Warning: Permanently added '[localhost]:17317' (ECDSA) to the list of known hosts.
2026/01/16 14:56:27 fuzzer started
2026/01/16 14:56:27 dialing manager at localhost:42157
syzkaller login: [   48.122278] cgroup: Unknown subsys name 'net'
[   48.173405] cgroup: Unknown subsys name 'cpuset'
[   48.188566] cgroup: Unknown subsys name 'rlimit'
2026/01/16 14:56:36 syscalls: 2214
2026/01/16 14:56:36 code coverage: enabled
2026/01/16 14:56:36 comparison tracing: enabled
2026/01/16 14:56:36 extra coverage: enabled
2026/01/16 14:56:36 setuid sandbox: enabled
2026/01/16 14:56:36 namespace sandbox: enabled
2026/01/16 14:56:36 Android sandbox: enabled
2026/01/16 14:56:36 fault injection: enabled
2026/01/16 14:56:36 leak checking: enabled
2026/01/16 14:56:36 net packet injection: enabled
2026/01/16 14:56:36 net device setup: enabled
2026/01/16 14:56:36 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/16 14:56:36 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/16 14:56:36 USB emulation: enabled
2026/01/16 14:56:36 hci packet injection: enabled
2026/01/16 14:56:36 wifi device emulation: enabled
2026/01/16 14:56:36 802.15.4 emulation: enabled
2026/01/16 14:56:36 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/16 14:56:36 fetching corpus: 50, signal 22491/26069 (executing program)
2026/01/16 14:56:37 fetching corpus: 100, signal 40423/45296 (executing program)
2026/01/16 14:56:37 fetching corpus: 150, signal 50361/56514 (executing program)
2026/01/16 14:56:37 fetching corpus: 200, signal 56616/64039 (executing program)
2026/01/16 14:56:37 fetching corpus: 250, signal 61225/69895 (executing program)
2026/01/16 14:56:37 fetching corpus: 300, signal 65707/75548 (executing program)
2026/01/16 14:56:37 fetching corpus: 350, signal 71660/82528 (executing program)
2026/01/16 14:56:37 fetching corpus: 400, signal 74355/86355 (executing program)
2026/01/16 14:56:37 fetching corpus: 450, signal 78167/91142 (executing program)
2026/01/16 14:56:37 fetching corpus: 500, signal 81000/94954 (executing program)
2026/01/16 14:56:37 fetching corpus: 550, signal 84173/99038 (executing program)
2026/01/16 14:56:38 fetching corpus: 600, signal 86707/102572 (executing program)
2026/01/16 14:56:38 fetching corpus: 650, signal 89455/106213 (executing program)
2026/01/16 14:56:38 fetching corpus: 700, signal 90927/108713 (executing program)
2026/01/16 14:56:38 fetching corpus: 750, signal 93180/111802 (executing program)
2026/01/16 14:56:38 fetching corpus: 800, signal 94773/114277 (executing program)
2026/01/16 14:56:38 fetching corpus: 850, signal 96756/117125 (executing program)
2026/01/16 14:56:38 fetching corpus: 900, signal 98905/120044 (executing program)
2026/01/16 14:56:38 fetching corpus: 950, signal 102595/124175 (executing program)
2026/01/16 14:56:38 fetching corpus: 1000, signal 103847/126248 (executing program)
2026/01/16 14:56:39 fetching corpus: 1050, signal 106292/129260 (executing program)
2026/01/16 14:56:39 fetching corpus: 1100, signal 107748/131414 (executing program)
2026/01/16 14:56:39 fetching corpus: 1150, signal 109606/133965 (executing program)
2026/01/16 14:56:39 fetching corpus: 1200, signal 110960/136073 (executing program)
2026/01/16 14:56:39 fetching corpus: 1250, signal 112918/138566 (executing program)
2026/01/16 14:56:39 fetching corpus: 1300, signal 115032/141207 (executing program)
2026/01/16 14:56:39 fetching corpus: 1350, signal 116325/143161 (executing program)
2026/01/16 14:56:39 fetching corpus: 1400, signal 117954/145289 (executing program)
2026/01/16 14:56:39 fetching corpus: 1450, signal 119368/147290 (executing program)
2026/01/16 14:56:40 fetching corpus: 1500, signal 120558/149064 (executing program)
2026/01/16 14:56:40 fetching corpus: 1550, signal 122082/151049 (executing program)
2026/01/16 14:56:40 fetching corpus: 1600, signal 123641/153084 (executing program)
2026/01/16 14:56:40 fetching corpus: 1650, signal 124815/154822 (executing program)
2026/01/16 14:56:40 fetching corpus: 1700, signal 126417/156843 (executing program)
2026/01/16 14:56:40 fetching corpus: 1750, signal 127985/158739 (executing program)
2026/01/16 14:56:40 fetching corpus: 1800, signal 129342/160491 (executing program)
2026/01/16 14:56:40 fetching corpus: 1850, signal 130245/161893 (executing program)
2026/01/16 14:56:40 fetching corpus: 1900, signal 131743/163688 (executing program)
2026/01/16 14:56:41 fetching corpus: 1950, signal 133071/165354 (executing program)
2026/01/16 14:56:41 fetching corpus: 2000, signal 133803/166665 (executing program)
2026/01/16 14:56:41 fetching corpus: 2050, signal 134607/167999 (executing program)
2026/01/16 14:56:41 fetching corpus: 2100, signal 136117/169760 (executing program)
2026/01/16 14:56:41 fetching corpus: 2150, signal 138643/172019 (executing program)
2026/01/16 14:56:41 fetching corpus: 2200, signal 140092/173646 (executing program)
2026/01/16 14:56:41 fetching corpus: 2250, signal 140925/174869 (executing program)
2026/01/16 14:56:41 fetching corpus: 2300, signal 141986/176162 (executing program)
2026/01/16 14:56:41 fetching corpus: 2350, signal 143556/177780 (executing program)
2026/01/16 14:56:42 fetching corpus: 2400, signal 144303/178871 (executing program)
2026/01/16 14:56:42 fetching corpus: 2450, signal 144952/179944 (executing program)
2026/01/16 14:56:42 fetching corpus: 2500, signal 145509/180939 (executing program)
2026/01/16 14:56:42 fetching corpus: 2550, signal 146305/182070 (executing program)
2026/01/16 14:56:42 fetching corpus: 2600, signal 146922/183097 (executing program)
2026/01/16 14:56:42 fetching corpus: 2650, signal 147773/184287 (executing program)
2026/01/16 14:56:42 fetching corpus: 2700, signal 148799/185490 (executing program)
2026/01/16 14:56:42 fetching corpus: 2750, signal 149567/186556 (executing program)
2026/01/16 14:56:42 fetching corpus: 2800, signal 150417/187602 (executing program)
2026/01/16 14:56:42 fetching corpus: 2850, signal 151332/188699 (executing program)
2026/01/16 14:56:42 fetching corpus: 2900, signal 151876/189622 (executing program)
2026/01/16 14:56:43 fetching corpus: 2950, signal 152682/190604 (executing program)
2026/01/16 14:56:43 fetching corpus: 3000, signal 153411/191598 (executing program)
2026/01/16 14:56:43 fetching corpus: 3050, signal 154145/192595 (executing program)
2026/01/16 14:56:43 fetching corpus: 3100, signal 155067/193614 (executing program)
2026/01/16 14:56:43 fetching corpus: 3150, signal 155793/194481 (executing program)
2026/01/16 14:56:43 fetching corpus: 3200, signal 156724/195441 (executing program)
2026/01/16 14:56:43 fetching corpus: 3250, signal 157632/196419 (executing program)
2026/01/16 14:56:43 fetching corpus: 3300, signal 158192/197239 (executing program)
2026/01/16 14:56:43 fetching corpus: 3350, signal 158868/198090 (executing program)
2026/01/16 14:56:44 fetching corpus: 3400, signal 159743/199050 (executing program)
2026/01/16 14:56:44 fetching corpus: 3450, signal 160367/199881 (executing program)
2026/01/16 14:56:44 fetching corpus: 3500, signal 160926/200624 (executing program)
2026/01/16 14:56:44 fetching corpus: 3550, signal 162031/201538 (executing program)
2026/01/16 14:56:44 fetching corpus: 3600, signal 162713/202326 (executing program)
2026/01/16 14:56:44 fetching corpus: 3650, signal 163368/203134 (executing program)
2026/01/16 14:56:44 fetching corpus: 3700, signal 163992/203881 (executing program)
2026/01/16 14:56:44 fetching corpus: 3750, signal 164668/204592 (executing program)
2026/01/16 14:56:44 fetching corpus: 3800, signal 165230/205255 (executing program)
2026/01/16 14:56:45 fetching corpus: 3850, signal 166073/206014 (executing program)
2026/01/16 14:56:45 fetching corpus: 3900, signal 166606/206673 (executing program)
2026/01/16 14:56:45 fetching corpus: 3950, signal 167046/207322 (executing program)
2026/01/16 14:56:45 fetching corpus: 4000, signal 167742/208008 (executing program)
2026/01/16 14:56:45 fetching corpus: 4050, signal 168269/208653 (executing program)
2026/01/16 14:56:45 fetching corpus: 4100, signal 168744/209263 (executing program)
2026/01/16 14:56:45 fetching corpus: 4150, signal 169305/209896 (executing program)
2026/01/16 14:56:45 fetching corpus: 4200, signal 169820/210474 (executing program)
2026/01/16 14:56:45 fetching corpus: 4250, signal 170391/211079 (executing program)
2026/01/16 14:56:45 fetching corpus: 4300, signal 170945/211654 (executing program)
2026/01/16 14:56:46 fetching corpus: 4350, signal 171572/212284 (executing program)
2026/01/16 14:56:46 fetching corpus: 4400, signal 172123/212836 (executing program)
2026/01/16 14:56:46 fetching corpus: 4450, signal 172459/213353 (executing program)
2026/01/16 14:56:46 fetching corpus: 4500, signal 172782/213893 (executing program)
2026/01/16 14:56:46 fetching corpus: 4550, signal 173375/214456 (executing program)
2026/01/16 14:56:46 fetching corpus: 4600, signal 173803/214959 (executing program)
2026/01/16 14:56:46 fetching corpus: 4650, signal 174269/215499 (executing program)
2026/01/16 14:56:46 fetching corpus: 4700, signal 174732/216015 (executing program)
2026/01/16 14:56:46 fetching corpus: 4750, signal 175317/216531 (executing program)
2026/01/16 14:56:46 fetching corpus: 4800, signal 175915/217013 (executing program)
2026/01/16 14:56:46 fetching corpus: 4850, signal 176287/217489 (executing program)
2026/01/16 14:56:47 fetching corpus: 4900, signal 176549/217918 (executing program)
2026/01/16 14:56:47 fetching corpus: 4950, signal 176963/218359 (executing program)
2026/01/16 14:56:47 fetching corpus: 5000, signal 177539/218833 (executing program)
2026/01/16 14:56:47 fetching corpus: 5050, signal 178080/219270 (executing program)
2026/01/16 14:56:47 fetching corpus: 5100, signal 178401/219696 (executing program)
2026/01/16 14:56:47 fetching corpus: 5150, signal 178911/220133 (executing program)
2026/01/16 14:56:47 fetching corpus: 5200, signal 179323/220522 (executing program)
2026/01/16 14:56:47 fetching corpus: 5250, signal 179800/220953 (executing program)
2026/01/16 14:56:48 fetching corpus: 5300, signal 180517/221358 (executing program)
2026/01/16 14:56:48 fetching corpus: 5350, signal 180836/221733 (executing program)
2026/01/16 14:56:48 fetching corpus: 5400, signal 181236/222129 (executing program)
2026/01/16 14:56:48 fetching corpus: 5450, signal 181704/222508 (executing program)
2026/01/16 14:56:48 fetching corpus: 5500, signal 182255/222532 (executing program)
2026/01/16 14:56:48 fetching corpus: 5550, signal 182818/222532 (executing program)
2026/01/16 14:56:48 fetching corpus: 5600, signal 183117/222538 (executing program)
