Warning: Permanently added '[localhost]:46205' (ECDSA) to the list of known hosts.
2026/01/16 16:16:44 fuzzer started
2026/01/16 16:16:44 dialing manager at localhost:42157
syzkaller login: [   50.329993] cgroup: Unknown subsys name 'net'
[   50.401231] cgroup: Unknown subsys name 'cpuset'
[   50.413074] cgroup: Unknown subsys name 'rlimit'
2026/01/16 16:16:53 syscalls: 2214
2026/01/16 16:16:53 code coverage: enabled
2026/01/16 16:16:53 comparison tracing: enabled
2026/01/16 16:16:53 extra coverage: enabled
2026/01/16 16:16:53 setuid sandbox: enabled
2026/01/16 16:16:53 namespace sandbox: enabled
2026/01/16 16:16:53 Android sandbox: enabled
2026/01/16 16:16:53 fault injection: enabled
2026/01/16 16:16:53 leak checking: enabled
2026/01/16 16:16:53 net packet injection: enabled
2026/01/16 16:16:53 net device setup: enabled
2026/01/16 16:16:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/16 16:16:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/16 16:16:53 USB emulation: enabled
2026/01/16 16:16:53 hci packet injection: enabled
2026/01/16 16:16:53 wifi device emulation: enabled
2026/01/16 16:16:53 802.15.4 emulation: enabled
2026/01/16 16:16:54 fetching corpus: 50, signal 23100/24914 (executing program)
2026/01/16 16:16:54 fetching corpus: 100, signal 36686/40092 (executing program)
2026/01/16 16:16:54 fetching corpus: 150, signal 45997/50864 (executing program)
2026/01/16 16:16:54 fetching corpus: 200, signal 55309/61494 (executing program)
2026/01/16 16:16:54 fetching corpus: 250, signal 61726/69221 (executing program)
2026/01/16 16:16:54 fetching corpus: 300, signal 65137/73971 (executing program)
2026/01/16 16:16:54 fetching corpus: 350, signal 71366/81301 (executing program)
2026/01/16 16:16:55 fetching corpus: 400, signal 75978/86990 (executing program)
2026/01/16 16:16:55 fetching corpus: 450, signal 79378/91548 (executing program)
2026/01/16 16:16:55 fetching corpus: 500, signal 81176/94572 (executing program)
2026/01/16 16:16:55 fetching corpus: 550, signal 84421/98841 (executing program)
2026/01/16 16:16:55 fetching corpus: 600, signal 87540/102938 (executing program)
2026/01/16 16:16:55 fetching corpus: 650, signal 90313/106684 (executing program)
2026/01/16 16:16:55 fetching corpus: 700, signal 94068/111268 (executing program)
2026/01/16 16:16:55 fetching corpus: 750, signal 96581/114718 (executing program)
2026/01/16 16:16:56 fetching corpus: 800, signal 98289/117422 (executing program)
2026/01/16 16:16:56 fetching corpus: 850, signal 99997/120114 (executing program)
2026/01/16 16:16:56 fetching corpus: 900, signal 102008/123028 (executing program)
2026/01/16 16:16:56 fetching corpus: 950, signal 103792/125689 (executing program)
2026/01/16 16:16:56 fetching corpus: 1000, signal 105671/128413 (executing program)
2026/01/16 16:16:56 fetching corpus: 1050, signal 107820/131335 (executing program)
2026/01/16 16:16:56 fetching corpus: 1100, signal 110388/134560 (executing program)
2026/01/16 16:16:56 fetching corpus: 1150, signal 112474/137315 (executing program)
2026/01/16 16:16:56 fetching corpus: 1200, signal 113576/139292 (executing program)
2026/01/16 16:16:57 fetching corpus: 1250, signal 114646/141212 (executing program)
2026/01/16 16:16:57 fetching corpus: 1300, signal 117048/144194 (executing program)
2026/01/16 16:16:57 fetching corpus: 1350, signal 118341/146233 (executing program)
2026/01/16 16:16:57 fetching corpus: 1400, signal 119325/148026 (executing program)
2026/01/16 16:16:57 fetching corpus: 1450, signal 120932/150259 (executing program)
2026/01/16 16:16:57 fetching corpus: 1500, signal 123672/153411 (executing program)
2026/01/16 16:16:57 fetching corpus: 1550, signal 125234/155587 (executing program)
2026/01/16 16:16:57 fetching corpus: 1600, signal 126618/157631 (executing program)
2026/01/16 16:16:58 fetching corpus: 1650, signal 127561/159264 (executing program)
2026/01/16 16:16:58 fetching corpus: 1700, signal 128584/161000 (executing program)
2026/01/16 16:16:58 fetching corpus: 1750, signal 129584/162668 (executing program)
2026/01/16 16:16:58 fetching corpus: 1800, signal 130437/164196 (executing program)
2026/01/16 16:16:58 fetching corpus: 1850, signal 131369/165770 (executing program)
2026/01/16 16:16:58 fetching corpus: 1900, signal 132493/167509 (executing program)
2026/01/16 16:16:58 fetching corpus: 1950, signal 133597/169176 (executing program)
2026/01/16 16:16:58 fetching corpus: 2000, signal 134684/170844 (executing program)
2026/01/16 16:16:59 fetching corpus: 2050, signal 135962/172637 (executing program)
2026/01/16 16:16:59 fetching corpus: 2100, signal 136791/174070 (executing program)
2026/01/16 16:16:59 fetching corpus: 2150, signal 138074/175764 (executing program)
2026/01/16 16:16:59 fetching corpus: 2200, signal 139174/177380 (executing program)
2026/01/16 16:16:59 fetching corpus: 2250, signal 140379/179006 (executing program)
2026/01/16 16:16:59 fetching corpus: 2300, signal 141579/180618 (executing program)
2026/01/16 16:16:59 fetching corpus: 2350, signal 142446/182003 (executing program)
2026/01/16 16:16:59 fetching corpus: 2400, signal 143365/183382 (executing program)
2026/01/16 16:17:00 fetching corpus: 2450, signal 144585/184896 (executing program)
2026/01/16 16:17:00 fetching corpus: 2500, signal 145629/186349 (executing program)
2026/01/16 16:17:00 fetching corpus: 2550, signal 146395/187638 (executing program)
2026/01/16 16:17:00 fetching corpus: 2600, signal 147170/188886 (executing program)
2026/01/16 16:17:00 fetching corpus: 2650, signal 148282/190328 (executing program)
2026/01/16 16:17:00 fetching corpus: 2700, signal 149074/191535 (executing program)
2026/01/16 16:17:00 fetching corpus: 2750, signal 149788/192692 (executing program)
2026/01/16 16:17:00 fetching corpus: 2800, signal 150605/193893 (executing program)
2026/01/16 16:17:00 fetching corpus: 2850, signal 151558/195131 (executing program)
2026/01/16 16:17:00 fetching corpus: 2900, signal 152358/196338 (executing program)
2026/01/16 16:17:01 fetching corpus: 2950, signal 153253/197570 (executing program)
2026/01/16 16:17:01 fetching corpus: 3000, signal 154689/199060 (executing program)
2026/01/16 16:17:01 fetching corpus: 3050, signal 155637/200239 (executing program)
2026/01/16 16:17:01 fetching corpus: 3100, signal 156971/201682 (executing program)
2026/01/16 16:17:01 fetching corpus: 3150, signal 157944/202873 (executing program)
2026/01/16 16:17:01 fetching corpus: 3200, signal 158655/203918 (executing program)
2026/01/16 16:17:01 fetching corpus: 3250, signal 159737/205142 (executing program)
2026/01/16 16:17:02 fetching corpus: 3300, signal 160815/206322 (executing program)
2026/01/16 16:17:02 fetching corpus: 3350, signal 161510/207361 (executing program)
2026/01/16 16:17:02 fetching corpus: 3400, signal 162389/208467 (executing program)
2026/01/16 16:17:02 fetching corpus: 3450, signal 163115/209473 (executing program)
2026/01/16 16:17:02 fetching corpus: 3500, signal 163705/210385 (executing program)
2026/01/16 16:17:02 fetching corpus: 3550, signal 164710/211464 (executing program)
2026/01/16 16:17:02 fetching corpus: 3600, signal 165308/212377 (executing program)
2026/01/16 16:17:02 fetching corpus: 3650, signal 165960/213282 (executing program)
2026/01/16 16:17:03 fetching corpus: 3700, signal 166698/214247 (executing program)
2026/01/16 16:17:03 fetching corpus: 3750, signal 167616/215261 (executing program)
2026/01/16 16:17:03 fetching corpus: 3800, signal 168370/216146 (executing program)
2026/01/16 16:17:03 fetching corpus: 3850, signal 168808/216943 (executing program)
2026/01/16 16:17:03 fetching corpus: 3900, signal 169408/217838 (executing program)
2026/01/16 16:17:03 fetching corpus: 3950, signal 169843/218633 (executing program)
2026/01/16 16:17:03 fetching corpus: 4000, signal 170388/219393 (executing program)
2026/01/16 16:17:03 fetching corpus: 4050, signal 171012/220220 (executing program)
2026/01/16 16:17:04 fetching corpus: 4100, signal 171851/221087 (executing program)
2026/01/16 16:17:04 fetching corpus: 4150, signal 172422/221883 (executing program)
2026/01/16 16:17:04 fetching corpus: 4200, signal 172801/222605 (executing program)
2026/01/16 16:17:04 fetching corpus: 4250, signal 173444/223406 (executing program)
2026/01/16 16:17:04 fetching corpus: 4300, signal 174152/224194 (executing program)
2026/01/16 16:17:04 fetching corpus: 4350, signal 175630/225394 (executing program)
2026/01/16 16:17:04 fetching corpus: 4400, signal 176253/226166 (executing program)
2026/01/16 16:17:04 fetching corpus: 4450, signal 176934/226951 (executing program)
2026/01/16 16:17:05 fetching corpus: 4500, signal 177501/227659 (executing program)
2026/01/16 16:17:05 fetching corpus: 4550, signal 178032/228307 (executing program)
2026/01/16 16:17:05 fetching corpus: 4600, signal 178506/228956 (executing program)
2026/01/16 16:17:05 fetching corpus: 4650, signal 178890/229625 (executing program)
2026/01/16 16:17:05 fetching corpus: 4700, signal 179778/230402 (executing program)
2026/01/16 16:17:05 fetching corpus: 4750, signal 180196/231054 (executing program)
2026/01/16 16:17:05 fetching corpus: 4800, signal 180685/231698 (executing program)
2026/01/16 16:17:05 fetching corpus: 4850, signal 181259/232332 (executing program)
2026/01/16 16:17:05 fetching corpus: 4900, signal 181636/232917 (executing program)
2026/01/16 16:17:06 fetching corpus: 4950, signal 182038/233510 (executing program)
2026/01/16 16:17:06 fetching corpus: 5000, signal 182656/234158 (executing program)
2026/01/16 16:17:06 fetching corpus: 5050, signal 183180/234792 (executing program)
2026/01/16 16:17:06 fetching corpus: 5100, signal 183494/235337 (executing program)
2026/01/16 16:17:06 fetching corpus: 5150, signal 183866/235922 (executing program)
2026/01/16 16:17:06 fetching corpus: 5200, signal 184237/236480 (executing program)
2026/01/16 16:17:06 fetching corpus: 5250, signal 184659/237026 (executing program)
2026/01/16 16:17:06 fetching corpus: 5300, signal 185152/237577 (executing program)
2026/01/16 16:17:06 fetching corpus: 5350, signal 185629/238095 (executing program)
2026/01/16 16:17:07 fetching corpus: 5400, signal 186128/238652 (executing program)
2026/01/16 16:17:07 fetching corpus: 5450, signal 187015/239236 (executing program)
2026/01/16 16:17:07 fetching corpus: 5500, signal 187403/239747 (executing program)
2026/01/16 16:17:07 fetching corpus: 5550, signal 187837/240252 (executing program)
2026/01/16 16:17:07 fetching corpus: 5600, signal 188665/240788 (executing program)
2026/01/16 16:17:07 fetching corpus: 5650, signal 189098/241242 (executing program)
2026/01/16 16:17:07 fetching corpus: 5700, signal 190246/241823 (executing program)
2026/01/16 16:17:07 fetching corpus: 5750, signal 190617/242291 (executing program)
2026/01/16 16:17:07 fetching corpus: 5800, signal 190978/242764 (executing program)
2026/01/16 16:17:08 fetching corpus: 5850, signal 191458/243257 (executing program)
2026/01/16 16:17:08 fetching corpus: 5900, signal 191877/243729 (executing program)
2026/01/16 16:17:08 fetching corpus: 5950, signal 192288/244171 (executing program)
2026/01/16 16:17:08 fetching corpus: 6000, signal 192637/244596 (executing program)
