f0000000480)) [ 131.036511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 131.038419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.039372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 14:41:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) dup2(r1, r0) 14:41:23 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 131.050502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.053200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 14:41:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4c, &(0x7f0000000000), 0x8) [ 131.069008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 131.069336] Bluetooth: MGMT ver 1.23 [ 131.070098] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 131.088409] Bluetooth: hci7: Opcode 0x0c1a failed: -4 14:41:23 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x3a]}}}}]}) 14:41:23 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 14:41:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) [ 131.188495] tmpfs: Bad value for 'mpol' 14:41:23 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 14:41:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:23 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x4000, 0x16, 0x0, 0x0}) 14:41:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000fbdbdf2521000000050020000000000109001f0070687930000000000a00010077703353ba5e0000050020"], 0x3c}}, 0x0) 14:41:23 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:41:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:41:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9acc0759ed", 0x0, 0x0, 0x0, 0x0, 0x0}) 14:41:23 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x20, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 14:41:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9acc0759ed", 0x0, 0x0, 0x0, 0x0, 0x0}) 14:41:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000fbdbdf2521000000050020000000000109001f0070687930000000000a00010077703353ba5e0000050020"], 0x3c}}, 0x0) 14:41:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x4000, 0x16, 0x0, 0x0}) 14:41:23 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @dev}, {0x0, 0x0, 0x0, @dev}}}}}, 0x0) 14:41:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:23 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 14:41:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9acc0759ed", 0x0, 0x0, 0x0, 0x0, 0x0}) 14:41:23 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x4000, 0x16, 0x0, 0x0}) 14:41:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000fbdbdf2521000000050020000000000109001f0070687930000000000a00010077703353ba5e0000050020"], 0x3c}}, 0x0) 14:41:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9acc0759ed", 0x0, 0x0, 0x0, 0x0, 0x0}) 14:41:23 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) 14:41:23 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000fbdbdf2521000000050020000000000109001f0070687930000000000a00010077703353ba5e0000050020"], 0x3c}}, 0x0) 14:41:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x4000, 0x16, 0x0, 0x0}) 14:41:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffee1, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x2c}}, 0x0) 14:41:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:24 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) 14:41:24 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x4e, &(0x7f0000000000)={@mcast2}, 0x14) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4}}}], 0x28}}], 0x1, 0x0) 14:41:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffee1, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x2c}}, 0x0) 14:41:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:24 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 14:41:24 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) 14:41:24 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) 14:41:24 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) [ 132.172413] audit: type=1326 audit(1768574484.425:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4381 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f9ce6b19 code=0x0 14:41:24 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) 14:41:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffee1, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x2c}}, 0x0) 14:41:24 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) 14:41:24 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000a80)={&(0x7f00000009c0), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}}, 0x0) 14:41:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 14:41:24 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) 14:41:24 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) [ 132.986853] audit: type=1326 audit(1768574485.239:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4381 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f9ce6b19 code=0x0 14:41:25 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 14:41:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)={0x2c, r3, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffee1, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}]}, 0x2c}}, 0x0) 14:41:25 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) 14:41:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) 14:41:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:25 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) [ 133.069908] Bluetooth: hci5: command 0x0c1a tx timeout [ 133.070752] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.071592] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.071624] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.072420] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.073322] Bluetooth: hci0: command 0x0c1a tx timeout 14:41:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r0, 0x0, 0x0) [ 133.106409] audit: type=1326 audit(1768574485.359:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4418 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f9ce6b19 code=0x0 [ 133.135870] Bluetooth: hci7: command 0x0c1a tx timeout [ 133.136607] Bluetooth: hci6: command 0x0c1a tx timeout 14:41:25 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @queue}], 0x1c) write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x81, 0x0, 0x0, @tick=0x2, {}, {}, @quote}], 0x1c) 14:41:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f0000000140), 0x14) 14:41:25 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x0, {0x2, 0x0, @remote}}) 14:41:25 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r0, 0x0, 0x0) 14:41:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f0000000140), 0x14) 14:41:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) 14:41:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r0, 0x0, 0x0) 14:41:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) 14:41:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x40a85323, &(0x7f0000000000)) 14:41:26 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x0) 14:41:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f0000000140), 0x14) 14:41:26 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 14:41:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x20005, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:41:26 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) [ 134.008923] audit: type=1326 audit(1768574486.261:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4464 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38f9ce6b19 code=0x0 14:41:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) bind$packet(r0, &(0x7f0000000140), 0x14) 14:41:26 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x0) 14:41:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x20005, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:41:26 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet(r0, 0x0, 0x0) 14:41:26 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x40a85323, &(0x7f0000000000)) 14:41:26 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x20005, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:41:26 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x3}, 0x14}}, 0x0) 14:41:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x20005, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:41:26 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x20005, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:41:26 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x40086806, 0x0) 14:41:26 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240)=0x20005, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 14:41:26 executing program 3: request_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x0) VM DIAGNOSIS: 14:41:16 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801451fb40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110028a3f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801451fb78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557ab9f400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055557aba8c58 CR3=0000000010022000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804e58f490 R8 =0000000000000001 R9 =ffffed1009cb1e83 R10=0000000000000000 R11=666666203a312320 R12=000000000000006f R13=ffffffff889c19f0 R14=ffffffff889c19a0 R15=ffffffff889c1c60 RIP=ffffffff829750f5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555590b55400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555590b55708 CR3=00000000146b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000