2026/01/16 14:56:48 fetching corpus: 5650, signal 183595/222538 (executing program)
2026/01/16 14:56:48 fetching corpus: 5700, signal 184077/222544 (executing program)
2026/01/16 14:56:49 fetching corpus: 5750, signal 184492/222547 (executing program)
2026/01/16 14:56:49 fetching corpus: 5800, signal 185193/222547 (executing program)
2026/01/16 14:56:49 fetching corpus: 5850, signal 185779/222551 (executing program)
2026/01/16 14:56:49 fetching corpus: 5900, signal 186249/222551 (executing program)
2026/01/16 14:56:49 fetching corpus: 5950, signal 186853/222552 (executing program)
2026/01/16 14:56:49 fetching corpus: 6000, signal 187166/222552 (executing program)
2026/01/16 14:56:49 fetching corpus: 6050, signal 187445/222552 (executing program)
2026/01/16 14:56:49 fetching corpus: 6100, signal 187809/222575 (executing program)
2026/01/16 14:56:49 fetching corpus: 6150, signal 188213/222576 (executing program)
2026/01/16 14:56:50 fetching corpus: 6200, signal 188580/222602 (executing program)
2026/01/16 14:56:50 fetching corpus: 6250, signal 188962/222607 (executing program)
2026/01/16 14:56:50 fetching corpus: 6300, signal 189384/222607 (executing program)
2026/01/16 14:56:50 fetching corpus: 6350, signal 189973/222609 (executing program)
2026/01/16 14:56:50 fetching corpus: 6400, signal 190275/222609 (executing program)
2026/01/16 14:56:50 fetching corpus: 6450, signal 190669/222609 (executing program)
2026/01/16 14:56:50 fetching corpus: 6500, signal 191070/222613 (executing program)
2026/01/16 14:56:50 fetching corpus: 6550, signal 191502/222668 (executing program)
2026/01/16 14:56:50 fetching corpus: 6600, signal 191804/222673 (executing program)
2026/01/16 14:56:50 fetching corpus: 6650, signal 192270/222679 (executing program)
2026/01/16 14:56:50 fetching corpus: 6700, signal 192506/222688 (executing program)
2026/01/16 14:56:51 fetching corpus: 6750, signal 192808/222688 (executing program)
2026/01/16 14:56:51 fetching corpus: 6800, signal 193210/222689 (executing program)
2026/01/16 14:56:51 fetching corpus: 6850, signal 193789/222689 (executing program)
2026/01/16 14:56:51 fetching corpus: 6900, signal 193959/222698 (executing program)
2026/01/16 14:56:51 fetching corpus: 6950, signal 194231/222709 (executing program)
2026/01/16 14:56:51 fetching corpus: 7000, signal 194689/222709 (executing program)
2026/01/16 14:56:51 fetching corpus: 7050, signal 195140/222709 (executing program)
2026/01/16 14:56:51 fetching corpus: 7100, signal 195426/222710 (executing program)
2026/01/16 14:56:51 fetching corpus: 7150, signal 195762/222711 (executing program)
2026/01/16 14:56:51 fetching corpus: 7200, signal 196117/222711 (executing program)
2026/01/16 14:56:51 fetching corpus: 7250, signal 196511/222711 (executing program)
2026/01/16 14:56:52 fetching corpus: 7300, signal 196840/222711 (executing program)
2026/01/16 14:56:52 fetching corpus: 7350, signal 197103/222718 (executing program)
2026/01/16 14:56:52 fetching corpus: 7400, signal 197478/222721 (executing program)
2026/01/16 14:56:52 fetching corpus: 7450, signal 197756/222725 (executing program)
2026/01/16 14:56:52 fetching corpus: 7500, signal 198083/222725 (executing program)
2026/01/16 14:56:52 fetching corpus: 7550, signal 198413/222725 (executing program)
2026/01/16 14:56:52 fetching corpus: 7600, signal 198767/222727 (executing program)
2026/01/16 14:56:52 fetching corpus: 7650, signal 199055/222727 (executing program)
2026/01/16 14:56:52 fetching corpus: 7700, signal 199467/222732 (executing program)
2026/01/16 14:56:53 fetching corpus: 7750, signal 199857/222739 (executing program)
2026/01/16 14:56:53 fetching corpus: 7800, signal 200217/222739 (executing program)
2026/01/16 14:56:53 fetching corpus: 7850, signal 200496/222739 (executing program)
2026/01/16 14:56:53 fetching corpus: 7900, signal 200926/222744 (executing program)
2026/01/16 14:56:53 fetching corpus: 7950, signal 201257/222746 (executing program)
2026/01/16 14:56:53 fetching corpus: 8000, signal 201534/222748 (executing program)
2026/01/16 14:56:53 fetching corpus: 8050, signal 201800/222748 (executing program)
2026/01/16 14:56:53 fetching corpus: 8100, signal 202010/222748 (executing program)
2026/01/16 14:56:53 fetching corpus: 8150, signal 202268/222748 (executing program)
2026/01/16 14:56:53 fetching corpus: 8200, signal 202675/222748 (executing program)
2026/01/16 14:56:54 fetching corpus: 8250, signal 203039/222754 (executing program)
2026/01/16 14:56:54 fetching corpus: 8300, signal 203309/222755 (executing program)
2026/01/16 14:56:54 fetching corpus: 8350, signal 203635/222757 (executing program)
2026/01/16 14:56:54 fetching corpus: 8400, signal 203948/222759 (executing program)
2026/01/16 14:56:54 fetching corpus: 8450, signal 204229/222759 (executing program)
2026/01/16 14:56:54 fetching corpus: 8500, signal 204474/222778 (executing program)
2026/01/16 14:56:54 fetching corpus: 8550, signal 204765/222778 (executing program)
2026/01/16 14:56:54 fetching corpus: 8600, signal 205078/222778 (executing program)
2026/01/16 14:56:54 fetching corpus: 8650, signal 205304/222780 (executing program)
2026/01/16 14:56:54 fetching corpus: 8700, signal 205600/222780 (executing program)
2026/01/16 14:56:55 fetching corpus: 8750, signal 205791/222780 (executing program)
2026/01/16 14:56:55 fetching corpus: 8800, signal 206047/222791 (executing program)
2026/01/16 14:56:55 fetching corpus: 8850, signal 206335/222794 (executing program)
2026/01/16 14:56:55 fetching corpus: 8900, signal 206610/222795 (executing program)
2026/01/16 14:56:55 fetching corpus: 8950, signal 206796/222795 (executing program)
2026/01/16 14:56:55 fetching corpus: 9000, signal 207025/222795 (executing program)
2026/01/16 14:56:55 fetching corpus: 9050, signal 207243/222795 (executing program)
2026/01/16 14:56:55 fetching corpus: 9100, signal 207590/222795 (executing program)
2026/01/16 14:56:55 fetching corpus: 9150, signal 207868/222795 (executing program)
2026/01/16 14:56:55 fetching corpus: 9200, signal 208103/222795 (executing program)
2026/01/16 14:56:56 fetching corpus: 9250, signal 208395/222797 (executing program)
2026/01/16 14:56:56 fetching corpus: 9300, signal 208646/222797 (executing program)
2026/01/16 14:56:56 fetching corpus: 9350, signal 208828/222797 (executing program)
2026/01/16 14:56:56 fetching corpus: 9400, signal 209064/222797 (executing program)
2026/01/16 14:56:56 fetching corpus: 9450, signal 209354/222797 (executing program)
2026/01/16 14:56:56 fetching corpus: 9500, signal 209619/222797 (executing program)
2026/01/16 14:56:56 fetching corpus: 9550, signal 209878/222799 (executing program)
2026/01/16 14:56:56 fetching corpus: 9600, signal 210056/222801 (executing program)
2026/01/16 14:56:56 fetching corpus: 9650, signal 210391/222801 (executing program)
2026/01/16 14:56:57 fetching corpus: 9700, signal 210704/222801 (executing program)
2026/01/16 14:56:57 fetching corpus: 9750, signal 210937/222802 (executing program)
2026/01/16 14:56:57 fetching corpus: 9800, signal 211263/222803 (executing program)
2026/01/16 14:56:57 fetching corpus: 9850, signal 211507/222811 (executing program)
2026/01/16 14:56:57 fetching corpus: 9900, signal 211946/222812 (executing program)
2026/01/16 14:56:57 fetching corpus: 9950, signal 212115/222812 (executing program)
2026/01/16 14:56:57 fetching corpus: 10000, signal 212285/222812 (executing program)
2026/01/16 14:56:57 fetching corpus: 10050, signal 212456/222812 (executing program)
2026/01/16 14:56:57 fetching corpus: 10100, signal 212674/222818 (executing program)
2026/01/16 14:56:57 fetching corpus: 10150, signal 212907/222820 (executing program)
2026/01/16 14:56:58 fetching corpus: 10200, signal 213475/222821 (executing program)
2026/01/16 14:56:58 fetching corpus: 10250, signal 213729/222821 (executing program)
2026/01/16 14:56:58 fetching corpus: 10300, signal 214018/222822 (executing program)
2026/01/16 14:56:58 fetching corpus: 10350, signal 214236/222823 (executing program)
2026/01/16 14:56:58 fetching corpus: 10400, signal 214529/222831 (executing program)
2026/01/16 14:56:58 fetching corpus: 10450, signal 214799/222831 (executing program)
2026/01/16 14:56:58 fetching corpus: 10500, signal 215093/222831 (executing program)
2026/01/16 14:56:58 fetching corpus: 10550, signal 215281/222831 (executing program)
2026/01/16 14:56:59 fetching corpus: 10600, signal 215440/222838 (executing program)
2026/01/16 14:56:59 fetching corpus: 10650, signal 215848/222838 (executing program)
2026/01/16 14:56:59 fetching corpus: 10700, signal 216103/222838 (executing program)
2026/01/16 14:56:59 fetching corpus: 10750, signal 216322/222838 (executing program)
2026/01/16 14:56:59 fetching corpus: 10800, signal 216551/222842 (executing program)
2026/01/16 14:56:59 fetching corpus: 10850, signal 216755/222842 (executing program)
2026/01/16 14:56:59 fetching corpus: 10900, signal 216976/222842 (executing program)
2026/01/16 14:56:59 fetching corpus: 10950, signal 217159/222842 (executing program)
2026/01/16 14:56:59 fetching corpus: 11000, signal 217833/222842 (executing program)
2026/01/16 14:57:00 fetching corpus: 11050, signal 218023/222843 (executing program)
2026/01/16 14:57:00 fetching corpus: 11100, signal 218272/222843 (executing program)
2026/01/16 14:57:00 fetching corpus: 11150, signal 218526/222843 (executing program)
2026/01/16 14:57:00 fetching corpus: 11200, signal 218854/222843 (executing program)
2026/01/16 14:57:00 fetching corpus: 11250, signal 219088/222843 (executing program)
2026/01/16 14:57:00 fetching corpus: 11300, signal 219369/222843 (executing program)
2026/01/16 14:57:00 fetching corpus: 11350, signal 219652/222844 (executing program)
2026/01/16 14:57:00 fetching corpus: 11400, signal 219856/222844 (executing program)
2026/01/16 14:57:00 fetching corpus: 11450, signal 220094/222844 (executing program)
2026/01/16 14:57:01 fetching corpus: 11500, signal 220283/222844 (executing program)
2026/01/16 14:57:01 fetching corpus: 11550, signal 220442/222849 (executing program)
2026/01/16 14:57:01 fetching corpus: 11600, signal 220732/222849 (executing program)
2026/01/16 14:57:01 fetching corpus: 11650, signal 220941/222849 (executing program)
2026/01/16 14:57:01 fetching corpus: 11700, signal 221145/222849 (executing program)
2026/01/16 14:57:01 fetching corpus: 11734, signal 221282/222850 (executing program)
2026/01/16 14:57:01 fetching corpus: 11734, signal 221282/222850 (executing program)
2026/01/16 14:57:03 starting 8 fuzzer processes
14:57:03 executing program 0:
syz_open_dev$vcsu(&(0x7f00000001c0), 0xffffffffffffffff, 0x612c02e2d98e1366)