2026/01/16 16:17:08 fetching corpus: 6050, signal 193025/245030 (executing program)
2026/01/16 16:17:08 fetching corpus: 6100, signal 193383/245253 (executing program)
2026/01/16 16:17:08 fetching corpus: 6150, signal 193754/245253 (executing program)
2026/01/16 16:17:08 fetching corpus: 6200, signal 194388/245253 (executing program)
2026/01/16 16:17:09 fetching corpus: 6250, signal 194964/245253 (executing program)
2026/01/16 16:17:09 fetching corpus: 6300, signal 195288/245253 (executing program)
2026/01/16 16:17:09 fetching corpus: 6350, signal 195680/245253 (executing program)
2026/01/16 16:17:09 fetching corpus: 6400, signal 196143/245253 (executing program)
2026/01/16 16:17:09 fetching corpus: 6450, signal 196373/245253 (executing program)
2026/01/16 16:17:09 fetching corpus: 6500, signal 196672/245255 (executing program)
2026/01/16 16:17:09 fetching corpus: 6550, signal 196973/245256 (executing program)
2026/01/16 16:17:09 fetching corpus: 6600, signal 197328/245267 (executing program)
2026/01/16 16:17:10 fetching corpus: 6650, signal 197696/245271 (executing program)
2026/01/16 16:17:10 fetching corpus: 6700, signal 198021/245271 (executing program)
2026/01/16 16:17:10 fetching corpus: 6750, signal 198475/245284 (executing program)
2026/01/16 16:17:10 fetching corpus: 6800, signal 198862/245284 (executing program)
2026/01/16 16:17:10 fetching corpus: 6850, signal 199255/245284 (executing program)
2026/01/16 16:17:10 fetching corpus: 6900, signal 199572/245286 (executing program)
2026/01/16 16:17:10 fetching corpus: 6950, signal 199860/245287 (executing program)
2026/01/16 16:17:10 fetching corpus: 7000, signal 200147/245287 (executing program)
2026/01/16 16:17:10 fetching corpus: 7050, signal 200539/245288 (executing program)
2026/01/16 16:17:11 fetching corpus: 7100, signal 201248/245288 (executing program)
2026/01/16 16:17:11 fetching corpus: 7150, signal 201682/245288 (executing program)
2026/01/16 16:17:11 fetching corpus: 7200, signal 202008/245288 (executing program)
2026/01/16 16:17:11 fetching corpus: 7250, signal 202325/245288 (executing program)
2026/01/16 16:17:11 fetching corpus: 7300, signal 202645/245288 (executing program)
2026/01/16 16:17:11 fetching corpus: 7350, signal 203017/245296 (executing program)
2026/01/16 16:17:11 fetching corpus: 7400, signal 203458/245296 (executing program)
2026/01/16 16:17:11 fetching corpus: 7450, signal 203816/245296 (executing program)
2026/01/16 16:17:11 fetching corpus: 7500, signal 204182/245296 (executing program)
2026/01/16 16:17:11 fetching corpus: 7550, signal 204496/245296 (executing program)
2026/01/16 16:17:12 fetching corpus: 7600, signal 204769/245302 (executing program)
2026/01/16 16:17:12 fetching corpus: 7650, signal 205145/245307 (executing program)
2026/01/16 16:17:12 fetching corpus: 7700, signal 205460/245307 (executing program)
2026/01/16 16:17:12 fetching corpus: 7750, signal 205710/245307 (executing program)
2026/01/16 16:17:12 fetching corpus: 7800, signal 205997/245309 (executing program)
2026/01/16 16:17:12 fetching corpus: 7850, signal 206246/245312 (executing program)
2026/01/16 16:17:12 fetching corpus: 7900, signal 206581/245316 (executing program)
2026/01/16 16:17:12 fetching corpus: 7950, signal 206856/245316 (executing program)
2026/01/16 16:17:12 fetching corpus: 8000, signal 207243/245330 (executing program)
2026/01/16 16:17:12 fetching corpus: 8050, signal 207626/245340 (executing program)
2026/01/16 16:17:13 fetching corpus: 8100, signal 207987/245340 (executing program)
2026/01/16 16:17:13 fetching corpus: 8150, signal 208310/245340 (executing program)
2026/01/16 16:17:13 fetching corpus: 8200, signal 208590/245340 (executing program)
2026/01/16 16:17:13 fetching corpus: 8250, signal 208911/245340 (executing program)
2026/01/16 16:17:13 fetching corpus: 8300, signal 209243/245340 (executing program)
2026/01/16 16:17:13 fetching corpus: 8350, signal 209551/245341 (executing program)
2026/01/16 16:17:13 fetching corpus: 8400, signal 209849/245347 (executing program)
2026/01/16 16:17:13 fetching corpus: 8450, signal 210176/245347 (executing program)
2026/01/16 16:17:13 fetching corpus: 8500, signal 210423/245349 (executing program)
2026/01/16 16:17:14 fetching corpus: 8550, signal 210787/245349 (executing program)
2026/01/16 16:17:14 fetching corpus: 8600, signal 211066/245349 (executing program)
2026/01/16 16:17:14 fetching corpus: 8650, signal 211418/245353 (executing program)
2026/01/16 16:17:14 fetching corpus: 8700, signal 211711/245353 (executing program)
2026/01/16 16:17:14 fetching corpus: 8750, signal 212014/245356 (executing program)
2026/01/16 16:17:14 fetching corpus: 8800, signal 212288/245399 (executing program)
2026/01/16 16:17:14 fetching corpus: 8850, signal 212584/245399 (executing program)
2026/01/16 16:17:14 fetching corpus: 8900, signal 213002/245400 (executing program)
2026/01/16 16:17:14 fetching corpus: 8950, signal 213409/245400 (executing program)
2026/01/16 16:17:14 fetching corpus: 9000, signal 213672/245400 (executing program)
2026/01/16 16:17:15 fetching corpus: 9050, signal 213887/245400 (executing program)
2026/01/16 16:17:15 fetching corpus: 9100, signal 214204/245403 (executing program)
2026/01/16 16:17:15 fetching corpus: 9150, signal 214602/245403 (executing program)
2026/01/16 16:17:15 fetching corpus: 9200, signal 214836/245405 (executing program)
2026/01/16 16:17:15 fetching corpus: 9250, signal 215118/245405 (executing program)
2026/01/16 16:17:15 fetching corpus: 9300, signal 215345/245405 (executing program)
2026/01/16 16:17:15 fetching corpus: 9350, signal 215592/245408 (executing program)
2026/01/16 16:17:15 fetching corpus: 9400, signal 215812/245408 (executing program)
2026/01/16 16:17:15 fetching corpus: 9450, signal 216128/245413 (executing program)
2026/01/16 16:17:16 fetching corpus: 9500, signal 216555/245413 (executing program)
2026/01/16 16:17:16 fetching corpus: 9550, signal 216760/245413 (executing program)
2026/01/16 16:17:16 fetching corpus: 9600, signal 217138/245413 (executing program)
2026/01/16 16:17:16 fetching corpus: 9650, signal 217373/245414 (executing program)
2026/01/16 16:17:16 fetching corpus: 9700, signal 217628/245414 (executing program)
2026/01/16 16:17:16 fetching corpus: 9750, signal 217987/245414 (executing program)
2026/01/16 16:17:16 fetching corpus: 9800, signal 218227/245414 (executing program)
2026/01/16 16:17:16 fetching corpus: 9850, signal 218619/245414 (executing program)
2026/01/16 16:17:17 fetching corpus: 9900, signal 218858/245414 (executing program)
2026/01/16 16:17:17 fetching corpus: 9950, signal 219307/245419 (executing program)
2026/01/16 16:17:17 fetching corpus: 10000, signal 219535/245422 (executing program)
2026/01/16 16:17:17 fetching corpus: 10050, signal 219789/245422 (executing program)
2026/01/16 16:17:17 fetching corpus: 10100, signal 220106/245422 (executing program)
2026/01/16 16:17:17 fetching corpus: 10150, signal 220296/245422 (executing program)
2026/01/16 16:17:17 fetching corpus: 10200, signal 220526/245422 (executing program)
2026/01/16 16:17:17 fetching corpus: 10250, signal 220803/245428 (executing program)
2026/01/16 16:17:17 fetching corpus: 10300, signal 221084/245430 (executing program)
2026/01/16 16:17:18 fetching corpus: 10350, signal 221327/245431 (executing program)
2026/01/16 16:17:18 fetching corpus: 10400, signal 221549/245431 (executing program)
2026/01/16 16:17:18 fetching corpus: 10450, signal 222032/245432 (executing program)
2026/01/16 16:17:18 fetching corpus: 10500, signal 222347/245439 (executing program)
2026/01/16 16:17:18 fetching corpus: 10550, signal 222590/245458 (executing program)
2026/01/16 16:17:18 fetching corpus: 10600, signal 222766/245458 (executing program)
2026/01/16 16:17:18 fetching corpus: 10650, signal 222992/245458 (executing program)
2026/01/16 16:17:18 fetching corpus: 10700, signal 223199/245458 (executing program)
2026/01/16 16:17:18 fetching corpus: 10750, signal 223530/245475 (executing program)
2026/01/16 16:17:19 fetching corpus: 10800, signal 223754/245476 (executing program)
2026/01/16 16:17:19 fetching corpus: 10850, signal 224022/245476 (executing program)
2026/01/16 16:17:19 fetching corpus: 10900, signal 224280/245476 (executing program)
2026/01/16 16:17:19 fetching corpus: 10950, signal 224491/245476 (executing program)
2026/01/16 16:17:19 fetching corpus: 11000, signal 224777/245478 (executing program)
2026/01/16 16:17:19 fetching corpus: 11050, signal 224992/245478 (executing program)
2026/01/16 16:17:19 fetching corpus: 11100, signal 225261/245479 (executing program)
2026/01/16 16:17:19 fetching corpus: 11150, signal 225458/245479 (executing program)
2026/01/16 16:17:19 fetching corpus: 11200, signal 225768/245479 (executing program)
2026/01/16 16:17:20 fetching corpus: 11250, signal 226058/245486 (executing program)
2026/01/16 16:17:20 fetching corpus: 11300, signal 226273/245486 (executing program)
2026/01/16 16:17:20 fetching corpus: 11350, signal 226460/245486 (executing program)
2026/01/16 16:17:20 fetching corpus: 11400, signal 226681/245486 (executing program)
2026/01/16 16:17:20 fetching corpus: 11450, signal 226927/245487 (executing program)
2026/01/16 16:17:20 fetching corpus: 11500, signal 227128/245487 (executing program)
2026/01/16 16:17:20 fetching corpus: 11550, signal 227390/245487 (executing program)
2026/01/16 16:17:20 fetching corpus: 11600, signal 227651/245488 (executing program)
2026/01/16 16:17:20 fetching corpus: 11650, signal 227887/245488 (executing program)
2026/01/16 16:17:20 fetching corpus: 11700, signal 228115/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 11750, signal 228318/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 11800, signal 228555/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 11850, signal 228790/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 11900, signal 229009/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 11950, signal 229285/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 12000, signal 229499/245494 (executing program)
2026/01/16 16:17:21 fetching corpus: 12050, signal 229679/245495 (executing program)
2026/01/16 16:17:21 fetching corpus: 12100, signal 229935/245495 (executing program)
2026/01/16 16:17:22 fetching corpus: 12150, signal 230140/245495 (executing program)
2026/01/16 16:17:22 fetching corpus: 12200, signal 230437/245495 (executing program)
2026/01/16 16:17:22 fetching corpus: 12250, signal 230720/245505 (executing program)
2026/01/16 16:17:22 fetching corpus: 12300, signal 230889/245505 (executing program)
2026/01/16 16:17:22 fetching corpus: 12350, signal 231082/245505 (executing program)
2026/01/16 16:17:22 fetching corpus: 12400, signal 231263/245506 (executing program)
2026/01/16 16:17:22 fetching corpus: 12450, signal 231435/245506 (executing program)
2026/01/16 16:17:22 fetching corpus: 12500, signal 231706/245506 (executing program)
2026/01/16 16:17:22 fetching corpus: 12550, signal 231940/245506 (executing program)
2026/01/16 16:17:23 fetching corpus: 12600, signal 232128/245506 (executing program)