14:57:03 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FIONREAD(r0, 0x5602, &(0x7f0000000080))

14:57:03 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x5412, 0x8000000000000)

14:57:03 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "bc0330c33da90abd3b2fef784ce168da86f58aa2b50f68ac994614fae41d1c7bb46c413da7cb2fe39cd2feb36de1b76d7e89c58515f940893b0c3fbfd9eacadc"}, 0x48, r2)
keyctl$chown(0x4, r3, 0x0, 0x0)

[   84.287664] audit: type=1400 audit(1768575423.935:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
14:57:03 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe)

14:57:03 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:03 executing program 6:
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

14:57:04 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

[   85.524844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.535494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.537125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.541108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.545119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.548862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   85.553997] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   85.557502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.564415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   85.569362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.572315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   85.577377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   85.582088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.592430] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   85.595907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   85.604857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.617694] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.619587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   85.640949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   85.647072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   85.750040] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.759314] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   85.760800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   85.763297] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.767116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   85.768354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   85.773629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   85.775867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   85.780500] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   85.782024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   85.788879] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   85.792030] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   85.793957] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   85.798216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   85.817086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   85.823545] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   85.839211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   85.843070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   85.847436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   85.849168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   87.623332] Bluetooth: hci0: command tx timeout
[   87.623974] Bluetooth: hci2: command tx timeout
[   87.624438] Bluetooth: hci1: command tx timeout
[   87.684835] Bluetooth: hci3: command tx timeout
[   87.877230] Bluetooth: hci7: command tx timeout
[   87.877816] Bluetooth: hci4: command tx timeout
[   87.877891] Bluetooth: hci6: command tx timeout
[   87.941753] Bluetooth: hci5: command tx timeout
[   89.668775] Bluetooth: hci2: command tx timeout
[   89.669222] Bluetooth: hci1: command tx timeout
[   89.669372] Bluetooth: hci0: command tx timeout
[   89.734696] Bluetooth: hci3: command tx timeout
[   89.925806] Bluetooth: hci6: command tx timeout
[   89.926263] Bluetooth: hci7: command tx timeout
[   89.926638] Bluetooth: hci4: command tx timeout
[   89.988807] Bluetooth: hci5: command tx timeout
[   91.722695] Bluetooth: hci1: command tx timeout
[   91.725954] Bluetooth: hci2: command tx timeout
[   91.726460] Bluetooth: hci0: command tx timeout
[   91.785220] Bluetooth: hci3: command tx timeout
[   91.986154] Bluetooth: hci4: command tx timeout
[   91.986602] Bluetooth: hci7: command tx timeout
[   91.993884] Bluetooth: hci6: command tx timeout
[   92.041216] Bluetooth: hci5: command tx timeout
[   93.765709] Bluetooth: hci0: command tx timeout
[   93.765763] Bluetooth: hci1: command tx timeout
[   93.766595] Bluetooth: hci2: command tx timeout
[   93.829289] Bluetooth: hci3: command tx timeout
[   94.020784] Bluetooth: hci6: command tx timeout
[   94.021247] Bluetooth: hci7: command tx timeout
[   94.021632] Bluetooth: hci4: command tx timeout
[   94.084834] Bluetooth: hci5: command tx timeout
[  118.247698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.254186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.401907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.402484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.420970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.421644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.518696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.519313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.591320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.591957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.637834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.638428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.660280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.660882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.736802] audit: type=1400 audit(1768575458.383:8): avc:  denied  { open } for  pid=3867 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.738617] audit: type=1400 audit(1768575458.384:9): avc:  denied  { kernel } for  pid=3867 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  118.761017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.761605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.806514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.807143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.863999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.864621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.917001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.917801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.944743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.945324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.963804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.964398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.991290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.991887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.072633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.073952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.142966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.143541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
14:57:38 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:38 executing program 0:
syz_open_dev$vcsu(&(0x7f00000001c0), 0xffffffffffffffff, 0x612c02e2d98e1366)