2026/01/16 16:17:23 fetching corpus: 12650, signal 232369/245507 (executing program)
2026/01/16 16:17:23 fetching corpus: 12700, signal 232645/245511 (executing program)
2026/01/16 16:17:23 fetching corpus: 12750, signal 232848/245512 (executing program)
2026/01/16 16:17:23 fetching corpus: 12800, signal 233064/245512 (executing program)
2026/01/16 16:17:23 fetching corpus: 12850, signal 233329/245512 (executing program)
2026/01/16 16:17:23 fetching corpus: 12900, signal 233558/245512 (executing program)
2026/01/16 16:17:23 fetching corpus: 12950, signal 233816/245512 (executing program)
2026/01/16 16:17:24 fetching corpus: 13000, signal 233995/245512 (executing program)
2026/01/16 16:17:24 fetching corpus: 13050, signal 234150/245513 (executing program)
2026/01/16 16:17:24 fetching corpus: 13100, signal 234367/245513 (executing program)
2026/01/16 16:17:24 fetching corpus: 13150, signal 234643/245513 (executing program)
2026/01/16 16:17:24 fetching corpus: 13200, signal 234954/245516 (executing program)
2026/01/16 16:17:24 fetching corpus: 13250, signal 235155/245516 (executing program)
2026/01/16 16:17:24 fetching corpus: 13300, signal 235404/245516 (executing program)
2026/01/16 16:17:24 fetching corpus: 13350, signal 235725/245516 (executing program)
2026/01/16 16:17:24 fetching corpus: 13400, signal 235947/245516 (executing program)
2026/01/16 16:17:24 fetching corpus: 13450, signal 236139/245516 (executing program)
2026/01/16 16:17:25 fetching corpus: 13500, signal 236303/245516 (executing program)
2026/01/16 16:17:25 fetching corpus: 13550, signal 236481/245516 (executing program)
2026/01/16 16:17:25 fetching corpus: 13600, signal 236760/245518 (executing program)
2026/01/16 16:17:25 fetching corpus: 13650, signal 236902/245518 (executing program)
2026/01/16 16:17:25 fetching corpus: 13700, signal 237154/245524 (executing program)
2026/01/16 16:17:25 fetching corpus: 13750, signal 237336/245524 (executing program)
2026/01/16 16:17:25 fetching corpus: 13800, signal 237546/245524 (executing program)
2026/01/16 16:17:25 fetching corpus: 13850, signal 237776/245524 (executing program)
2026/01/16 16:17:25 fetching corpus: 13900, signal 237949/245524 (executing program)
2026/01/16 16:17:25 fetching corpus: 13950, signal 238120/245527 (executing program)
2026/01/16 16:17:26 fetching corpus: 14000, signal 238264/245527 (executing program)
2026/01/16 16:17:26 fetching corpus: 14050, signal 238450/245528 (executing program)
2026/01/16 16:17:26 fetching corpus: 14100, signal 238658/245528 (executing program)
2026/01/16 16:17:26 fetching corpus: 14150, signal 238854/245530 (executing program)
2026/01/16 16:17:26 fetching corpus: 14200, signal 239039/245530 (executing program)
2026/01/16 16:17:26 fetching corpus: 14250, signal 239208/245530 (executing program)
2026/01/16 16:17:26 fetching corpus: 14300, signal 239364/245530 (executing program)
2026/01/16 16:17:26 fetching corpus: 14350, signal 239542/245530 (executing program)
2026/01/16 16:17:26 fetching corpus: 14400, signal 239687/245531 (executing program)
2026/01/16 16:17:26 fetching corpus: 14432, signal 239843/245531 (executing program)
2026/01/16 16:17:26 fetching corpus: 14432, signal 239843/245531 (executing program)
2026/01/16 16:17:28 starting 8 fuzzer processes
16:17:28 executing program 0:
keyctl$setperm(0x5, 0x0, 0x4)
keyctl$get_security(0x11, 0x0, &(0x7f0000000000)=""/60, 0x3c)
r0 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)={0x2, 0x0, @d}, 0x18, 0xffffffffffffffff)
keyctl$link(0x8, r0, 0xfffffffffffffffa)
r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x33, 0x30, 0x37, 0x31, 0x36, 0x32, 0x66, 0x34, 0x32, 0x66, 0x66, 0x35, 0x33, 0x61, 0x33, 0x35]}, &(0x7f0000000180)={0x0, "97a9d76229c9c5a0736bdac2ed54272174835e60b2eed77b8fed3fd1fc9bb3500e32e5f3e22d0e5bda261b9b3dab2c68215536da36c86646b4c0117f4bd1ff77", 0x17}, 0x48, 0xfffffffffffffff8)
keyctl$link(0x8, 0x0, r1)
keyctl$read(0xb, r0, &(0x7f0000000200)=""/20, 0x14)
r2 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "3490dc70be34a19eef6a438bebb2a1d687d5aaf373d12a2c38310635009278544451d485b077d256cebac9d657e2347fed8a16011abd1b7a2046269eeda6888f", 0x14}, 0x48, r1)
r3 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "fa29fb8b21de7590608660029ec1fe12ac66f12aaeb7da9801f44d539b3d0bba106e2b2d80706900c79459d6a857797b25a3f2ed4b3800f296239dcd18e3cab1", 0x36}, 0x48, r2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000480)=0xc)
keyctl$chown(0x4, r0, 0x0, r5)
r6 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r1)
keyctl$get_security(0x11, r6, &(0x7f0000000540)=""/48, 0x30)
keyctl$chown(0x4, 0x0, r4, r5)
r7 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)="a1058b4cf714262278f5fe1501e2da5074a2820464b495bd78ea", 0x1a, r3)
keyctl$negate(0xd, r7, 0x3, r2)
add_key(&(0x7f0000000640)='ceph\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="0c10580345d0446d75c39754a41cf3d6ea8b21ef", 0x14, 0xfffffffffffffffe)
getpeername(0xffffffffffffffff, &(0x7f0000000700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000780)=0x80)
r8 = request_key(&(0x7f0000000880)='.request_key_auth\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f0000000900)='ceph\x00', r7)
add_key$fscrypt_provisioning(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)={0x2, 0x0, @d}, 0x18, r8)

16:17:28 executing program 1:
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x20000)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x401}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4010)
r1 = fsopen(&(0x7f0000000140)='hostfs\x00', 0x0)
ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x8, 0x81, 0xb59, 0x99, 0x3}, {0x3f, 0xcf, 0xffffffff, 0x7, 0x9}], ['\x00', '\x00', '\x00']})
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x800)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x107}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x200}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008080}, 0x4000000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/module/dm_mirror', 0x200000, 0x100)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000005fc0)={'wg2\x00', <r4=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000006000)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000006100)=0xe8)
getpeername(r0, &(0x7f0000006140)=@ll={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000061c0)=0x80)
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000006600)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000065c0)={&(0x7f0000006200)={0x3a8, 0x0, 0x524, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x5, 0x1f, 0x1, 0x8000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4f9}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x40, 0x7, 0x800}, {0x8, 0x6, 0x6, 0x3f}]}}}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4}, 0x20040001)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000006640), 0x400, 0x0)
r9 = getpid()
sendmsg$nl_generic(r8, &(0x7f0000006ac0)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006a80)={&(0x7f00000066c0)={0x390, 0x14, 0x20, 0x70bd2b, 0x25dfdbff, {0x12}, [@generic="a73fd961ef8dde4ea3b548e5b92fc1178f73d5910606d5dc2b961d77ee166e2c54237a8e80172040e0ec56712cc8f7462de442", @generic="49a324b513497c5873e4571f5e4c19cf330d095f23a2232b979a27c9af6849062efe4caf530c4b551609e57ce403aa7fcc2eb607d22f1a660f360765f42b6f2af2d7815116535a22de925e906d7ce1738f93e8cb42ccf35c", @generic="89c12fd75dcd9b5cc2d3c173164a019763a8a7dea57e7eb38029eb796c", @generic="10c4516ef6615a772cd8aa689bc542ac8d7cc6ea0802cb5eb9b64212eea8a0a9b2acff8125974feef50012a61a2a21f486aa39dcd14a4e9bcf4c8ea10280341eb456529e4ccdb8ad54c78bd03ab833aa3eec8f8179a780152937043c3f0a9e423bb4552dc801", @generic="5159c13b77e0773d888f562fbb7b97f054e53fcfb342cbe4c0b66fc8c11131b13e479f0e124a79ad215c936a202090b09408d3c36ac4ec55de93407cd50e867fd39e624d8b563c215e5301f80be6295f4513306ac952c06657ba49", @typed={0x1e, 0x61, 0x0, 0x0, @binary="a37245efffe62a6acd4b38131233c8fe9cc440b663c4b827f428"}, @nested={0x1ef, 0x58, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0xa8}, @typed={0x4, 0x8d}, @generic="cfced0be8602ea3fc62709733baaf56bcee8511cb674d9ddd2554d7659d398c087b25a02d57a4a8eec093623849d5aa48a83a44384db6e5e326603b4c6ca65184cf843eed315a08e06e0f21fc3d0a93644d20dd0118eadcf0b3af503724a81a93797b3ec2a1c1142228b966ce78c877dc26af05b35dd86bc9e581d28cf880d8209ae36dcd87ea3ace013337ba3b35fb44d9f6c4a09f61203c6b6ce211eca79c3ce648ccd23641ac911b2645ad6d5377d47d734299e971d763af5d8d26a48f6d76acf35abdc63d2fe5c71899d39a30ae07d16c89086f78ae85ce9dd10e970ce174a974cfebb30279d6e", @typed={0x8, 0x17, 0x0, 0x0, @fd=r0}, @generic="a12e414b94e99d9851f74c2d29ff2229f29d18617aad42087d02cf93c0ad9adcadccb392639f012dab43f42f5a944826714dd711ae3694e7dba10350dbce75fd10be67427f2384d4f916214191f1f660dfb416c12d0bcccbfb228e2e62ed86e4fb78b1385f7b0abc1a9bc23876aa493ece164b1098ed5c6768b6352857ca500bf2db6afc3a12f1f66af68835614a947f7095", @typed={0x8, 0x59, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x2c, 0x0, 0x0, @uid=r6}, @typed={0x7, 0x70, 0x0, 0x0, @str='$:\x00'}, @generic="bd26dc8020b904f4bd5934bb7586e98bfb4ae4dfc6f02959e6f8f74deae8f99989116d48fcc2905c1dbf39a997df09da039394641d9a14eb3040e2b8e534a7ae47495cee"]}]}, 0x390}, 0x1, 0x0, 0x0, 0x6000041}, 0x0)
dup(0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000006d40)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000006d00)={&(0x7f0000006b40)={0x1b4, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78d40c3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7df713ac}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x128, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x877f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3412}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x772a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d26}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x708786e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21dff02}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aab0b12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x283dc018}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4756}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x76c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64200a04}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x91d9dac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c7e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61191874}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1487c09e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18a289b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d4f5eb8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x372c7ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x353f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa6ce900}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57dcf914}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f4b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x485e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc911}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72b776e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x36ee}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40000}, 0x8001)
r10 = creat(&(0x7f0000006d80)='./file0\x00', 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000006dc0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x4e20, 0x3e0, 0x4e21, 0xeaba, 0xa, 0x80, 0x0, 0x67, r5, r6}, {0x2, 0x3, 0x6, 0x8, 0x236, 0x80000000, 0x3ff, 0x7}, {0x3, 0x21, 0x80000000, 0x8}, 0x1f, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, 0x3506, 0x3, 0x0, 0x7e, 0x9, 0x81, 0x8001}}, 0xe8)

16:17:28 executing program 2:
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r0=>0x0, 0x2f, 0x40, 0x2, 0x9, 0x0, @private2, @loopback, 0x700, 0x1, 0x3ff, 0x101}})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002600)={&(0x7f0000000100)={0x24ec, 0x12, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1a, 0x5, 0x0, 0x6, {0x4e24, 0x4e20, [0x3, 0x746e9544, 0x0, 0x6], [0x5, 0x5, 0x3, 0x7], r0, [0xffff, 0x80000001]}, 0x8, 0x10000}, [@INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "55dd68a13cab4264816c1de4ec41db6fc587aaa7998c5379dc3c0868b6"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "dbe4ae2e2675d1564a499803b443a08e7fe54a460e6216aa427f5a8d5a0f02f7b1ec2a94998073b8f0d7d53ffebd92b1ed9af411b86200b6a253f517bec7a1e44d1df0a959dc90cb355183b5525f3b84e2f0949024b7c0cfda93176558378882a47ec48847aedb9110e2d3e6223f2515aaa27be074fdbb1167017ba28fd21c9e752f8f338c23cbe6656c"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "1d4441832a27f761df397a7d9b5ca812d71b98fe1f4e82e7cf49ef6ab299d4c0222012153628fde5fd82fb004a5357d4c59e39afb3cda1165b648c7fd36065e9892f40a4e90835e98abec43bf2bd6f266ce02aba255064f9b570dcd44e8386fc6080dcba33db149be54f9d6ca6ad883a9bbcfa27e9297ac20a72a4e33746ef44fb265a18d124388a6f97386031f1eace9595af002d787f57960161aed3e4417158da216ceee3f75957fe82526e168b5390a74b2e97eb9d2b98d479e02f75b1e7a88728ec06b114ee5c4560474435c0773efa36777c7b00dbb068"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "26a1ff242817e61826883f2a021ddf3de533013cd9ab60a08e942369027f985b6c6b9f1d589fe4e475a0a39d40f892680c84876cffd651e7b2e82c304374f5dd1b566472b9d6aa8a037902522d3bbc7a1ab670a979b76926965bc38db3094f84c3709615e56b653451f76e602045c5fec5d859905efb7816c32c29b0542d8caf2e3d6cd220b1a60cf030ea7cd590ecf16798ac8a6090da0986b23a7eb7fb9f4b5310c53a76cab5291344aebaab896d42a66c1c03ff5d7655406c78ea828b"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "58928bafe0ada67e03b04ce2ad031d85ed5b00db4598daf217f6c133ed1dfac50ad3f306e1"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "3572158de0f003b1e1905cbcb7d344e7208a490b19a4514cb5a9aa9c2b16b15ea8169281c6a53bf274413f24f71351811aabb7e27f0a9adab244f171dce22c32ccd946d53e94e4c7d86c01c3cb782c7a2af3"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "44ce65ef83eb76a0239990b7b786f0ab0b32c88e64bbc6402f011a1ee669fa0274cc68f81026e0679ffd4f7c901f3bbf61473cacadf6f018bbb681703b912b15b30b4af3dce41381e72ad066f0bf4a6d2daa9795e66da38440b0bc890d137f0a18fd969ba10d3df495bc413b7a8a2a2a82e5f7bf795bc363f37e06720ffe81cb0df855eca7504ca2aa18af756d86d26cad330d506c6c2812ce04d391c8604b8e94d57e5e8d1f8dd6ae99db40f1f46328ddc00270"}]}, 0x24ec}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x38, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4018941)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8004)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000028c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f00000029c0)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002a80)={'ip6gre0\x00', &(0x7f0000002a00)={'sit0\x00', <r2=>r1, 0x29, 0x3, 0xe0, 0x80000001, 0x10, @empty, @local, 0x80, 0x7800, 0x9, 0xb80}})
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x84, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040040}, 0x40040)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000002c40), 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x64, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x20008050)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002e00)={'syztnl0\x00', &(0x7f0000002d80)={'ip6_vti0\x00', r2, 0x0, 0x40, 0x9, 0x9, 0x58, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, 0x7800, 0x1, 0x6}})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000005c80)={'syztnl1\x00', &(0x7f0000005c00)={'ip6tnl0\x00', <r3=>r0, 0x2f, 0x6a, 0x0, 0xe544, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x10, 0x40, 0x8, 0xf16}})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000002f40)={0xa, 0x4e21, 0x1, @empty, 0x7fff}, 0x1c, &(0x7f0000003100)=[{&(0x7f0000002f80)="2fbeedd43cfeaa415a0d64760f2af143d213aaf51c0fddf74093e162d212c9cbc6f29b391665beda9fff69530e4596cd28c07b60f3daef05816716e1738043ae1d", 0x41}, {&(0x7f0000003000)="92885067c1c1761387047775b4824c2bb8d519ee882fccd0304c856ab4eab835fcc294d078d3ab1274bf0ad5b0afd36de5b93817b5c59e446226636dde9bf682d27692ebb335a808e3cbaec97cf45e121c42bcefc1cadb08c826d11c93d58f3f625f13d81def3c2cdceb8571cd97e2d8aa9aab731a69ffc5c3a1f3cc97d0b0d8f515b6c7e44ee369db6479e9e806ecac1a789328e098ad71e95fc8c53b7f898862ac9eb8f46a46e9a712e9e356", 0xad}, {&(0x7f00000030c0)="d70ced8dc77a25f49244", 0xa}], 0x3, &(0x7f0000003140)=[@flowinfo={{0x14, 0x29, 0xb, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}, @hoplimit={{0x14}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x24, 0xa, '\x00', [@ra={0x5, 0x2, 0xab}, @ra={0x5, 0x2, 0x1000}, @enc_lim, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x3f}, @ra={0x5, 0x2, 0x3ac}, @generic={0x5, 0x3b, "9f847d45f9a987964d67a8b3c1d82618f8717f21dbf8b5b991e423c044a494d124a2f613b4285cc2141518cf73281c00b190bfd501ab4a3bbda04d"}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x1, 0x4, 0x0, [@private2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @private1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x180}}, {{&(0x7f00000032c0)={0xa, 0x4e24, 0xffff, @remote, 0x2}, 0x1c, &(0x7f0000003700)=[{&(0x7f0000003300)}, {&(0x7f0000003340)="a6b279c8f04ea964161d7be63dc83428ab2ad253482ea0e7d85aaaa285283fda705a94c68c0a67ac31eb987d9b80655a38fc88c13fe9dfa4bb8a8c111c7cff6b254d8142f20e3979eecb7c4ade79d336342b0792c288bd948845a0b2a12048ac2a35d1620fcc29c5f8fad9d8664835aecf16826ffc6b5e725182", 0x7a}, {&(0x7f00000033c0)="f05bcb1ec3ebc969eb0c1b743dead6acf925c68692566d6098173e2f2a1ae63662147e6bdeb9beea28720b1fc9dc9b4fbd25b62f62653bf6f8e215e31a45c84a2ad103852c6ee4809b202371d64edfd1bd5ca257283b02fa23fbf1998da1bf6e499aa71f23dec1a8fdc15a41944cdc43579f2a0a2466327535bddc2387c7ef73d824372b925461565f1065a5aade68d97237c5826fd84ae5842338a4797c8ebe5bb87055871657c516c582c083f45515a0923f9f33fc889323db178527014f4580cf48c3146102aa28", 0xc9}, {&(0x7f00000034c0)="d5022039fc15addc0ead49072e8dc30151781a02d3e41a20dc3ef17618f20e9e60528e3f699a6ea1bd7ab9b89c298a6dde31057f8f8a02b52f4c8493eb1aca6b766af52d3ec14afb14af3f557d264a09", 0x50}, {&(0x7f0000003540)="48df47911cbeba8337ab9df4d9033a28641f5ed649ec89a6005e1e44064b", 0x1e}, {&(0x7f0000003580)="e8bc75cc6a1da0db7b76280f8ca2dc15b1d285c45d5387dcf11a41ff698b0770b5e11ce7fbbc0d269c190ea5c2e964d483616a1b4740de7338bc975becde889ae3a48f0f026c4245a46b45999b6a30000049caa2989d3bff2da52ddf6b8d1296aff92eb4ffff475b1ee8b517cf164d55ba67678f0d5b63694cea741564ae9630a166547f6e3b53aa78c59068e1b0253ed5a37ed176a1441db2bb7d67fdc0b38d", 0xa0}, {&(0x7f0000003640)="5f56d79d97b193a4e07c37b6e337fc9044f32f862016ffca684802d8b67f430bc8368406c41f495b75055ccc86e4e9c2fe3ef08c6d738fd654f88786722caae7987c57a24d8ef7141686c423981b157cbd24517c0bf53f25397ab5dc48adcc890b1b4e98732a23173edf244c6fd5968c8c4ed91a0b39edc7aa07e06ccc707df149b026bc73e90d8f7ee93f3701967c67af3e681ca53ddb4938c0a920c7e802cd48d5062a07e644dc6037872d45c099d4f2753e623b27b94e60df63b4", 0xbc}], 0x7, &(0x7f0000003780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1000}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3f}}], 0x50}}, {{&(0x7f0000003800)={0xa, 0x4e23, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, &(0x7f0000004a00)=[{&(0x7f0000003840)="e5a0b1886755e8172fd123fe630ccf1125d7f7a32d18612845669a26c4eaf92b38a0bd22bbe9371d5c0bf5129ca852185a4af49de599c04d5c9e187849bee33fc4be172a9f36ce837755a14d552cadd660409bb55d3fdfac5718c18288da87f645c65fd1db52f9658ea0c7f77c363658fb15c895fd03dd858c", 0x79}, {&(0x7f00000038c0)="e31c6e4785d406359cb490f66fe5a3dcfad74bbbd9d26d052604593d14fd0eaa8ebb7905f9ef7b3a99331709c30788174827992669c1a0c84231b44c73e80d4025be4cb9d2", 0x45}, {&(0x7f0000003940)="252a4b28465e28150135663f0f1519ddb150c8db03bb78662c57c82b49995910f160507f8f36bb14b00f3a4b13fd28958465b5432c1d6308f85b7ececa4b433c1ec20219e8e9dcd6925fdb72e528e555f3adee848260d124482daf68af61d624485af7ccb658fc4920f29ff82a7ffbdb0a70010633a961b07903375f73beb441875aae25fcf3cfba", 0x88}, {&(0x7f0000003a00)="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", 0x1000}], 0x4, &(0x7f0000004a40)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x54f}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x84, 0x10, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @remote]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dstopts={{0xc8, 0x29, 0x37, {0x6, 0x15, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra, @pad1, @generic={0x6, 0x75, "70b002d39ae9d9528facae6a37a4b7f66df1fbc5e6ec8f924337148e16da932793001ba003a68a5979dbdfb96e93eb206751714ee22ac189060d26e38c32e3b5df0541ff5b0a3e90364a1e790cee77881dae0bf70c3e94eaa0006d5de936e1cf832be57fd0a246e6e1219f523cf03d5d98850bfde2"}, @enc_lim={0x4, 0x1, 0x4}, @hao={0xc9, 0x10, @private2}, @pad1, @ra={0x5, 0x2, 0xffff}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x1d8}}, {{&(0x7f0000004c40)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2}, 0x1c, &(0x7f0000004e00)=[{&(0x7f0000004c80)="2431653b5bcea77536fe6e98eb1fee5488feb79c58c154b36707505697f71ebb6737b0e262837efcddd19eefa16495764e62ecc037ec75d5f21a2dc1c2d79bffd64fecff99cb863afeeecd4a1873394983118069cdc08a12d8d91c33de60fd90794780d9bdfda616be9bb0b79f72138651eaaea0908ab5ccd2af22b1197345f12b45b6ec50d6accc554823cb9eb14424a088b493e23b090184a550735bbab075dc4a2cd4f44af710cc32d50556be98bfe2fa4afbe1c7c8285d7f30f14087a989c5685de6a19bb67382a970ab7e6f8747bfc0a9981bbced", 0xd7}, {&(0x7f0000004d80)="64711cbdda5d8678635fff73adad48711a803d876074947d86087d3d2ba04c0612a40fbad0b242274d0ee10ee96d25f8494631157ef2088ce0e40d94107a35cea3d0ec", 0x43}], 0x2, &(0x7f0000004e40)=[@rthdr_2292={{0xa8, 0x29, 0x39, {0x87, 0x12, 0x2, 0x8, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, @remote, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x16, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @dstopts_2292={{0x160, 0x29, 0x4, {0x11, 0x28, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @generic={0x80, 0xd6, "1a28cda2ec2318c7845808fa9bce7470531ca4e47d10addfa2308809129c9d9671b9356a15f156c5e0d02a6177b0e415ad46d9a3be366979bd4c2c8abaa8e1368b730bff3dec950a85671aa9a4656b0370fa1492533c1803969fd6d9b90ea3d359a5c3fa84f1d09754d19cdf9e86d36e9d8fa9f7ccc27d08f7c6a40f808c8ac59c68dd2b0daaef4886de3efc98c2f8f054c8f00b0d78343a838ead03fe066fa8c8f5d7f2803f1cc8768636790317d31428fca40a866b3591c79b7bb8270723fc29558f48b8e50c937ba13fe0e7cb17b68dac53e9e2c2"}, @enc_lim={0x4, 0x1, 0x3a}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x48, {0x3, 0x10, 0xfc, 0x2, [0x6, 0x3, 0x7fff, 0x400, 0x6, 0x1000, 0x5, 0x8]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}], 0x258}}, {{&(0x7f00000050c0)={0xa, 0x4e20, 0xff, @private1, 0x3}, 