14:57:38 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

14:57:38 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:38 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe)

14:57:38 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FIONREAD(r0, 0x5602, &(0x7f0000000080))

14:57:38 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "bc0330c33da90abd3b2fef784ce168da86f58aa2b50f68ac994614fae41d1c7bb46c413da7cb2fe39cd2feb36de1b76d7e89c58515f940893b0c3fbfd9eacadc"}, 0x48, r2)
keyctl$chown(0x4, r3, 0x0, 0x0)

14:57:38 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x5412, 0x8000000000000)

14:57:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FIONREAD(r0, 0x5602, &(0x7f0000000080))

14:57:39 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe)

14:57:39 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

14:57:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:39 executing program 0:
syz_open_dev$vcsu(&(0x7f00000001c0), 0xffffffffffffffff, 0x612c02e2d98e1366)

14:57:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "bc0330c33da90abd3b2fef784ce168da86f58aa2b50f68ac994614fae41d1c7bb46c413da7cb2fe39cd2feb36de1b76d7e89c58515f940893b0c3fbfd9eacadc"}, 0x48, r2)
keyctl$chown(0x4, r3, 0x0, 0x0)

14:57:39 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:39 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x5412, 0x8000000000000)

14:57:39 executing program 1:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FIONREAD(r0, 0x5602, &(0x7f0000000080))

14:57:39 executing program 7:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)

14:57:39 executing program 0:
syz_open_dev$vcsu(&(0x7f00000001c0), 0xffffffffffffffff, 0x612c02e2d98e1366)

14:57:39 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:39 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents(r0, &(0x7f0000001f00)=""/4094, 0xffe)

14:57:39 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCXONC(r0, 0x5412, 0x8000000000000)

14:57:39 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "bc0330c33da90abd3b2fef784ce168da86f58aa2b50f68ac994614fae41d1c7bb46c413da7cb2fe39cd2feb36de1b76d7e89c58515f940893b0c3fbfd9eacadc"}, 0x48, r2)
keyctl$chown(0x4, r3, 0x0, 0x0)

14:57:39 executing program 6:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3ff)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9)

14:57:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')

14:57:39 executing program 0:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@reiserfs_3={0xc}, 0x0, 0x2)

14:57:39 executing program 6:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100), 0x4)

14:57:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x18, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}]}, 0x18}], 0x1}, 0x0)

14:57:39 executing program 2:
clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x58)

14:57:39 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00')

14:57:39 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4096, 0x1000)

14:57:39 executing program 1:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
fchmod(r0, 0x0)

14:57:39 executing program 6:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100), 0x4)

14:57:39 executing program 0:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@reiserfs_3={0xc}, 0x0, 0x2)

14:57:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')

14:57:39 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00')

14:57:39 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')

14:57:39 executing program 0:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@reiserfs_3={0xc}, 0x0, 0x2)

14:57:39 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000080)="c1")

14:57:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x18, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}]}, 0x18}], 0x1}, 0x0)

14:57:39 executing program 2:
clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x58)

14:57:39 executing program 6:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100), 0x4)

14:57:40 executing program 2:
clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x58)

14:57:40 executing program 0:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@reiserfs_3={0xc}, 0x0, 0x2)

14:57:40 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4096, 0x1000)

14:57:40 executing program 6:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000100), 0x4)

14:57:40 executing program 1:
syz_io_uring_setup(0xffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

14:57:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')

14:57:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x18, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}]}, 0x18}], 0x1}, 0x0)

14:57:40 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00')

14:57:40 executing program 1:
syz_io_uring_setup(0xffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

14:57:40 executing program 7:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00')

14:57:40 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4096, 0x1000)

14:57:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x18, 0x76, 0xffffffffffffffff, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}]}, 0x18}], 0x1}, 0x0)

14:57:40 executing program 2:
clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x58)

14:57:40 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[], [{@seclabel}]})

14:57:40 executing program 1:
syz_io_uring_setup(0xffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

14:57:40 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0)

14:57:40 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$read(0xb, r0, &(0x7f00000003c0)=""/4096, 0x1000)

14:57:40 executing program 1:
syz_io_uring_setup(0xffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100))

14:57:40 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0)

14:57:40 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[], [{@seclabel}]})

14:57:40 executing program 6:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d07, &(0x7f0000000280))

14:57:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

14:57:40 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

14:57:40 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x3, 0x0, 0x0)

14:57:40 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

14:57:40 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0)

14:57:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7000fa", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[@routing={0x0, 0x0, 0x1, 0x3}]}}}}}, 0x0)

14:57:40 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

14:57:40 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[], [{@seclabel}]})

14:57:40 executing program 7:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f0000000080)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0)

14:57:40 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

14:57:40 executing program 6:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d07, &(0x7f0000000280))

14:57:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7000fa", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[@routing={0x0, 0x0, 0x1, 0x3}]}}}}}, 0x0)

14:57:40 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x3, 0x0, 0x0)

14:57:40 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

14:57:40 executing program 7:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x0, 0x80000}], 0x0)

14:57:40 executing program 7:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x0, 0x80000}], 0x0)

14:57:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7000fa", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[@routing={0x0, 0x0, 0x1, 0x3}]}}}}}, 0x0)

14:57:40 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

14:57:40 executing program 4:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
pipe2(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

14:57:40 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x3, 0x0, 0x0)

14:57:40 executing program 6:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d07, &(0x7f0000000280))

14:57:40 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[], [{@seclabel}]})

14:57:40 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

14:57:40 executing program 7:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x0, 0x80000}], 0x0)

14:57:40 executing program 1:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7000fa", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2, {[@routing={0x0, 0x0, 0x1, 0x3}]}}}}}, 0x0)

14:57:40 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)

14:57:40 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

14:57:40 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x3, 0x0, 0x0)

14:57:41 executing program 6:
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40603d07, &(0x7f0000000280))

14:57:41 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

14:57:41 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup2(r0, r0)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3c14c384a0d7bceb}}}, 0xb8}}, 0x0)

14:57:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2, 0x0}])

14:57:41 executing program 7:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x8, 0x0, 0x80000}], 0x0)

14:57:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@loopback}, {@in=@loopback, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(lrw-camellia-aesni-avx2,sha224-avx)\x00'}}}, @extra_flags={0x8}]}, 0x144}}, 0x0)

14:57:41 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

14:57:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x2}})

14:57:41 executing program 7:
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r0, r2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54)
syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17)
syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11)
r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000)
faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"])
syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91)

14:57:41 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x28)

14:57:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2, 0x0}])

[  121.498975] Bluetooth: hci7: unexpected cc 0x2029 length: 16 > 1
14:57:41 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@loopback}, {@in=@loopback, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(lrw-camellia-aesni-avx2,sha224-avx)\x00'}}}, @extra_flags={0x8}]}, 0x144}}, 0x0)

14:57:41 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x2}})

14:57:41 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup2(r0, r0)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3c14c384a0d7bceb}}}, 0xb8}}, 0x0)

14:57:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2, 0x0}])

[  121.611799] Bluetooth: hci7: ACL packet for unknown connection handle 2745
[  121.613057] Bluetooth: hci7: ISO packet for unknown connection handle 1106
[  122.332835] Bluetooth: hci7: unexpected cc 0x2029 length: 16 > 1
[  122.338282] Bluetooth: hci7: ACL packet for unknown connection handle 2745
[  122.340839] Bluetooth: hci7: ISO packet for unknown connection handle 1106
14:57:42 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup2(r0, r0)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3c14c384a0d7bceb}}}, 0xb8}}, 0x0)

14:57:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

14:57:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@loopback}, {@in=@loopback, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(lrw-camellia-aesni-avx2,sha224-avx)\x00'}}}, @extra_flags={0x8}]}, 0x144}}, 0x0)

14:57:42 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
io_setup(0x1, &(0x7f00000001c0)=<r1=>0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r2, 0x0}])

14:57:42 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x2}})

14:57:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x28)

14:57:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

14:57:42 executing program 7:
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r0, r2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54)
syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75b8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9708cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f206"], 0x17)
syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11)
r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000)
faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"])
syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91)

14:57:42 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = dup2(r0, r0)
sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3c14c384a0d7bceb}}}, 0xb8}}, 0x0)