0x1c, &(0x7f0000005780)=[{&(0x7f0000005100)="ee08ecd1d37d74684871c0403fddaf5f9daf7dca5846ee5b51bbda1dc669da7707b7b5dac477616da1850f63a648a0d5652b5104467929ca5ac7b8949f7529a1c7d3c79085860aca886b8d65903baa3d9b30cf2f680364f5a8998b0b3b73b57d23b3a90bd56dc4a79e8a65b552e5", 0x6e}, {&(0x7f0000005180)="388651e3bdf16776d288d5aaed7ba1eb731828101036ae0fa13a54f5db4eca8a1c4e4b53820734d9f8c4771a79e12b0858538411ddc5278b86f4cddcb5695675e9e51cdbf7422a2134c5d8fad9990610ab9ac5395757485a020520c0f2836e8ad5c3f4f7abe8811d4872116a82f4ad35f6d8b236991c4e768819a18d8d064248e20914e631cb5e78008a851fd4633bec6296d7f8b0c29e4132abd2e606966d46804d268d60de033f62998de32c01c727", 0xb0}, {&(0x7f0000005240)="c4f31463cca4d77e02437a8756aae73de4d614ff04133e44cdbb39f69a46fc7c66be290ee0080e92385dac931b8520f31a402feb0013de9865ce2840482097ead90d68cff919939f9d8fafce81ba5280e48e7b687bf82f28b0d7d7077c040a23318243c5d5146231cd76aff9aae23abc37909cc174ac09187f03853e1310fb8c48eb4400252e", 0x86}, {&(0x7f0000005300)="28f115668ce701880fe434d0547bccc05df5851fec701c96de0f163f49306ae28144cf97d847157d605e7b448457946879d89002057703d5df770037aaf4c5fa4d441beb3b15aeeb7d4195ae34eb993c4033039e6558a25eeea127f91f4f5e1a4a2e0ecb9fbdb2f149b0c3f60e59b26f4a4f843c83a808aeabd900c902f1984da046e5", 0x83}, {&(0x7f00000053c0)="5f650e7be272087e2f20d58ed64daa86624900691a6a5b0f0a5111ec5f2bbf245d200fb6b3b0f35c6b2a77cc9a9c0856f4708fa9775cc1541e76142ec5efc5ebf031", 0x42}, {&(0x7f0000005440)="8ad3375a097806b785369517f846fc1ded8a5bd67150ac3c32cd09519c5a4d9d8d8ea902a7f71877cd7173bf43415a252c01119a542a40216ee240638fade1ed99b039fc2738a515c80f97bd6e4db782bf360aceb2f742a5bea53d54d9884686e9c71fdb585d223042af005725b40f6d1c7fd84d70b64462ac5051cb86dd1350f8fc220f3fdb784c743fc0278bb0a4cd1ca202c74fa597a8ed8482339aa119c25bbef84a37b3513eba6564f60949910bc6fc2e1aa4f3b9da5a00", 0xba}, {&(0x7f0000005500)="972df7483b145c1a424e7bdb7b7879f9825cf26b8ba90cbd2617d6b857bf6c93155ee11af4e02edfb44dd9c1c1971c0ee2adf7e55cc54371c0e5121ae92ee3544f92e8daf64f374b77db55e7f74cb0e3462c355f6252399e84ff5d626d7379ee0c4500312ccf2991ab4746822f4a700fc6692da59b20e260538a33fced658d00722d5b380b9976687c6a884205cd1a71f87cda072d50d68cd70626cf1b907c4beab5337bef5fbaa689febfaac8c86ed61c4d1b9a", 0xb4}, {&(0x7f00000055c0)="510757cd127c6c38e8c275831925985750f6f55773a7dd99b6cbdd397eb9b1a53730f1dfd85b4049376fe57521986fc225442bb6955da01812a9b7580c8c29dacb7c83e817017be15767c4d68f1e9197937d83bbdfd1034d7f2b9764a23d010ea95e5e3ab7f12963f63b170a265624e54df02ab63c11f91d5b343c57016a53fb790ec318787e748966bea6a4053f0e358ec1442295c3f2dd8e2e505bebcc8e9cd7915c7e1a2a57b1be5f289e3dde91730e2c5a4d07e8cfbd7a5727af5b4037203a7e0a7206a78c6a7fc57a192102064a5a2cee263c52e1d61ca9ea891d8c2a0f8a9642594e2ef6fee2d9b207", 0xec}, {&(0x7f00000056c0)="5a4e928f8c5c643289c24808a3bdd6c5d00b52c5318cb41a65c924badba9444da0e3697f243e853cb07a42e7a2842bbfec819118633ab40b6d4698b877e9b8b6d9dedd46b9ee6f18af97eef2a4ab2b6621ba67e9e95cd2b27aa1582fa01f2b678138eeacc5981859a19666d5e156676c014ed7e0300c309c892a937c9061c44d40ea22aad27a7718", 0x88}], 0x9}}, {{&(0x7f0000005840)={0xa, 0x4e21, 0xfffffff9, @loopback, 0x401}, 0x1c, &(0x7f0000005a00)=[{&(0x7f0000005880)="7e7edc747ed2f7ca6da0345ab328479b9f220d63a675bb2599960028a8df260d38fa93a350331b519329e7ea4e9a260313a4c65563d2d93941a43c6e17d58757cb349dc49a4d2dbc6075e64678", 0x4d}, {&(0x7f0000005900)="09106b353625ae92c4806cc4758666eb29519aded9440f0e126a017726de4eeff1f9d0de2096084839d08c00577b52994860d624292c32526077ca26aef36e", 0x3f}, {&(0x7f0000005940)="a4133d23a79e20ae1ea12869ec1a5a6907", 0x11}, {&(0x7f0000005980)="c373c0a43a8e42b0e50316d57fec649a4d216d940ae60daab92694b225418896ee74caec1817b9898fbbbf42045041630beaee07eebfbcf8432f53d7eaca535407ccfb4a126a8471db01832dbac04f25f91029cc1dec43b8b69b2d75dbd8573d76cd032440", 0x65}], 0x4}}, {{&(0x7f0000005a40)={0xa, 0x4e21, 0x1, @loopback, 0x20}, 0x1c, &(0x7f0000005bc0)=[{&(0x7f0000005a80)="0d20c7d7970ed1063d60c42924f7998b4b2678ea4ecd373fc4dc3f249ee3b1980f303aabf837e72599a0d049a8262a59f4d2c29f841cd43a5061d5cc0248c46476097e900e099b07e3e50654a84c9d386dad4cf0fc748652399bf6dac88d5878bdb8a47908ad3ad585c59fefed41a4efa64c73637e1580dae194d9cef37a2fe60d31bcadd82e2cbeab4669885f06b15618cb22fe2c94ddd44071607a0709aeaca2f0df4459daf26070ebb348cc8a0aad51ca1e0e3ab8fb2208b4fa457fb5cb844bae6e1ac7da414e10a66908e35711eb0d7e", 0xd2}, {&(0x7f0000005b80)}], 0x2, &(0x7f0000005cc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x29, 0x8, 0x1, 0x1, 0x0, [@remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}}}, @rthdr={{0x78, 0x29, 0x39, {0x16, 0xc, 0x0, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @rand_addr=' \x01\x00', @private0]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x3}, @pad1, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x7fbdf54488c87419, 0x10, 0x1, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x1, 0x63, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @hopopts={{0x60, 0x29, 0x36, {0x2f, 0x8, '\x00', [@generic={0x80, 0x44, "4b9c2a743b50cc19fe611daa801380b42b5df464b4fa7660048d414ae893f5a948d4f5353c95fd91ff0545be4cf28d4b7b0fb70551f2d7c06f19f493cb8807e08b1865d6"}]}}}], 0x298}}, {{&(0x7f0000005f80)={0xa, 0x4e23, 0x6, @local, 0x1b6}, 0x1c, &(0x7f0000006440)=[{&(0x7f0000005fc0)="bd2523d84604919185cbe003eb2602128ad2889571dda1e2c46f62ebaa5518d0451d62fe9aa164dee182a46ea646767e317121efb7a78dc88e16e7f763c0310d559879b12940500472b76eb21a3298fca6acc7bb0d34beb2a05c6f9956c91a7f86db0a99a939cc11e55d8a7215c0feb4c28efe9a52b91988a3e5a4de1935bbe8aeef74d2f36f7787b6d4a0", 0x8b}, {&(0x7f0000006080)="851f17dc9fc64871798e56a7953fca8ca22ea05a4b857f1fa74c5d3d3242453dbf4267545125baba05989d490f8bc447eec2023b035e6c9751884b120cf7fde97f3e0b0069e628820055cf17a3011380", 0x50}, {&(0x7f0000006100)="1dafaf0679475071db30e2c2574a144f3f11b0536fb2c1bec80a153ee5d9ddad78ce30fc6d5ac387c96a22dd0b0f867f6f35fe1487dd9dc6194bb4a4f3e95b2e62afa094da0f43095417aa1f0ad8ff82b73480ab59c85e0004e41766a07ebb9a0660a5d2e6504c48182687761c761ad069b5594b2239d0befdb845e6f47da6a8fcf907783e601ee4525bcd7b3fe99e41b42c03d75cc15ae391644cccbeb81e74dc79a3df56e3b9661db855078b83707b58c50cd65ba9c1481bfed6a442a3f84bdc0f0bf7a19a18454b8457ac0f3df8729a139610ed155e8a5cef752b79256bac28d816c41377dd0ac0b66c19803732f06ba614cf43f7", 0xf6}, {&(0x7f0000006200)="df30e8402c1b6c71cdd356082c04fa2f9dd6c84fc01a94c85402cb482933b8951233e8099c95b179b44c002089b122db728b28be99053aa1dd822a72cd5e51c91452b5d3b5585a75a471931119dda20bd898a6323e646be66700926b9b7e5dfee7e23227ea6318e78ecb9817e4d5eff181d1bc2988e6adba57c04f10f8ca18e9690dbf03a83440f342fb5ddcb4bf9b9e00a36ce907077931916ae51921248e473e0622940f2ebba3b2c6", 0xaa}, {&(0x7f00000062c0)}, {&(0x7f0000006300)="000b93423ce98f95cb304a6c1e71cf4e141b153999d909f409ee4c26601b79b6ce19083c3e49a512971c3fb5543a74b5e5db21c68ec4d37c34bcd0dcfefabc14cf0435292ee8faaac22ad0dd9c1bc3af9fd0a1d468e522653d9a8446cbade3fe2bac806d5f44f80c371645cf9682ac906e68626a7d6175df4ed42273948771ebd85770a74b04e902", 0x88}, {&(0x7f00000063c0)="06b827fb3167", 0x6}, {&(0x7f0000006400)="819c403eff4a1a7cfb19715dc0113b3511c058c45bcd", 0x16}], 0x8, &(0x7f00000064c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x81}}], 0x18}}, {{&(0x7f0000006500)={0xa, 0x4e23, 0x7f, @remote, 0x9}, 0x1c, &(0x7f00000066c0)=[{&(0x7f0000006540)="a29dfa06bfb69506355f7cea532daad48094820b4618cf8927a375f157833b797ad9e753a5975544356928d12645f45d2b79a5f15d11fb9392e5ef235e206d9a3ba8c19f66ac12fed7f0f03b9e179ab9678af6d68b388c536942bf4d551086f61e1831fcb50e86e3e7459f19105aa0d4388cd082601a0a64cf7800800b199237e28c20619bc3ee48a3c5744ea180b49703387b04a65b2445e43ee77113f52d0713c9e2d4d0ee2466aa2007172eb8dfe8dcce30e71a77a063f0fc89765ec137d11ee4616103d09612f82cc11964827ee3c3e7b19d80b70a4872", 0xd9}, {&(0x7f0000006640)="ce8e128a58c4518da95268507e312697b2d520986117921cd63bd8f2fbfdd61d61b6a40d75a26cc0c8b3d612edb358759801c5fcfb7e0f862f7e509a41d73cfe15c6fb092649a8d4c119cd28e49d48e78569", 0x52}], 0x2, &(0x7f0000006700)=[@hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @pad1, @pad1, @ra={0x5, 0x2, 0xe5}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x3a, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x60}}], 0x9, 0x40002)
accept$packet(0xffffffffffffffff, &(0x7f00000069c0)={0x11, 0x0, <r4=>0x0}, &(0x7f0000006a00)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000006ac0)={'sit0\x00', &(0x7f0000006a40)={'ip6tnl0\x00', r4, 0x29, 0xf8, 0x9, 0x80, 0x20, @remote, @remote, 0x10, 0x7800, 0xff, 0x401}})
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000006b40), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000006c00)={&(0x7f0000006b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000006cc0)={'ip6gre0\x00', &(0x7f0000006c40)={'sit0\x00', r1, 0x29, 0x81, 0x6, 0x41, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, 0x80, 0x8000, 0x8001, 0x20d9}})
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000006e00)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000006dc0)={&(0x7f0000006d40)={0x5c, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000006e80)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x0, &(0x7f0000006e40)="dd649b032e52485977041d6d89502cc0eb327d5ccd50a298f4bc6a487175d9a0711fa4aa37f151aa6c77a6690f", 0xfff, 0x0, 0x1, {0x2}}, 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000006fc0)={&(0x7f0000006ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006f80)={&(0x7f0000006f40)={0x34, 0x0, 0xcffb34d2cdc4fdb2, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x805)

16:17:28 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x2, &(0x7f0000001180)=[{&(0x7f0000000080)="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", 0x1000, 0x6}, {&(0x7f0000001080)="9bd54a9617ea09aea4fe80062ba9060bf955265083e89fe3cc5fb4cb6e83c4f3a79aeb04bd72a46a29393fca8b4dbc09579785bd6873c028fd0cf20e9e05f980cc1e6dc5191716b3cc08754d59bc7be496332e1a13d75be6bca6ec95d421002cca85ba2e737f843a7741fb5ef584daead5b532550a1d9e44f28257dee1a9fb202f49ab3758bab19edbc8f0bca0dabf86e94ae01e615d35cf5beba0491b05a67a115c2055fe91496a388c82449387f8f5ca1defbdd2426e9dd1fa79b3fe2688144ae77fd79335d4eda57db1d4d21352fc641ba9f789ce5368eff5", 0xda, 0x8}], 0x400, &(0x7f00000011c0)={[{@uni_xlateno}, {@shortname_lower}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlate}], [{@appraise_type}, {@euid_eq}]})
r1 = openat(r0, &(0x7f0000001280)='./file0\x00', 0x34402, 0x1)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000012c0), 0x141001, 0x0)
unlinkat(r2, &(0x7f0000001300)='./file0\x00', 0x200)
r3 = syz_io_uring_setup(0x365c, &(0x7f0000001340)={0x0, 0x51c2, 0x20, 0x0, 0x3e5, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00000013c0)=<r4=>0x0, &(0x7f0000001400))
r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001440)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000014c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x83, &(0x7f0000001480)=[r1, r5, 0xffffffffffffffff, r1], 0x4, 0x0, 0x1}, 0x1)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x80010, r2, 0x10000000)
syz_io_uring_submit(r4, r6, &(0x7f0000001500)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd=r3, 0x37c6, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1)
mkdirat(r3, &(0x7f0000001540)='./file0/file0\x00', 0x4)
r7 = openat(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x1112c0, 0x1c2)