[  122.449304] Bluetooth: hci7: unexpected cc 0x2029 length: 16 > 1
14:57:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=@newsa={0x144, 0x10, 0x9063c8f45262bcb, 0x0, 0x0, {{@in6=@private1, @in=@loopback}, {@in=@loopback, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'gcm_base(lrw-camellia-aesni-avx2,sha224-avx)\x00'}}}, @extra_flags={0x8}]}, 0x144}}, 0x0)

14:57:42 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000002600)=[{&(0x7f0000000080)="ce", 0x1}], 0x1, 0x65, 0x0)

[  122.492203] Bluetooth: hci7: ACL packet for unknown connection handle 2745
[  122.493703] Bluetooth: hci7: ISO packet for unknown connection handle 1106
14:57:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x28)

14:57:42 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x2}})

14:57:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

14:57:42 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000002600)=[{&(0x7f0000000080)="ce", 0x1}], 0x1, 0x65, 0x0)

14:57:42 executing program 2:
clone3(&(0x7f0000000500)={0xa280d300, &(0x7f0000000140)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

14:57:42 executing program 7:
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r0, r2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54)
syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x17)
syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11)
r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000)
faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"])
syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91)

14:57:42 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x1268, &(0x7f0000000180)={@msf, 0x0, 0x0, 0x0})

14:57:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x60}}, 0x0)

14:57:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x4, 0x0, 0x28)

[  122.654177] Bluetooth: hci7: unexpected cc 0x2029 length: 16 > 1
14:57:42 executing program 2:
clone3(&(0x7f0000000500)={0xa280d300, &(0x7f0000000140)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

[  122.696472] Bluetooth: hci7: ACL packet for unknown connection handle 2745
[  122.700131] Bluetooth: hci7: ISO packet for unknown connection handle 1106
14:57:42 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000002600)=[{&(0x7f0000000080)="ce", 0x1}], 0x1, 0x65, 0x0)

14:57:42 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)

14:57:42 executing program 7:
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @HCI_OP_LE_CLEAR_RESOLV_LIST}}, 0x16)
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup3(r0, r2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02b9ca0168c5209845fa35b89e000000000000000500000100"], 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04f906000000043ac4debc30e49132de3f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5fdb02e254c56840b0d4e95dde1e08ff844bc42d62e1006222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x54)
syz_emit_vhci(&(0x7f0000000a00)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="0552748f00ffd1b794010c3a0180cd75b8aa823214dfcc5877c119f436d7a6cfcd07e540ca9ba7e15079a084b55af839f7776d984cb7cc0aaabd54cf2a7d684a623092521febea67509fbd0093beabfee30b036c4c128cdf492f7e4f0a56723fff9fc6c7b7bdbee5503ef72ab64ba35efc026a60d21a3b374df22b60b32d1e967f0014f97b21680b552e4b9f062935144953295e6c7fe661c8c79942eb49c1d62f7a88ce2fe65b937fadba02394acd13e92d02bdb15695f0bdbab4b5e5061a7ab4731d48e897fcc6bfc190ca235e03479fe7572637f9708cadc2dcbdae4008facc7493b6b2dd3f51bcb6db5ea3062e30428ac85dec2c839169f206"], 0x17)
syz_emit_vhci(&(0x7f0000000d40)=ANY=[], 0x11)
r4 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000)
faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x1a1, 0x1a00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a3c28706000000000000006ca5b4958d059e01000000904b6994ac02d56bc9e401e58f3662e60976e153cb15d33c2aea967311cb14552728590650"])
syz_emit_vhci(&(0x7f0000000440)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8d}, "ed0494b8c7c639b6409e0185fbf0e6a279531237860aa9c8a9a56d8ca4b1f253b435b086d1ee39ad26d3436d380f8b6e1e048ca6e882456a84508530ed9c54359a160d18a25bce0facdb83ece65360f33024941fc66a31b9e2c6b25b2da349c30e71a66d1de0b48fde077bc70a0a32d474fc296f7fccbd00f5b599bd15ef7a4c4fb88524cdafd5a724199f224e"}, 0x91)

14:57:42 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:42 executing program 2:
clone3(&(0x7f0000000500)={0xa280d300, &(0x7f0000000140)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

14:57:42 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x1268, &(0x7f0000000180)={@msf, 0x0, 0x0, 0x0})

14:57:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x60}}, 0x0)

[  122.837606] Bluetooth: hci7: unexpected cc 0x2029 length: 16 > 1
14:57:42 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
process_madvise(r1, &(0x7f0000002600)=[{&(0x7f0000000080)="ce", 0x1}], 0x1, 0x65, 0x0)

[  122.864762] Bluetooth: hci7: ACL packet for unknown connection handle 2745
[  122.865438] Bluetooth: hci7: ISO packet for unknown connection handle 1106
14:57:42 executing program 2:
clone3(&(0x7f0000000500)={0xa280d300, &(0x7f0000000140)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000000)=""/238, 0xee, 0x0, 0x0}, 0x58)
pidfd_getfd(r0, 0xffffffffffffffff, 0x0)

14:57:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x60}}, 0x0)

14:57:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x1268, &(0x7f0000000180)={@msf, 0x0, 0x0, 0x0})

14:57:42 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:42 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:42 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000080), 0x4)

14:57:42 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5}]}}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x60}}, 0x0)

14:57:42 executing program 1:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x1268, &(0x7f0000000180)={@msf, 0x0, 0x0, 0x0})

14:57:42 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

14:57:42 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
setresuid(0x0, r0, 0x0)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1)
keyctl$chown(0x4, r2, 0x0, 0x0)

14:57:42 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000080), 0x4)

14:57:42 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffc, 0x0, 0x0)

14:57:42 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:42 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_aout(r0, &(0x7f00000003c0), 0x20)

14:57:42 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000080), 0x4)

14:57:42 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
setresuid(0x0, r0, 0x0)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1)
keyctl$chown(0x4, r2, 0x0, 0x0)

14:57:42 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0)

14:57:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

14:57:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:43 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffc, 0x0, 0x0)

14:57:43 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:43 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x18, &(0x7f0000000080), 0x4)

14:57:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0)

14:57:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
setresuid(0x0, r0, 0x0)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1)
keyctl$chown(0x4, r2, 0x0, 0x0)

14:57:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

14:57:43 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x39, 0x0, 0x0, {{{@in=@local, @in6=@private2}, {@in=@loopback, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, 0x0, 0x7fffffff}}, 0xf8}}, 0x0)
getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@tipc, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)=[{&(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
clock_gettime(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x0, 0x0)
lseek(r1, 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r1, r2], 0x3)

14:57:43 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10)

14:57:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0)

14:57:43 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffc, 0x0, 0x0)

14:57:43 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1000)
setresuid(0x0, r0, 0x0)
r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r1)
keyctl$chown(0x4, r2, 0x0, 0x0)

14:57:43 executing program 3:
syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0)

14:57:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10)

14:57:43 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 3:
syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0)

14:57:43 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r0, 0x400, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@known='user.syz\x00')

14:57:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0xc}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}}, 0x0)

14:57:43 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x0)

14:57:43 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$', 0x1, 0xfffffffffffffffc)
keyctl$KEYCTL_MOVE(0x11, r0, 0xfffffffffffffffc, 0x0, 0x0)

14:57:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000c00))

14:57:43 executing program 3:
syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0)

14:57:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10)

14:57:43 executing program 4:
syz_emit_ethernet(0xa6, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@noop, @lsrr={0x83, 0xb, 0x0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@dev, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2}]}}}}}}, 0x0)

14:57:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0xc}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}}, 0x0)

14:57:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5)
shutdown(r1, 0x1)

14:57:43 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x4000840, &(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10)

14:57:43 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000c00))

14:57:43 executing program 3:
syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "39bcac", 0x0, 0x6, 0x0, @local, @private0, {[@fragment], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {[@exp_smc]}}, {"84aaaa88e6707263bf30808310f753e888b375e56e86789faa211baf2b94b96bad0e2dec7237f5a518330f17079da67c9977b185d671dc4b1d06de4fe8c6fadf671fca5391f89177b4d9638b7c6b379af3afa4c3d066d3d2867487b87b5ce068356a676bd8635a551f6b610b52dfe7ea799186eb221e08c14d448679ee8177c91a5a769ddf48f98ee5e278fe32168ab6f10c5b1ac335a7783c828186bbabf3051bee26b400e7b25539c8dc2c2fa9f76f41b98184b3c46f29b4fe5c35ebe8a0985842f87a31cbc18d5981ac84606091e564f50e"}}}}}}}, 0x0)

14:57:43 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0xc}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}}, 0x0)

14:57:43 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:43 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000c00))

14:57:43 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioperm(0x0, 0x7, 0x7)
ioperm(0x0, 0x200, 0x0)

14:57:43 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5)
shutdown(r1, 0x1)

14:57:43 executing program 4:
syz_emit_ethernet(0xa6, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@noop, @lsrr={0x83, 0xb, 0x0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@dev, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2}]}}}}}}, 0x0)

14:57:43 executing program 4:
syz_emit_ethernet(0xa6, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@noop, @lsrr={0x83, 0xb, 0x0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@dev, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2}]}}}}}}, 0x0)

14:57:44 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 5:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000c00))

14:57:44 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0xc}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x78}}, 0x0)

14:57:44 executing program 4:
syz_emit_ethernet(0xa6, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x15, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local, {[@noop, @lsrr={0x83, 0xb, 0x0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0xf, 0x0, [@dev, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x20, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x2}]}}}}}}, 0x0)

14:57:44 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5)
shutdown(r1, 0x1)

14:57:44 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:57:44 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00h'], 0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

[  124.671189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
14:57:44 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 1:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x5)
shutdown(r1, 0x1)

14:57:44 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 3:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 2:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:57:44 executing program 0:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:57:44 executing program 5:
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x100)
fcntl$setstatus(r1, 0x4, 0x4c000)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0xfffffffffffffc01, [0x8, 0x61, 0xbe8, 0x7, 0x800, 0x80000001]})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x100)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@empty, @private0, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x370009d3)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x100)
sendfile(r4, r5, 0x0, 0x10000)
close_range(r2, 0xffffffffffffffff, 0x0)

14:57:44 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00h'], 0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

14:57:44 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)

14:57:44 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x400d053, r1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001980))

14:57:44 executing program 3:
dup2(0xffffffffffffffff, 0xffffffffffffffff)

14:57:44 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

14:57:44 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

14:57:44 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:44 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0xf641, 0x3}, 0x10)

14:57:44 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00h'], 0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

14:57:44 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)

14:57:44 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:44 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

14:57:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0xf641, 0x3}, 0x10)

14:57:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x400d053, r1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001980))

14:57:45 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

14:57:45 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00h'], 0x8)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)

14:57:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)

14:57:45 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

14:57:45 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff})
fcntl$lock(r0, 0x26, &(0x7f00000000c0))

14:57:45 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)
read(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
lseek(r0, 0x0, 0x4)

14:57:45 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/197, 0xc5)

14:57:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0xf641, 0x3}, 0x10)

14:57:45 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

14:57:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x400d053, r1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001980))

14:57:45 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev2(r0, &(0x7f0000000b80)=[{&(0x7f00000008c0)='!', 0x1}], 0x1, 0x0, 0x0, 0x0)
lseek(r0, 0x0, 0x4)

14:57:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40044591, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:45 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20}}], 0x2, 0x0)

[  125.509377] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[  125.512135] Bluetooth: hci7: Injecting HCI hardware error event
[  125.513073] Bluetooth: hci7: hardware error 0x00
14:57:45 executing program 4:
io_setup(0x8, &(0x7f0000000040)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x53}])

14:57:45 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req={0xf641, 0x3}, 0x10)

14:57:45 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

14:57:45 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
fchown(r0, 0x0, 0xffffffffffffffff)

[  125.624987] 
[  125.625236] =====================================
[  125.625687] WARNING: bad unlock balance detected!
[  125.626149] 6.19.0-rc5-next-20260116 #1 Not tainted
[  125.626643] -------------------------------------
[  125.627103] syz-executor.1/4447 is trying to release lock (rcu_read_lock) at:
[  125.628264] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  125.629964] but there are no more locks to release!
[  125.631189] 
[  125.631189] other info that might help us debug this:
[  125.632847] 4 locks held by syz-executor.1/4447:
[  125.634168]  #0: ffff88800f8803f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  125.636211]  #1: ffff88804b814698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  125.637811]  #2: ffff88800f884950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  125.638663]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  125.639538] 
[  125.639538] stack backtrace:
[  125.639968] CPU: 1 UID: 0 PID: 4447 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  125.639984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  125.639993] Call Trace:
[  125.639997]  <TASK>
[  125.640003]  dump_stack_lvl+0xca/0x120
[  125.640030]  ? __wait_on_freeing_inode+0x105/0x350
[  125.640048]  print_unlock_imbalance_bug+0x118/0x130
[  125.640066]  ? __wait_on_freeing_inode+0x105/0x350
[  125.640083]  lock_release+0x1ee/0x270
[  125.640101]  __wait_on_freeing_inode+0x10a/0x350
[  125.640119]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  125.640138]  ? __pfx_var_wake_function+0x10/0x10
[  125.640159]  ? lock_is_held_type+0x9e/0x120
[  125.640172]  insert_inode_locked+0x25f/0x890
[  125.640193]  __ext4_new_inode+0x223d/0x4cd0
[  125.640214]  ? __pfx___ext4_new_inode+0x10/0x10
[  125.640239]  ? __pfx___dquot_initialize+0x10/0x10
[  125.640262]  ? __pfx_avc_has_perm+0x10/0x10
[  125.640281]  ext4_symlink+0x623/0xb40
[  125.640303]  ? __pfx_ext4_symlink+0x10/0x10
[  125.640322]  ? security_inode_symlink+0x5c/0xe0
[  125.640345]  ? security_inode_symlink+0x66/0xe0
[  125.640369]  vfs_symlink+0x44b/0x840
[  125.640388]  filename_symlinkat+0x158/0x440
[  125.640406]  ? __pfx_filename_symlinkat+0x10/0x10
[  125.640422]  ? strncpy_from_user+0x21b/0x2f0
[  125.640442]  __x64_sys_symlink+0x82/0x110
[  125.640458]  do_syscall_64+0xbf/0x420
[  125.640473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.640488] RIP: 0033:0x7fc16c5c0427
[  125.640498] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.640510] RSP: 002b:00007fff86bad9a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  125.640523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16c5c0427
[  125.640532] RDX: 00007fff86bada87 RSI: 00007fc16c61b019 RDI: 00007fff86bada70
[  125.640541] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff86bad840
[  125.640549] R10: 00007fff86bad6f7 R11: 0000000000000202 R12: 0000000000000001
[  125.640557] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fff86bada70
[  125.640569]  </TASK>
[  125.659464] ------------[ cut here ]------------
[  125.659962] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/4447
[  125.661024] Modules linked in:
[  125.661370] CPU: 1 UID: 0 PID: 4447 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  125.662350] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  125.663169] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  125.663760] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  125.665488] RSP: 0018:ffff88804ac7f9a0 EFLAGS: 00010286
[  125.666031] RAX: 00000000ffffffff RBX: ffff88804a3b9b80 RCX: ffffffff815660f7
[  125.666688] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88804a3b9f7c
[  125.667405] RBP: ffff88804a3b9b80 R08: 0000000000000000 R09: fffffbfff0ba7040
[  125.668133] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804a3b9b80
[  125.668865] R13: 0000000000000001 R14: ffffffff85c0d330 R15: ffff88801ca0cf58
[  125.669533] FS:  000055557a0b4400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  125.670331] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  125.670917] CR2: 00007fc16c640541 CR3: 000000000cf31000 CR4: 0000000000350ef0
[  125.671573] Call Trace:
[  125.671994]  <TASK>
[  125.672803]  __wait_on_freeing_inode+0x10f/0x350
[  125.673573]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  125.674873]  ? __pfx_var_wake_function+0x10/0x10
[  125.676297]  ? lock_is_held_type+0x9e/0x120
[  125.677572]  insert_inode_locked+0x25f/0x890
[  125.679465]  __ext4_new_inode+0x223d/0x4cd0
[  125.682355]  ? __pfx___ext4_new_inode+0x10/0x10
[  125.683804]  ? __pfx___dquot_initialize+0x10/0x10
[  125.684653]  ? __pfx_avc_has_perm+0x10/0x10
[  125.686704]  ext4_symlink+0x623/0xb40
[  125.689317]  ? __pfx_ext4_symlink+0x10/0x10
[  125.690264]  ? security_inode_symlink+0x5c/0xe0
[  125.690928]  ? security_inode_symlink+0x66/0xe0
[  125.692828]  vfs_symlink+0x44b/0x840
[  125.694271]  filename_symlinkat+0x158/0x440
[  125.695549]  ? __pfx_filename_symlinkat+0x10/0x10
[  125.696434]  ? strncpy_from_user+0x21b/0x2f0
[  125.698566]  __x64_sys_symlink+0x82/0x110
[  125.699413]  do_syscall_64+0xbf/0x420
[  125.700341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.700972] RIP: 0033:0x7fc16c5c0427
[  125.701388] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  125.703156] RSP: 002b:00007fff86bad9a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  125.703901] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc16c5c0427
[  125.704573] RDX: 00007fff86bada87 RSI: 00007fc16c61b019 RDI: 00007fff86bada70
[  125.705267] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff86bad840
[  125.705957] R10: 00007fff86bad6f7 R11: 0000000000000202 R12: 0000000000000001
[  125.706595] R13: 0000000000000001 R14: 0000000000000001 R15: 00007fff86bada70
[  125.709545]  </TASK>
[  125.709815] irq event stamp: 185
[  125.710125] hardirqs last  enabled at (185): [<ffffffff84ced36b>] irqentry_exit+0x17b/0x650
[  125.710987] hardirqs last disabled at (184): [<ffffffff84cec06f>] sysvec_apic_timer_interrupt+0xf/0x80
[  125.711946] softirqs last  enabled at (178): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  125.712816] softirqs last disabled at (176): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  125.713695] ---[ end trace 0000000000000000 ]---
14:57:45 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x400d053, r1, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001980))