syz_io_uring_submit(r4, r6, &(0x7f0000001640)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f00000015c0)=@llc={0x1a, 0x10e, 0x6e, 0x9, 0x9, 0x78, @multicast}}, 0x7)
io_uring_setup(0x8, &(0x7f0000001680)={0x0, 0x2ba0, 0x20, 0x1, 0x1d3, 0x0, r1})
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1000004, 0x20010, r7, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r6, &(0x7f0000001700)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x4d, 0x0, 0x0, {0x0, r9}}, 0xffffffff)
r10 = syz_open_procfs$userns(0x0, &(0x7f0000001740))
ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000001780)={{0x1, 0x1, 0x18, r10, {0x2}}, './file0/file0\x00'})
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000002, 0x2010, r7, 0x10000000)
syz_io_uring_submit(r8, r11, &(0x7f0000001840)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r7, &(0x7f00000017c0)={0xe0000014}}, 0xf64)

16:17:28 executing program 3:
r0 = semget(0x3, 0x0, 0x10)
semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/29)
semop(r0, &(0x7f0000000040)=[{0x3, 0x100, 0x1000}, {0x4, 0x4, 0x1000}, {0x2, 0xff, 0x800}], 0x3)
semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x3ff, 0x1000}, {0x3, 0x3, 0x1000}, {0x1, 0x400, 0x800}, {0x3, 0x5, 0x1800}, {0x0, 0x9, 0x800}, {0x2, 0x40, 0x800}, {0x3, 0x3, 0x1000}, {0x1, 0x9, 0x1800}], 0x8, &(0x7f00000000c0))
r1 = semget$private(0x0, 0x3, 0xe40e8e8f00c7039b)
semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000100)=""/105)
semctl$IPC_RMID(r0, 0x0, 0x0)
r2 = semget$private(0x0, 0x1, 0x20)
semop(r2, &(0x7f0000000180)=[{0x0, 0x5}, {0x0, 0x0, 0x800}, {0x1, 0x200, 0x1000}], 0x3)
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
semtimedop(r0, &(0x7f00000001c0)=[{0x4, 0xfffe, 0x800}], 0x1, &(0x7f0000000240)={r3, r4+10000000})
r5 = semget(0x3, 0x4, 0x86)
semctl$IPC_RMID(r5, 0x0, 0x0)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xc02, 0x0)
ppoll(&(0x7f00000002c0)=[{r6, 0x44a}, {0xffffffffffffffff, 0x50}], 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340), 0x8)
clock_gettime(0x0, &(0x7f00000003c0)={<r7=>0x0, <r8=>0x0})
semtimedop(r1, &(0x7f0000000380)=[{0x4, 0x3, 0x800}, {0x4, 0x8, 0x800}, {0x1, 0x1ff, 0x1000}], 0x3, &(0x7f0000000400)={r7, r8+60000000})
semget$private(0x0, 0x1, 0x5d5)
semget$private(0x0, 0x1, 0x20)
semop(0x0, &(0x7f0000000440)=[{0x3, 0x9, 0x800}, {0x0, 0x0, 0x800}, {0x2, 0x6, 0x1000}, {0x0, 0x5, 0x1000}, {0x2, 0x8, 0x1000}, {0x4, 0x4, 0x2800}], 0x6)

16:17:28 executing program 7:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x162)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/core\x00')
connect(r1, &(0x7f0000000080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000100))
getsockopt(r0, 0x0, 0x0, &(0x7f0000000140)=""/131, &(0x7f0000000200)=0x83)
bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x3, 0x1}, 0x6)
recvmmsg(0xffffffffffffffff, &(0x7f0000004440)=[{{&(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f00000003c0)=""/54, 0x36}, {&(0x7f0000000400)=""/75, 0x4b}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/54, 0x36}], 0x5}, 0x6}, {{&(0x7f00000005c0)=@tipc=@name, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/139, 0x8b}], 0x1, &(0x7f0000000740)=""/243, 0xf3}, 0x9}, {{&(0x7f0000000840)=@nfc, 0x80, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/37, 0x25}, {&(0x7f0000000900)=""/34, 0x22}, {&(0x7f0000000940)=""/239, 0xef}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/145, 0x91}, {&(0x7f0000000c00)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/129, 0x81}, {&(0x7f0000000d80)=""/20, 0x14}], 0x8, &(0x7f0000000e40)=""/249, 0xf9}, 0xfff}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000f40)=""/156, 0x9c}, {&(0x7f0000001000)=""/99, 0x63}, {&(0x7f0000001080)=""/230, 0xe6}, {&(0x7f0000001180)=""/242, 0xf2}, {&(0x7f0000001280)=""/229, 0xe5}], 0x5, &(0x7f0000001400)=""/205, 0xcd}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000001500)=""/27, 0x1b}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/202, 0xca}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/249, 0xf9}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003800)=""/177, 0xb1}, {&(0x7f00000038c0)=""/199, 0xc7}, {&(0x7f00000039c0)=""/36, 0x24}], 0x9}, 0xc6}, {{&(0x7f0000003ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003b40)=""/203, 0xcb}, {&(0x7f0000003c40)=""/59, 0x3b}, {&(0x7f0000003c80)=""/59, 0x3b}, {&(0x7f0000003cc0)=""/247, 0xf7}, {&(0x7f0000003dc0)=""/235, 0xeb}, {&(0x7f0000003ec0)=""/166, 0xa6}, {&(0x7f0000003f80)=""/130, 0x82}], 0x7, &(0x7f00000040c0)=""/181, 0xb5}}, {{&(0x7f0000004180)=@xdp, 0x80, &(0x7f0000004300)=[{&(0x7f0000004200)=""/19, 0x13}, {&(0x7f0000004240)=""/153, 0x99}], 0x2, &(0x7f0000004340)=""/242, 0xf2}, 0x3f}], 0x7, 0x10000, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004600), &(0x7f0000004640)=0xc)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
creat(&(0x7f0000004680)='./file0\x00', 0x80)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000046c0), &(0x7f0000004700)=0xc)
clock_gettime(0x0, &(0x7f0000004800)={<r4=>0x0, <r5=>0x0})
rt_sigtimedwait(&(0x7f0000004740)={[0x3]}, &(0x7f0000004780), &(0x7f0000004840)={r4, r5+10000000}, 0x8)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400)
r6 = socket$inet6(0xa, 0x1, 0x3f)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000004880)={0x0, 'ip6gretap0\x00', {0x4}, 0x100})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_netdev_private(r7, 0x89fd, &(0x7f00000048c0)="ba96f73c6a32697396a9e7d0b4f73af987957f908a622e75c796bf4ccb99195a29c4d8360d5ccc21b49c513b4f717e5b617a659adbf1005afe5e28ff35a2423c673cfc2681053ce4b30e82f8b5fc5b41")
sendmmsg(r7, &(0x7f0000008780)=[{{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004940)="6cc788953a13dc02c1fb9b205accebe1596462d0eda424c01acfc5283ae9de908a14e1a1f07dcd740c66989f97e0b9bf202a9f979864e6f8ca36476c805a4039e46024de1ceb2169f394014b45a10f66365c65b8b8c07c64fe24c211a122ea71af9370691e12466bbb50b7cb82b395d4fab0ced18707fd787e29920f59535b5e4a38d71403af70dbddc09b5e35921a6236e493bf985b13b7034e967df53fe35252721f68844e2c40022efa60d174fcdce66de76632d02cde3e51fa123030eacbc631be3213fe4030bb08481fcd6bd1d36f60f35792296444c54efa041c4090d6", 0xe0}, {&(0x7f0000004a40)="253f2581d053251b0706ca518d4a6cbce3183494210c221cdf3b081509421b4da601ee5f237f417f4a", 0x29}, {&(0x7f0000004a80)="fddc5ed850", 0x5}, {&(0x7f0000004ac0)="05d0e467771040d604e1c5217ea0d38fc01fe4fd985b6ee9d88267ca317ea1f99e3c9a77bcb998a4fb4de11969b558791aee84abd11a4b6d6f75c9ee5f8818e20b82de62b4f1db1791165a061aa7e549b537c4b5c72d0cacfd320f2c584ff304fffcc9e1ff4c96b1bb8aa46d9afbd91e679ee59e99e2cc7ba9e89fdb0fdc6f1e1c2d936e57042a6b778bbfff99f89227efc6b75c35ee14fcd9036dfdbd5eeffd0d69ceef235111ff435704ff2485cb37ab6b5c150ded3f5b4054018ed350a0e47daad464d492099a2b4de4456415ab7addb3e918369b6ca5ea25050b6e41f4909d403c76d69dfd06bcbfb3", 0xeb}, {&(0x7f0000004bc0)="ff044819471ba375ba98a06c7090153dc13b2abc999ba80e9f81125aa9808dedcc0d3a764f40c8f275dbb1f5e11f20dcc8d2c463622064d557956adebf4c7d40009aaf9b98dce5d6471fc409bc03f82d243cc105d5d5e6f0e02cd937fd5f2973641ba4061dffbc80dcbc71f5782bf3bfcba56385fcedf0b00b9c371213b11cd61d681166956878e00556d2e52a", 0x8d}, {&(0x7f0000004c80)="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", 0xfe}, {&(0x7f0000004d80)="bca4acdd5221118401a4b4fe93f15f78fdc06e49b76c6a60937b29f86d0610dc095bf013e2cf8f11a5a7fcda0c1f9da32a2ee9c950f50a05d7b8bb98cd270fd4a457813e21e60888a2719e61c0d0604bebe39a72974f3adcf18645543bf202a1dda955ac9e38c4d224f690107b9c70e6172934887e55227358c2655a01cb7fb97a9e61ba5fee594add31f129cba0df5b65499fae21468b2fa0db6061fef245f8fb9ccb96d94b72ae0bc0d5b7b115be302fc4bba0a7eec9ae6d718e1c8d4753d5fad9625f55072535e3a493b8ed3064b6", 0xd0}], 0x7, &(0x7f0000004f00)=[{0xe8, 0x0, 0x7, "716da0c621b704559e2d2d3bb40838b2b99d3ba80898e03aca378885d808d77f5736d3939913ef2668e76aa0f304c2deeb5a8531587f573c89c3286930490b60b7f7c1159b3902964330a74c963acb798921e06a2b811079efd063ac4c839a2027cdcbea4306af2bd6b90101a63ce9cb6db5a34477e60aedeab701ec5e5a889bd968bfb3323489c9ec908b72413cfb94c34c35f0dbb38ed83361974b5574f8e808c8d511680b2bb2fd86d72fa81fc4373c76d070da72d8bffa2c35d64044d157c6b0f723231139480c1c828f28d5180777f3"}, {0x90, 0x101, 0x46, "1ba27995703e20ae5b0e22ae1e6d88a6cab5fbab49b58768c615ffa89fa1ff230d4badcc11eb43f9b55048392e4b58e55fe87515811eb718ea090e07410dada57b86b3cc548db9da21528e27400bd16219f685b67b302cbefc6e908f169184d2db5d81500c5953ff510fb4a1b114bb922962c3bcdd4e5d573c86b5df629d2aa0"}, {0xe0, 0x115, 0x970, "ba8deabab116f2941977084e32c01f179ae6c6dbc6109d7373011b92e73f0bc885ed030e862fcac737b0f3a3d38059faec06bd66f401ca5c12fa37a3a2bb03f1a9f1fd71d2f42766783b97f5f403f390dc0660db5d046385a51431f416e0e134bd79b1e333189711430f06abacdf5b575f81af1b6c4269f522906b10e58036f5141dd5102b1d160657564ae3e48d78d091c54b0b24b6c72a032f25c98174ee01ea7f311436164dab6c518c9964728ec45eeb3446c0e7685b7a1953e381e35a7af0196e7b3337c88a85bd7e95c2"}, {0x1010, 0x101, 0x4, "09512b06215cc397b44c742965944ab2b5c3768fed3f6aa07337a179659acf6482ff0562acdbb4e31a17a663532c78030d24d6b551d4b59685a6c3646911e8ea862d2c672fb6192ac00a9ea9a4c62196ceccf358581cab6775f9cff864c67ef0e06270b289e60328a69126d137f015e13487930ab093731fb03d2c8b1d99a0bf11aa7eeac2ccad04f53718f02c4812a8a8fc8b1e1edecee1cd9318014cbc9bd74b447898cf983c6ace999b7c43dfb8785ad1d51f43444618824a8816bd18f4f2276f6281fde06a64a778b08a82479a8737057508e5c4adaac4422f5188dbe70e71cf7d8ad5a580f41eed33043bbdb4681b1d355236e1b1245358703411f5c8a807ab33188db87018ea7a9442f8ece1cd8291b9f21c20046339b46f827413605c9ef8bd2cdf367998eccc1d0061dab051823a17ef6cbbe3f5f1c8bd21e906f8cc91c7fff807dffbf5a15708dc5befc8641bb2ec29d6bf452fbb44dd7a0626172ef022cb44680cbd5c7c308bf85b28825c3e3ebaac393fc566c6d0319aacff553220099e9e88be9341da3e28e63d348c34d989b3cd1c83ebc59fdcfdf3b73ce6861ba9171e065eea9767bb9727887c87630ffb371b6c50f13756d456027045a9158b540879c1ff4737c17448fae8b13f5b6b6207587600d4fb41add98ce787ab1f2d4c366a1ec5a5e2683ef31284a073f95180d52937b401d8539f9d4f717e27aa8bac884538b618a738702d81602e0bcf005df516fd1a3040a9b0c59f67aeb40cd1b2b78273900e064eb9e584b98b600bc8ef85569051c43df6d80064c149420bcb9c8dfb714f155de50a37385421cf82514e4695ba015dede31a9af912dfbcd2b547b80d869957fa7c306e430f51d8ccf266b2b984d2ad30941da9f1922b8c055c44a06688ed22e07e6c3485c625036357f7bfef723d5519e79da291f8251e126106f0e28336adacd03e85a2bad9d3b5520e02703ab2c5609036b4fbee066c67c67faec102707897c97da68ef28626de9c1f5eb80d341ef875ed00659389705106ea4dca242405c933599d05d5fa2f541bb86a5548eda77375813f3fcf2078be3dc919a5c1741fcf71ef1be02f2af7827b61cbcc897ece9bf2c187ea995521323f62def2f7677fd7b95a3a48e70136eb1147ba9c47213bd3487d0a6d60a099d1db467a5afc1146e32b2add3c2275b15d2900efc3dd237368b6563f482d1dcad62e8567d34d2a194767785d92e6f3ad3f636f39d42e8bfd91aeebb2e2566fad76c5b09292effd6b9afdb21d0bcb437c0e3f73340c226be313a83b8d1d8bbef2942a56efc7cf6e33f770f07afe81c08a39c44d30c6a2c96668f1adb98bc8d107c3d81e536a7cf80e41901c2f10237163aba5802ce800c7d73e68fb17538d47b846e83bbde777a075f8369dd33d9a20bd4adbb9b76a4d10e9a5a5314c5542bb804bfd32d771b333840f2e0ca9c8bb568387ba75e585f6b3ab75a4c8f18c25d93f82d783da8ccbd1b6900f3abb6f9cd9b08d9546bb55f3cb63c08592e622d09320633747b1d962ec03a4113c908e0ed49aeb51b06fb10efde99a82c87a4fba49203c09b145277af5caacd9e3d79f7638edca34239c64ee7e6bc3f82d18c