14:57:45 executing program 4:
io_setup(0x8, &(0x7f0000000040)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x53}])

14:57:45 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
fchown(r0, 0x0, 0xffffffffffffffff)

14:57:45 executing program 2:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0})
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xffffff5d)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/102400, 0x19000)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000019440))

14:57:45 executing program 7:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}]}, 0x18}}, 0x0)

14:57:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40044591, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:45 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "fe0cc378a6a1aef0"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfff, 0x0, "a7428f21c212c921efb318b183fbb7bcb9ed9c"})
io_setup(0x3, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='r', 0x1}])

14:57:45 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

14:57:45 executing program 2:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0})
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xffffff5d)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/102400, 0x19000)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000019440))

14:57:45 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
fchown(r0, 0x0, 0xffffffffffffffff)

14:57:45 executing program 4:
io_setup(0x8, &(0x7f0000000040)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x53}])

14:57:45 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

14:57:45 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "fe0cc378a6a1aef0"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfff, 0x0, "a7428f21c212c921efb318b183fbb7bcb9ed9c"})
io_setup(0x3, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='r', 0x1}])

14:57:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40044591, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:45 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
fchown(r0, 0x0, 0xffffffffffffffff)

14:57:45 executing program 2:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0})
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xffffff5d)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/102400, 0x19000)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000019440))

14:57:45 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "fe0cc378a6a1aef0"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfff, 0x0, "a7428f21c212c921efb318b183fbb7bcb9ed9c"})
io_setup(0x3, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='r', 0x1}])

14:57:45 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

14:57:45 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

14:57:45 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x401d, &(0x7f0000014100))

14:57:45 executing program 4:
io_setup(0x8, &(0x7f0000000040)=<r0=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x1, &(0x7f0000001e00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x53}])

14:57:45 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

14:57:45 executing program 1:
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
ioctl$EVIOCSMASK(r1, 0x40044591, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[  126.094332] loop5: detected capacity change from 0 to 2048
14:57:45 executing program 2:
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x0, 0x0, 0x0})
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xffffff5d)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000040)=""/102400, 0x19000)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000019440))

[  126.116860] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46507!=0)
14:57:45 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "fe0cc378a6a1aef0"})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfff, 0x0, "a7428f21c212c921efb318b183fbb7bcb9ed9c"})
io_setup(0x3, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='r', 0x1}])

14:57:45 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

[  126.154538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
14:57:45 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x1c, r1, 0x301, 0x0, 0x0, {{0x6b}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0)

14:57:45 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

[  126.274099] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
14:57:46 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x401d, &(0x7f0000014100))

14:57:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

14:57:46 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

14:57:46 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

[  126.405219] loop5: detected capacity change from 0 to 2048
[  126.424938] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46507!=0)
14:57:46 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

[  126.449081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
14:57:46 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
lseek(r0, 0x0, 0x4)

14:57:46 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x401d, &(0x7f0000014100))

[  126.538518] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.605016] loop5: detected capacity change from 0 to 2048
[  126.627041] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46507!=0)
[  126.640390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
14:57:46 executing program 6:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 5:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000000020000190000fffe0100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x401d, &(0x7f0000014100))

14:57:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x32, 0x323, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0)

14:57:46 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:46 executing program 4:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040607000000b9e4fc3b927208f2990d37c6f9c2a9fc39be14bb239b3a88ca86d10100"/50], 0x6)
syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYRES64], 0x1004)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
ioctl$TIOCL_SETSEL(r1, 0x5452, &(0x7f0000000000))
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_emit_vhci(&(0x7f0000001b00)=ANY=[@ANYBLOB="b2da5afa6ad811962fafc691f71c5eeb7dbfdf8d25e2e18c3f4646a5789655c732ec7738f87c1e46cfe148ca70ca43888000000000000000184c9711a4a5b3531b50037776a52195bd0553914c53a9ebd87ddeb0f76ec0cd18f38fcdeab77efaf2a0e6747e0dbc16d83da5a641d7ed6d29bd729c7800d43eba52a00ca964a78aa0c8cdefee2ffd7f2d071be2658fff2c74394512442d633b6acd90df5e9bd98cd385d8771b6d31f92f03e06ca8e0e2c27fff00906f7be6a301e03fd75885e503d65ad023528aeb57b45daea4c1f326a501a6295bba29fc3bc9b777a40f6d34e481749d0e3ebe3254e6e82d5aedf23f2300"/255, @ANYBLOB="f5941e7aaa9def654a826bf29b361384174b8caaf6c61920e584bed43a07a02c896ff536aacaca7d8130aaa2758000d4c1fffc5337b0d35ba2776457297d5c67f3c1366b1462a3b30199512cc5a8ed2aa5a51106ee6b12e6d7e1c47126a0ca40f3b314b34582c7c7e2f0f5e9a0599708431e430f1d845fc12595b5eda2c73270b5f95438358c52c2a7c3146da2d901a566161a5f4093d5746c559e0ffedb13b5de072d25fb5428cd07963a72173cc0340f250c8d8ebf334972dbc3dd71cfd24d3b3dff30bdd9be33860aa5df7e03c2a1beadb3da", @ANYRESHEX=r1, @ANYRESDEC, @ANYRES32=0x0, @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="3ca3aa4247eac5abb6ad45ef9c9bd32f5f071f1af88d3fc313407e16d49f6f82616463a1fff61bd4217ac86ff6a0aa90e59faf48639375056046d9889a15a2f682a3ff3ad62ad25f4986354c8a69da00006a311cc9ab7a6cbd2fe73a6182e06b878031f4c720eed513bbffe6b5f20bf4fd43aa13fd27ff15f08f2603862da7459d98cb58252d249afab2bfba1ae2fd121344820f090d59054b38284da20b46", @ANYRES16=r1, @ANYRESDEC, @ANYRESHEX=r2], 0xfffffc5f)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x4}}, '\x00'})
io_submit(0x0, 0x1, &(0x7f0000000640)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xfffc, r1, &(0x7f0000000580)="b4010aef7686dd800db4430c65126677ed27470f0863692141b9b59cd5c2bf9c335f0053cda05165d651dace98a19d84a281ad87ee82745c4fa2eddfe1f871860c892d511216d00c79da80c2be39a20d34b13b857b8ea49f91fa29e53cf131de1b347d33d4167094968b71b2e8e59fe02d6159c605e357227768a8fa5a94e6e7707986", 0x83, 0x9, 0x0, 0x2}])
syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}}}, 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004142a0"], 0x7)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x0)
close(r0)

14:57:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

14:57:46 executing program 1:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed}}}, 0xa)

[  126.688703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.690395] tc_dump_action: action bad kind
[  126.692415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.693801] tc_dump_action: action bad kind
[  126.695650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
14:57:46 executing program 1:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed}}}, 0xa)

14:57:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x32, 0x323, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0)

14:57:46 executing program 6:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000540)=ANY=[])
getdents64(r0, &(0x7f0000000040)=""/204, 0xcc)

[  126.764169] loop5: detected capacity change from 0 to 2048
14:57:46 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x10012, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

14:57:46 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc30cc", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0)

14:57:46 executing program 1:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed}}}, 0xa)

[  126.774453] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46507!=0)
[  126.783355] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  126.803163] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  126.803948] tc_dump_action: action bad kind
14:57:46 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
fadvise64(r0, 0x0, 0x0, 0x0)

[  126.812460] loop6: detected capacity change from 0 to 64
[  126.823821] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
14:57:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040))

[  126.919892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
14:57:46 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x10012, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

14:57:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x32, 0x323, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0)

14:57:46 executing program 1:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed}}}, 0xa)

14:57:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040))

14:57:46 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc30cc", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0)

14:57:46 executing program 6:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

[  127.010680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  127.011491] tc_dump_action: action bad kind
14:57:46 executing program 6:
r0 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = dup(r0)
r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

14:57:46 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc30cc", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0)

14:57:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x28}}, 0x0)

14:57:46 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000002c0))

14:57:46 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x10012, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

14:57:46 executing program 1:
syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0)

14:57:46 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x1c, 0x32, 0x323, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0)

14:57:46 executing program 6:
r0 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = dup(r0)
r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

14:57:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x28}}, 0x0)

[  127.088514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  127.093100] tc_dump_action: action bad kind
14:57:46 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000002c0))

14:57:46 executing program 4:
syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cc30cc", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0)

14:57:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040))

14:57:46 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000380)="cdda7c47556e3e84173484e688a8", 0x10012, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

14:57:46 executing program 1:
syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0)

14:57:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x28}}, 0x0)

14:57:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040))

14:57:46 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
preadv2(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f00000014c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/4092, 0xffc}, {&(0x7f0000000300)=""/47, 0x2f}], 0x6, 0x10000, 0x2, 0x25)

14:57:46 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000002c0))

14:57:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004a00015500000000000000000a"], 0x1c}], 0x1}, 0x0)

14:57:46 executing program 6:
r0 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = dup(r0)
r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

14:57:46 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed}, 0xe)
shutdown(r0, 0x1)

14:57:46 executing program 7:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000002c0))

14:57:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x28, r1, 0x201, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x28}}, 0x0)

14:57:46 executing program 1:
syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0)

14:57:46 executing program 6:
r0 = inotify_init()
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r1 = dup(r0)
r2 = fsopen(&(0x7f0000000040)='pipefs\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

14:57:46 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
preadv2(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f00000014c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/4092, 0xffc}, {&(0x7f0000000300)=""/47, 0x2f}], 0x6, 0x10000, 0x2, 0x25)

14:57:46 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004a00015500000000000000000a"], 0x1c}], 0x1}, 0x0)

14:57:46 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:46 executing program 1:
syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0xb, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @loopback, {[@cipso={0x86, 0x3d, 0x0, [{0x0, 0xc, "ba4906dca0ac3f21ee4d"}, {0x0, 0xa, "0b1bb9011e61db13"}, {0x0, 0xe, "9fb8dedc4ea32f0be3c4157e"}, {0x0, 0xa, "7686fc256818ce19"}, {0x0, 0x9, "20126d234d2862"}]}]}}}}}}}, 0x0)

[  127.621750] Bluetooth: hci7: Opcode 0x0c03 failed: -110
14:57:47 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0)

14:57:47 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed}, 0xe)
shutdown(r0, 0x1)

14:57:47 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_gettime(0x0, &(0x7f0000000000))

14:57:47 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
preadv2(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f00000014c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/4092, 0xffc}, {&(0x7f0000000300)=""/47, 0x2f}], 0x6, 0x10000, 0x2, 0x25)

14:57:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004a00015500000000000000000a"], 0x1c}], 0x1}, 0x0)

14:57:47 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:47 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:47 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0))

14:57:47 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004a00015500000000000000000a"], 0x1c}], 0x1}, 0x0)

14:57:47 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_gettime(0x0, &(0x7f0000000000))

14:57:48 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed}, 0xe)
shutdown(r0, 0x1)

14:57:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0)

14:57:48 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/keycreate\x00', 0x2, 0x0)
preadv2(r0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/111, 0x6f}, {&(0x7f00000014c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/4092, 0xffc}, {&(0x7f0000000300)=""/47, 0x2f}], 0x6, 0x10000, 0x2, 0x25)

14:57:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:48 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0))

14:57:48 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_gettime(0x0, &(0x7f0000000000))

14:57:48 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00')
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x28}}, 0x0)

14:57:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0)

14:57:48 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

14:57:48 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:48 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0))

14:57:48 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, 0x0, &(0x7f0000000100))
timer_gettime(0x0, &(0x7f0000000000))

14:57:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}}, 0x0)

14:57:48 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

14:57:48 executing program 0:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/4096, 0x1000)

14:57:49 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

14:57:49 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000001b00)={0x1f, 0x1, @fixed}, 0xe)
shutdown(r0, 0x1)

14:57:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x13, 0x0, &(0x7f0000000180))

14:57:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0)

14:57:49 executing program 4:
r0 = eventfd(0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:49 executing program 5:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:49 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x80, 0x9, 0x200)

14:57:49 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0))

14:57:49 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:49 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5428, 0x0)

14:57:49 executing program 5:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:49 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x13, 0x0, &(0x7f0000000180))

14:57:49 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0)

14:57:49 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:49 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x80, 0x9, 0x200)

14:57:49 executing program 5:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

[  130.309053] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  130.309740] Bluetooth: hci3: Injecting HCI hardware error event
[  130.310303] Bluetooth: hci3: hardware error 0x00
[  130.436765] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  130.437423] Bluetooth: hci1: Injecting HCI hardware error event
[  130.437996] Bluetooth: hci1: hardware error 0x00
[  130.500759] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  130.501483] Bluetooth: hci2: Injecting HCI hardware error event
[  130.502080] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  130.502789] Bluetooth: hci4: Injecting HCI hardware error event
[  130.503381] Bluetooth: hci4: hardware error 0x00
[  130.503917] Bluetooth: hci2: hardware error 0x00
14:57:50 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:50 executing program 3:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:50 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:50 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x13, 0x0, &(0x7f0000000180))

14:57:50 executing program 5:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:50 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0)

14:57:50 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x80, 0x9, 0x200)

14:57:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x0)

14:57:50 executing program 3:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:50 executing program 4:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:50 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x0)

14:57:50 executing program 7:
creat(&(0x7f0000000080)='./file0\x00', 0x926d875da6ad5cfc)
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

14:57:50 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x13, 0x0, &(0x7f0000000180))

14:57:50 executing program 6:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0)
fallocate(r0, 0x80, 0x9, 0x200)

14:57:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x0)

14:57:50 executing program 1:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r1, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x180}}, 0x0)

14:57:50 executing program 3:
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semop(0x0, &(0x7f00000011c0)=[{}], 0x1f4)
semctl$SEM_STAT(0x0, 0x0, 0x10, 0x0)

14:57:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSIG(r0, 0x40045436, 0x0)

14:57:50 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

14:57:50 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

14:57:50 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x0, @private}})

14:57:50 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:50 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x1)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
pread64(r0, &(0x7f0000000080)=""/38, 0x26, 0x0)

14:57:50 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:50 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146)

14:57:50 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

14:57:50 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x0, @private}})

14:57:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

14:57:50 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a5ebb0440c3943d75022b49464b9", 0xe}], 0x1, &(0x7f0000000640)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}}], 0x2, 0x0)

14:57:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000294e4252f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000a7e870325132510000e87032510300000000002e2e2020202020202020201000a7e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a7e870325132510000e870325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f0000010d00))

14:57:50 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x1)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
pread64(r0, &(0x7f0000000080)=""/38, 0x26, 0x0)

[  131.241744] loop1: detected capacity change from 0 to 128
14:57:50 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

14:57:50 executing program 4:
r0 = getpid()
r1 = pidfd_open(r0, 0x0)
ftruncate(r1, 0xffffffff)

14:57:50 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x0, @private}})

14:57:50 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000294e4252f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000a7e870325132510000e87032510300000000002e2e2020202020202020201000a7e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a7e870325132510000e870325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f0000010d00))

14:57:50 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

[  131.321172] loop1: detected capacity change from 0 to 128
14:57:50 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146)

14:57:50 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

14:57:50 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x1)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
pread64(r0, &(0x7f0000000080)=""/38, 0x26, 0x0)

14:57:51 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a5ebb0440c3943d75022b49464b9", 0xe}], 0x1, &(0x7f0000000640)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}}], 0x2, 0x0)

14:57:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000294e4252f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000a7e870325132510000e87032510300000000002e2e2020202020202020201000a7e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a7e870325132510000e870325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f0000010d00))

14:57:51 executing program 7:
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'sit0\x00', {0x2, 0x0, @private}})

14:57:51 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000123800000007c08000003"], 0x28}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)

14:57:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

14:57:51 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146)

14:57:51 executing program 5:
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
fallocate(r0, 0x41, 0x0, 0x8)

14:57:51 executing program 6:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000200)='N', 0x1, 0x1)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x99ad)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x0, &(0x7f0000000000), 0x0, 0x4)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040))
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x15)
pread64(r0, &(0x7f0000000080)=""/38, 0x26, 0x0)

[  131.536261] loop1: detected capacity change from 0 to 128
14:57:51 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a5ebb0440c3943d75022b49464b9", 0xe}], 0x1, &(0x7f0000000640)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}}], 0x2, 0x0)

14:57:51 executing program 1:
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801002000400000000000000000008000294e4252f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/96, 0x60, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ff056000ffffff09a0000bc0000de0000f000111200113400115600117800119f0ffff0f00"/64, 0x40, 0x400}, {&(0x7f0000010300)="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", 0x120, 0x600}, {&(0x7f0000010500)="2e202020202020202020201000a7e870325132510000e87032510300000000002e2e2020202020202020201000a7e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000a7e870325132510000e870325104001a040000", 0x80, 0x1000}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x1200}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x1800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x3e00}], 0x0, &(0x7f0000010d00))

14:57:51 executing program 5:
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
fallocate(r0, 0x41, 0x0, 0x8)

[  131.613626] loop1: detected capacity change from 0 to 128
14:57:51 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/146)

14:57:51 executing program 6:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)={0x1c, 0x19, 0x1, 0x0, 0x0, "", [@generic="02", @generic="cb2328dd2d049e74"]}, 0x1c}], 0x1}, 0x0)

14:57:51 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000002680)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="a5ebb0440c3943d75022b49464b9", 0xe}], 0x1, &(0x7f0000000640)=[{0x10}, {0x10}], 0x20}}, {{&(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}}], 0x2, 0x0)

14:57:51 executing program 7:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="2000003f8000000006000000600000000f000000000000000100000001000000004000000040000020000020d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)=ANY=[])

14:57:51 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000000))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

14:57:51 executing program 5:
r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0)
fallocate(r0, 0x41, 0x0, 0x8)

14:57:51 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10
VM DIAGNOSIS:
14:57:45  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801bfffb40
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff110037fff69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801bfffb78
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055555b8db400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557a0b4708 CR3=000000000cf2c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804ac7f488
R8 =0000000000000000 R9 =ffffed1001561046 R10=0000000000000020 R11=666666203a312320
R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055557a0b4400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc16c640541 CR3=000000000cf31000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000