4419aff7ef21bf2ac653d924b4b93706b6db67b76664b0623e4b43b6273fe16de540d4e47abcd6ea55c38c8c91edf73e23e5b4144e370eba9c82c5b16120ae98ddd3e923f807d5bb760f9c3e2985ff0c8dca19efa298ad8d83d2a29a35f3a0dc23baf76bff046e6b4d623a855ab9c80de7890aa0f3da72a2f24cdb95d95d92fcc63b8321e50cb9b3aa1fabcb9e42bd3072e1571d35a00a3112379931546e30897ce28be49076937e7f56e4a75f34a56e3124cb8dca2353ce7c1e9c92c7d0fa04ff80c2bb677e310df79f995971a2398bc1c00e73b1ca29dfac70a5f7925517b5fae8792d7b56a5631252ecc5b8a9ea9a979b2cc9b9ed57ecfa64991bc6d60ce71f4986b2c2d131693cc6d55251d3376ffc5778611c6adb839cda110dbc95501d00c078856bce0a503342b98668c503a3854056b77489a914bc8cfa17e1f5d27a00008316fc94b4439d4e274c38f6f9cd0808a7ef6afba5189425d8b72ce4b4147388a1863aabb1dc8d5a8c426557c45d805b8beb6322453091fb937509038b90c9c6a25d5662d6ef99d58c42a4d10d7b18cedf2f66c81923d040763ad679db69cd836d849f2ae6a1f0a32bb233275f32b0831d464c9345138afccadb3700b9ee42bcb93a0175f1db48837e100ca514d3a6fb657066f2e4d5eef629f3bc86778da789d4be56ef314512d4c198e86ce1937b6320e4d4d9bf04ce4d1a371237b2bcf83b934a31f78624aa05dd9a1f629d06a4aa5250173e8680a5f302edbb804554693e6dbbe5978871a26d145221759e410a5a6f3da072b91b4001ec61a2f079ff582754275298ec20c41927b7a62f6fc9ed9edd2669365af32b73fa56cf1a734dd6b80097011a167b7c6d5a9d6053eb6affeb4007eaeb1de017d110a37246b5b9ae653ff6984a1c9af41e8825530041bf867deae094652d73726f96ed634379db5ef1f2d7374c738f237c8eafc0c5866933e773002d4cb86a74a33d51a5e40372eda7ff0c4abb0e8275b5721584ff0e91674d6dbd148428f4281429577d9f91db0f2a2d5a8d20b69ef58ab1c83669c6ea6efe970a6e5110537cac0625f718e65e860757b16b68482e5bb2f4697bc7a5f3d1c3b96d7d95c6024336a8956b19679c977755b9de483c7e103f5c748fe50c071467b21f760f6724e24864a6a7493b99397387ea9455e5db7e2cd7950b9d9b119a74e11e04aa85d6855d34ee9db3067f137451a0079a9f87c9f0d65c39f67a7fa55f191d01ecadb3558d7b1722c070fc2b6870bbc5f54b4132d157897885fa4b0a051cb480416ed927ee266a2b258a51c01994d77548a8bab1a9abcfe46d1071e406d15dc2dc6517b50c33ab8474d9f9e1d56dbdbbdf1935c500f592a97a3193ce6993623e8feb908e193a8b29109fc86809aac41feb73c2c9a466ce287b1abaa9ee599412964496ef6bc5984201d3846dcc833635450310f6986e494d564b96e1a34d9444a08bc31b268e2b6a25a5e8b09afdbae36f611e85b156a53a8fed0e980ce7ccbcc32e2b644a2308faf762a380e926090ea7447a09b3e14d0398dca6fc5a685cb4436aa4189863e9dcbe4a934d2dcf13159acf2fdc52f744512ac9bb2965d468de8e1b458accee81dc7f5ad3ae030afeb48a5e401069dfac8cb1017b469aa6112e8f009b531f330a79f28542625e2c6f5d6c7222f24fa5dc999aff67e09d4ffe1dd04bc43ebc007ada57bae739e4ade277e957d1750f9993ff7fdfd9d531ed58a8d9cf3116d5b477e96f23dff90e603bbc5b2adfbf163e8d8b6ac0263642fa4f293d5ef6226091da01a25669ac9cb590d0962578036e0b865dc87b077be0dca072edbf87b423fa042d40c9394ee0bf884f533301889d4c032a78c70d261e48123f0c538922af08d444dc5afc38b55774ed635213a626126972b1d1d1a227f3845a1efac1261fd9e855e9f762ae540bc3c50c61b6571cf1efb172b22c56f69b3ca8dbad026684f8526dc8c761228f2fa2a11afc3b84d7316e66d8866f4b5022710e1bbf4098750086e5c85a3aeece853a77146a8eb83ab43e9815041fb7537c3119d332f780273e439fa00a02ec324d4788bd6815c515083a7154c760364301afcf15acad6ef026bc54607c0b3255eda35de42b02127e5f3cfdd3aa3dd515c2e08d1b3442cdd57059a305bc803fdb2a7f87d1f8109fde30764712143a707dfa887d35bdda7437099ffb37c25cece99e988f9c137488b9c6937e6ed49792d242fe182af3b11ab3187513ca312f16d0d257fdb2df2d2d997d315f5f86f4da92497a1b21fa418f6bbe546b56464f9e355e28d95d3fe1698469173ea180d905fbe8506440df8cece5486c05575b62b754b17e9c09fa22c3bd3a32d24ac75f6e1a4bdc75df366075b7e03c65d98c1758715921185295b8f489c2141fc27f5685472b497dd1b883172c2480fce2a8414d766681dbd8f31f5a777b8f7e595b3378b09b2bc5a3f2e2d2b396d4b9cc3865633141c62a1d65bd073e9cb37d55dbb2a5d8671c326e7f7e114578d92f83161c8c0175105cff4e269273b219e4a27dad2d7fc9384fd3a636cca0591ace02095e2f1e507261c51732ea1ddb090fdb01a79eca3237625edd3a4a4d21a002a24edda6031dff49330aa2d7594093dfe3e0776201100b955ca8f18dbf737ed3a5c9339190232a10309a0daf9af21c1cd65db2207ad5c10688d4f4155398866807dadfb9b57437a39752681a28e872d4cc648180ff66f08aff932cd1dc917f0f3d470014b58f294fd7e2ec96881152fe47ab3e3f5c05b3401313cbc8ce62280e07252daa910ae045ef981f90190bd603af1f0f47d8b30f6d78eb59a452d9d94835ba8db298634c36c1df77ca14120dbd403b73c595b25fd1d96e0e3217c5727bc790ca812b12ee20aced37b8d58410ee3392dd6ff8429ef39ff6de5dc0b741b9feb559ef7ab751e5b7e96b4bc4eaca6f95624f9130be1f880e62762300ca2f697bd643fd8c7d802b8d50efa8a97a2f73bcd023e368f39b1a7d75c88857a2f3a99c7410528c70a7ed9d6d48dfbe35ba90f7d039a18c18905fce1b1e44a92aed43ef334a9bbf03656d2a0d6daddbe716f54caf7db20cb38c62a7586d2b229e0c3d15eb7b62535764a35a1cb0b65f1de0de963211926e2faa4b4a19725844dc7cb9348749638d74df1070048d4021e5a0c98ee02b1992f17f31256c74f4d885113d5f11c653f9574f1957abaf16de85bc241f951897fe74d91b7d22452faa4087d7395793f52ec6caa277926288042bd534eb2e2611ac6480bfe9200453dd6671039674e053d68a2e67f6af4145c95025ab05322e1a7a968cf5d89acc2ed299a496980ad580e2f6e83cfdcb79b4cfc44785453e8c1c6498bfee9b0b72351172a9a299c96c356889408a6894183c3a6197961749a1801bc4b08b83c429e928c8f3bcaa560f4801fe8a5566f0f52c1fa23ab84586d204ddf665b43a5447aadf7be9b9341a4570c00bfccf6d4a2fb66bb67de01d9d5d8c726efcc14c5baa7029ddf186a7c9c3a1b5883fdae557b90d4a50f95306e6b7b4495e8b67f56419d0e8b84db8946ea9e09dca9516838d76aded5b69dd91d092c5bae9d24eac748d8ba84d94e96b2fa9de2727c4a10e59c8dd310d3ecf827796effae206ddc6335b30fa2c39ec6a08c8b72c9cba605808b01d5fa36a201295ccc906e5e797535043a41fa2a86b5582e4c68dc6dd4ec55054e030e046e4c21bc06b3342d8b1ab0c0d817a42301f161fcfa73f42c95cdbd2b447b93260dd4577396477f77cd07136e1d8e38c1b964b71291c477daa7874ff0ffec3e328891ee9e73006218698c7dd2405e63f1ba69e89745e726e11e31529fcf124feff969957fdbe645b267a4525c277695f601a643defe9fd2a4c8a2e852b58a5e46ee966d17b5fca55e80de5f39c622827a4d896518276b7aebbb5656311e5c7ffad9a580210b6a41a3d3c7ef0b8994be9888fc91d42f61d1f8d2c5b6d2adc99991c3b2b7cb207fdc1731eba70b21db9bdb67356cbdb2464d9f286d243838d169ae5b8cc95225ba89bddefdcdcfd98a260d0b931d8e9b61055ff3f4302672229cbc6c8007e2ae33b66e24a711a700f20c8c7804c5600ef31fdf540440d9401bd5f872b3d4c217c1bb002b27cd02681be2a36075225cb0feea66f6"}, {0xd0, 0x6, 0x100, "3a2c4638303311de2987879c083f46ada26ee6e84643191e3ca3dc460e51aa5d8f7225cacfe875f1e73cea1996ff58d6637a4e58f1e5d620ce900e5775405ce0baebdb5d05e587e5421a991193f76297d4e44bb4f0eeb1fac1452effa6f6856506d1d62f619bd1de161a1a8e1a49d82d0b290d9aa86aea7145fc9d9a61d2699c55519e0d98805ed54aa8b1fb3f4ff2e77903d9c5866737dfc7ea310cd6a0e702472f041f7fafc246c4564438a177685b0264db2616d437aeae40"}, {0xd0, 0x0, 0xffffffff, "3c08e1f6fceb521e7aa4c421b0007f0a439e7b10c6f8849f7d3460bd138dbbb73af3e8e3de73be133f5f34e08d6205abb2cfd8635184a48ad1eeec1e5d63db2b3d3669c5de1847ca3bd30096a700338d368115ed2df5d4bdc545fae2d0fa0098061c30c260a5cea70a4c1e52bb08f288fa2df0840e49be700a96a056db48566b600364588f49730e88d12058949262acf6e5742475a32bff326a62f9ed4dd732c22e105eb30097e73d3c6d8be7f00781006ae32d051483249a25"}, {0x18, 0x103, 0x2, "3bfe43dd40d0"}, {0xd0, 0x331, 0x20, "2feab9c382d29da538a215215ecc6c47c8c178fdcbacbc42d1ef018dead17a88bf9e0aea9b23a138e1ec2615647916eb2e2df05d307aae5c3cfbe0f073c552913a008765651abe9e6b5fd27b8c59ff715d17c2196c4ff27e50580b52af5906814a984eadea07b705cca8443537742179a6fa9a1dd43819c124fe4071473805bad258a26a210dd952e72fc08a6348d3286ebfe1ccbb948abcd28052932bb6f6ea0256faa7420c4d9ecdc395bed40efbac11ac6a46e00dd1dfd5931b4be06bb4"}], 0x14f0}}, {{&(0x7f0000006400)=@generic={0x3, "c0f0f6f25220171eab837d718839c1168197c32560f11593748339218af449571e267dd07803cda22b3fcceed9d3d88c74a6d7baefa09040deb1f654ce2453634bf6478ee339df4d4a3491f08efbab3fe00d0093a3c909e12a93e29920fd5a4f6a6f5f6335792c84feedfdd115277bfe68545ef52b6447f704cdd76077a9"}, 0x80, &(0x7f0000006840)=[{&(0x7f0000006480)="36371b96cadc78efc0677e99c481340a293b99c45887b40c03b64e1bc90b951433a555f2d46913f3710bb7b784d6ece3b0473b19fd4678ce7e914ca77cdc39345a2a177979e598029f029a3c5892e28f63c69a58cdf890cfb9d9f1ee98fdbd89fcf1940f32cd92cda8d8b44ed25bfa17d3c23cf180cf71b040c2ddcbe06e9a387ca3cb5909a11935b0ee87e8a33aba1de777606ad68fb5191dc763811881e19a287e", 0xa2}, {&(0x7f0000006540)="a2fc5559791f86ac04140bf2f4eea6f9a25daa2ee8c621b0bf36d5e719a2a028281ced64e0b5155ae44c612abce94e6371e4594f644c8c5d2ce69f619adfc74dbe6a64eb081b169b4655a64897c61074ee55f1ec5eecab33242882b9576d9c0268f3952addab930df26c78c0fbf74b80839ffac15e0db73cdaa392d796826285d1857fb8c0f8200bca", 0x89}, {&(0x7f0000006600)="ae2e1590de53af17134498a4abec505dc6326947eda4a8482cee89a25dccadf9acbc5279004afe1c5da0059c2b0e6ee96237f76f8f11fc1fac584246a4506de30373dfa7817a7cd45fde80f61790318bf43be2eb1aec45e95a8302ca21dfe170815e9db2ab0c3a438a406e1764c51d66ba9fce29b75c71aea88335026a150d501e69f29183493e62a718ed4a41c2e91aeda0005364e93eb8ffc89bb4cb0b17409b549caf11bbb7b8449168d54adb3eb34bd408f9e7ee55e18826620ef4ef0b0053af723cd1f88ceedf527335c2c4251f4c65693bb4ba44cabf367920dafbe27159e8ad7bb3", 0xe5}, {&(0x7f0000006700)="4e300edf0439fb5cf9db4495b4149088bd094c984ada3735a0a0638c19b31fa0b61a488b7b2afdb45fdab2147ddb24c43e8e4300f80ae17cc10e2a6e14c40420f1df6a454dff02e51543862ef1f00b659bf76587d03537aa83268f7f249c15b36ec722", 0x63}, {&(0x7f0000006780)="841339f54748bb74ec888c176257e2fa4078c70e382964e86bd7360200de0355390c87fad7824aaeab3dddc79801faf328e401126cc7b987164ba0971c33c0f411fee52d9bbf2351f21717f5ea48445895ab56df20cfc415290196cba8094e0487bb0bf55d3dc8476ba5402c34a38f68c3b613b5ab98af010c1c450a3ee4f08e178af08e3815382752050e66fe7749ceb6190df25f0c995fe92c90e0e73856afe3fb13fa11d597a1c32719638bf32b6564b845473fb67a0e", 0xb8}], 0x5, &(0x7f00000068c0)=[{0x108, 0x108, 0x3f, "7d9e27bbcdb68fe02173947b704fa0696fc783b1eac167297bc339e95e109261aaeee1cb85ec5cb2c5c0fddc61c309ceecb2697253343f2b620ccd2ce5ac6104a355d5ac8fd3ece75b9e32414e86269b6a8cffcc25bb0d43335807ab305526cd0d3097c5c0a55eabb14fe5c8da74d8cd48ca09dde364c30f69dd8b1bf982fcd8b6a6c2a3e3dec1842dd71571c4d51d39a02651f598eb01d876e48ae738cb3bbc0afe84859895c9e930740919a9a7094a038af6e6af449868adcf7d56e2df62f420afb5a07b0ca9f9fddf36f3e320bc5e7789f91dfbb0403933e8a4b90d45c3f5d818e9f52c95b2446eef7e50b0a922914f5a07b88138"}], 0x108}}, {{&(0x7f0000006a00)=@in6={0xa, 0x4e24, 0x7, @mcast2, 0xeb55}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000006a80)="7d7a2e0278530540bffae5ac045bae3987ba2a0b9b620bec1d2197d9c4f2a90d3d12d965f196ae21bad921f7781d5e756f73bfeb7e1a6298ad6d9071c61423430bf0f51a4e17e510fd0cf4620302c02fca8d0f26b41724af1915d69f6aebd12d22773005f25ead9664294f08", 0x6c}, {&(0x7f0000006b00)="ae6600436b34f9471360b1ab78a698ed6a158ac531ba790840100ab90d90922628b26858efcefc19efab9820622f2327e135868577981f233dfc04f12cf1b7f54167be7fb03f8c9191d090c3a999ea0a6b504cbdaecd9d0bfcc4648fa2440e508fa0ee0843f599cfdf3e83dadd0ad81fd9aeb49d36e3b6cb2afb74adee7269fcf59a34ed24c83f91212c6538e6f127b2ed35f7591b48ea8014da1eb99ddde66c887be479a64c46091e4db159f2466344dbca67a163624b46070017336c7066b5d027a09dcc9057fa66670218d7718781534abada386a685733", 0xd9}, {&(0x7f0000006c00)="b26843b34bffd8a684fa6f8a7a8c6e5b95cc72ca44e1b54f774f2fdb5d997826680114dab3f8a8648db8b81eab72c5ec58d7527a4321b935829797061540455e0c7d4aedc316a45db21915183a825e90dfa9fb1e25f5d724663301", 0x5b}, {&(0x7f0000006c80)="dcee462f3c54bfa7f52be322496e0905d678c9fa3a82fe1f4b2243c0a86a1cadc913bf815091cd0f332a7e32fa74206e8939addce434a28538d90a1c6b7d59c6774e159915d7a35e47496720142bd543a51bb73876f4f3db4979868d760e0f770e449bdb11d7678eb003021446c9b608be3e76fc546f65a67694b9e07f2eadd85bf71de71e7c2dd0f7fc54a7d03bc557b0c156fdc0c0bd89a8d974", 0x9b}, {&(0x7f0000006d40)="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", 0x1000}, {&(0x7f0000007d40)="8b642202a43210c904d6c77c1d0b729d240d37b39ea9a16c2d551b16a9dce885c9f97cfbf0b235623dce377f736dc24dea7016fa094105d4ef54f3893bd086cc3abe6365682833174938b46fb3370eee7d439424fe2060824af9ab27fa0a2bdc2df70e4d2375745657ec127ac5ec6c6a89d73655213afe23081b5ea1435eefff7d2898f3faa48531f5b044f5db884dbd5f4aed3da2e835c3edaeb946eadc9859275a", 0xa2}, {&(0x7f0000007e00)="cc6fe6492f88642f70db6a921b578e3262414948cc892cc9ec752e6a0e7177843d232c69b7e6b37b94d6e6233038c5826c2b7684cd5f9b610ad23c58b8629e8c031c0069a018ddbb97d41df5c7d26b6ebb3a3d9d6bc1c9a6c89d558ed1c873dcc76ea959881b99743f02d01fa359d5f59f952b69df813a7f145ebeb930a2f685ee205b9974f27d37b2ab1c9d8e429b066b8966192025e8e3fe888c086d93cb2d10b0aa7c91faa70a5f8b0d5269411cdbc8ba85", 0xb3}, {&(0x7f0000007ec0)="c352ade3c2be26679f5862fc86a28b89392e470e3a68c699e1b01112f5d50367", 0x20}, {&(0x7f0000007f00)="b4e45ee5fc86aa7327e073111565ef0477eac9400461a2581de6afb59c172f25c3b943f284b10a063748f1ac4a6b156db6fa3bea4f941d77ac553ab82cd3f8a418549b4c5fe65592eae5322727330a723d3876bc22af444ac4a3e60a88c1202199d80974200c100a3bc882c673953867f870f2ba0e65f04725283e2729ae93eed1e834b155a347ea616f34cbe0d92d0b8c110e5d092f7247eef0c5", 0x9b}], 0x9}}, {{&(0x7f0000008080)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @broadcast}, 0x3, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000008640)=[{&(0x7f0000008100)="d24a74ae5504c1a3f30db92045ceab011672746be54eec92bf5c45d73dcec44b07cff5da0548f9ce2adbbea2331516ccd734e5c18993e6744fc30d83db95a0e89e5575df05c8af471735679b503576d1b2a82da56d8ad56f671f6424504e3e1441fcd81783d16a8982419cd445754049e3f14a37730992cd04424d33f1c0640fa22cd2a2802053b6f30190c96b92f971ba600fb01d54c97cb9542bff644a6ddef823f6b1c2f445cd29763c0d5d72d0c020cb3259c232602d6f58c68c591e6f5963048b3f88058834aa3bbdf7a9c5a33af62080d58e6d967457a7ac48edaa02b5b6d526b6c1ce529d13ed9ddaa5e6a9", 0xef}, {&(0x7f0000008200)="2748dd2876715b68effedcf2384e1fc1f593897dd87ce9adfe5c502edb7e7da313e78a1c726bfc7b29539585", 0x2c}, {&(0x7f0000008240)="bacb4a6085e418fb9fdd8057522d82053772ec5ff46955689fcd3bd9e5c0326965", 0x21}, {&(0x7f0000008280)="f51c4c8e70e8f567d91e2df00ce8410d167959c4a92f0fa6b0c184231bea4a8035445bedc3402776fd3100d268637770e5cef02b0ecbd6028c837bb2a98a2be8851b87a308a975118c74486e8829594cf448342a0416f5b96f09e33bfa6471527571b02b6ef0422f890d2622eaa8a8bcc92c8ebfd5c1a822cb28cafc0b1ac77739deb56827849a84fe37c4f4af6372951af06e66d162f0021c03dbb1b3432f1ad831395a62306d680e43dabe2bf532c6cb091a20da6033120dde1a52f03b8c39244e9fb082929e92", 0xc8}, {&(0x7f0000008380)="82d01798db74de47b0b58dd78a5cbaec8ddbad435ad20a623091ed3e7e651875", 0x20}, {&(0x7f00000083c0)="2d71871303573ae3b8577b2fa146af889747d1e6312c8ac0289f0a0eba569280391e07415f8a21194f3391c8f07864ba3d45cfb96c677dca75de51b2d8f69887cf996dc704b7339a7ef63a4939cfc84269c069b4f8cce9b0feeb19595ab0986a14bfcef96b4bb08c840ab274139ee3682f21fc3c5f6991a0672b3041bc8c68a0d2fb28e4d9d0909240906d9d4f23fa022b7a2652aed05ca9061d63150bbc46428ed10906e3f7b55a755ae90edaf1c752e492e9d1e370f79bcd83fb8ebe3cc0646084e454eb8d856194b7d6ed3bfeb5ddb8260c9933915de7bea5e2cdffe5854afdbe9952bef7760fecbd022426240e0f9f9e63a888826dac", 0xf8}, {&(0x7f00000084c0)="96b10d0db13bb0f046620adddadae8811acf4b90c8bafbc42527f1f514899e00db65ce6df766c0bd42419a1c899d", 0x2e}, {&(0x7f0000008500)="2d7b4c2609b6f6832b0d887e6a7d0e1045938b4b455ab73ab6e791d060faafced392c1e3e7557d85c2a395b3f2d023bd4e7041b5a25d29bf1c979a258ae3ac4bc2c027183309db1b87db34a6f45d28df641f862475459a5600", 0x59}, {&(0x7f0000008580)="4617edb465d776b221084083d29c10b8093ec26d70b78672721048177ebd9b32ac93a1dfc8b447712a13ed91aaeba02a6c01ce327c621a209ed8da1dfbe887ed553d8cdfcab8a131b6d6f59480597ec7911ec5fd0f26a65e9981529a590953050a89cdadca0aff4cc2379d4fbbe57b1194ebf5c718d68880a4ba8fd20e5ae55eae54a10a4764503ccb14e22aa1c53b4b43e92b5bd9fa41c28f8505df4601512827", 0xa1}], 0x9, &(0x7f0000008700)=[{0x78, 0x3a, 0x492, "ddf8dbfe92e5017e953d33e09b6008c638fb9d2041cea618651a6b48d5cf4fc5132537e68bee546f6880dcfd864d0a6d00c503fdf9d9fc73435aeba657c2c495f266a2554060363a4b3ba5a9f583d985251957c9dac36a45ff06be7ed30e7f98c9c5abfe5e464b8e"}], 0x78}}], 0x4, 0x2000800)

[   94.579672] audit: type=1400 audit(1768580248.716:7): avc:  denied  { execmem } for  pid=276 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
16:17:28 executing program 5:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x321202, 0x0)
ioctl$KDMKTONE(r0, 0x4b30, 0x8)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x18b200, 0x0)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000080)=0x3)
ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f00000000c0))
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000100)=""/140)
ioctl$TIOCNOTTY(r0, 0x5422)
ioctl$KDENABIO(r1, 0x4b36)
flock(0xffffffffffffffff, 0x8)
r2 = openat$cgroup_devices(r1, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000240)={0x0, 0x800, 0x1, [0xfff, 0x5, 0x200, 0x1, 0xffffffff], [0x6, 0x5, 0xbd6, 0x0, 0x2, 0xf0, 0x7ff, 0x2, 0x1000000000, 0x9d73, 0x235b, 0x400, 0x1, 0x2, 0x8, 0x8, 0x0, 0xb20, 0x7, 0x4, 0xff, 0x5, 0x7, 0x10000, 0x6, 0x1000, 0xca69, 0x9, 0x100000000, 0x699, 0x100000000, 0x9c, 0x4, 0x5, 0x1ff, 0xfffffffffffffff9, 0x81, 0x12, 0x8, 0x7fd7, 0x7ff, 0x80000000, 0x6, 0x0, 0x5, 0x20, 0x100000001, 0xd54, 0x7ff, 0x0, 0x80000001, 0x9, 0x9, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x1f, 0xffffffffffffff7f, 0x101, 0x1f, 0x3, 0x9, 0x401, 0x2, 0xfffffffffffffc01, 0x1, 0x5, 0x2ce, 0x279, 0x5, 0x5, 0xffffffffffffff53, 0x7, 0x2, 0x7ff, 0x400, 0x20, 0x9, 0x0, 0x400, 0x6, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffe1, 0x1f7, 0x5, 0xa0ec, 0x28d125bb, 0x10001, 0xdff, 0x40, 0x8, 0x9, 0x1000, 0x4, 0x3, 0x0, 0x100, 0x8, 0x9a7, 0x7, 0x2, 0xff, 0x1, 0x9e7, 0x5, 0x2, 0x3, 0x4, 0x401, 0x2, 0x20, 0x3, 0xdf, 0x1, 0x4, 0x4]})
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000680)={0x3f, "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"})
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000008c0)="1a76822cb2c860bba6a3a7c306ac769f67c0b4c425eff782955755c31087791dc5798b916fd6af9a0b9e81c339133c84f402e0ac794b3c8405003ac953cfa708f8762915601b12ef75813dd2f16f1aae359e88509a21e220ef858c146042984c139437226a9aac254cc77b5e")
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000940), 0x40, 0x0)
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000980))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r5=>r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'})
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x40680)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r6, {0x734a}}, './file0\x00'})

16:17:28 executing program 6:
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10001, 0x200000)
r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x7, 0x32940)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1)
ioctl$RTC_VL_CLR(r1, 0x7014)
recvmmsg$unix(r0, &(0x7f00000030c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/157, 0x9d}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000380)=""/79, 0x4f}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/225, 0xe1}], 0x7, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000007c0)=""/251, 0xfb}, {&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/142, 0x8e}, {&(0x7f00000009c0)=""/147, 0x93}, {&(0x7f0000000a80)=""/33, 0x21}, {&(0x7f0000000ac0)=""/44, 0x2c}], 0x6, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000d40)=""/162, 0xa2}, {&(0x7f0000000e00)=""/201, 0xc9}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x5, &(0x7f0000003040)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r11=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x3, 0x40010120, &(0x7f0000003180))
ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000031c0)={0x0, 0x27, 0xf, 0x17, 0x4, 0x0, 0x6, 0x0, 0xffffffffffffffff})
ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000003200)={0x14, 0x10, 0x16, 0x6, 0x5, 0x7, 0x1, 0x60, 0xffffffffffffffff})
r12 = openat$sr(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0)
fstat(r1, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
sendmsg$nl_generic(r12, &(0x7f0000003740)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003700)={&(0x7f0000003340)={0x38c, 0x1c, 0x10, 0x70bd25, 0x25dfdbfe, {0xc}, [@nested={0x143, 0x18, 0x0, 0x1, [@generic="fb8fd8db8f177e9bbf082344d0a72f6b05e3af7b0a7745d597f74d5994fe442922808a69e6edfb85006aa1c71cf38a90d3", @generic="278abcf7fada6980d7112b63ad", @generic="1c3b90741b5625b49a49b81ac7b55450ad363fc3bd6aaaaf483976c9b10ff1", @generic="52c2aa32dd475fb34d81bcc207fa01d7c00ab9baa656a508c47ca941fc826a635ceac4542169f4216e5baa0b23872146c7da774a1f78401cc29a0a896cd40019491d619a909c6289c3ddcd1751fc2558887531b63475497f63fa600ab9104c4f44e42734fddd4176c059ae8b092b1da2c1fb9561b19f6e74ddd479ea28d82400d99c08fc302555ba8e0d2bb6205f91cccb7675bf6946c291d07e7c628f429029f10f8618b101a31af8921d4324dda54755e6b9552f20d949c1698ce0dfef902e923473984dd48c708de7c84dc6d3b8f77ea52c204b081a20e7f034d67acb58bcdb98"]}, @nested={0x17f, 0x59, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x48, 0x0, 0x0, @uid=r11}, @generic="edabe4b95816aaefb701a2e9eeb0bed1a831265c6f0932aba37141b98c2a7889f0f21a6b09759ffa9fc9b8dea5d54db120518250241431ee6adbde5ea72de06967206ec1610723e7725b0c3e47c40d6aee758c999e241e1a9344821a4cfe736e3cd952ecd6dba1c647baf6e87038ef68f6b849", @typed={0x8, 0x93, 0x0, 0x0, @uid=r13}, @generic="54ca2a80c483ddfbc15b79411e7c2d675766aa813dde742f29fc77c246b6a8c10d2c6d5190c1702196a4d34b3d347285b64ca2afcffbbb2b8712d657408b6d8b257da628925b2c69a646488031229725ce624ba57c1a4985483711192ae6bf898d47f378930583cfc8ec6fca1a7d36d00e789c34751c6cb40b11fd0d0bb3aa85b4293b099e6f4a2ce946fdde8c5ee1e88a27527f4252c01c760ccac0add22da7809e3d8a3bd386d02bf44a4dfff7a1623ff861688af919d52422f9b1be3121515fbdb0c7d3bb431ec92be17432cc49007eb4c1947e511548661b9cfda7de04115394d730fac04881e6c54e6800bdc3e7"]}, @nested={0xac, 0x2d, 0x0, 0x1, [@generic="ab90f7401f83ab673008bf12668741a44bc3a7883f73ff287e3d067b6cc6906361559c5444ebf8fd3723ba3328956408b23d23bfccdcc56e96ea0cbe7cf84b17d07a81e672f76a5d09e7e2a87267230b01e34a8ec469ba63daa8cb3689d9aa22321e3d7f63efc074ac67c96c15b66180cc78dfbd67ccc1556e10afa7db00f8acb1aa685b4d29a503033402d2e5b6058958d6a6ff325529865f7e026311559a68f61cfcd58f7797cc"]}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x9}]}, 0x38c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000001)
ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000003780)={0x23, 0x3b, 0x1, 0xe, 0x1, 0xffffffde, 0x1, 0xf0, 0xffffffffffffffff})
ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f00000037c0)={0x80, 0x1e, 0x5, 0x4, "d441a1a61a7716a75c50a4eaf0a8db877b7380fea208164aa506ca5143918f3d"})
fcntl$setflags(r10, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000003800)={{0x1, 0x1, 0x18, r5, {0xffffffff}}, './file0\x00'})
dup2(r2, r6)
r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000003840), 0x195000, 0x0)
ioctl$RTC_WIE_ON(r14, 0x700f)
pread64(0xffffffffffffffff, &(0x7f0000003880)=""/145, 0x91, 0x9)
r15 = syz_open_procfs(r4, &(0x7f0000003940)='cgroup\x00')
ioctl$RTC_SET_TIME(r15, 0x4024700a, &(0x7f0000003980)={0x33, 0x25, 0x9, 0x2, 0xa, 0x87e, 0x2, 0xda})

[   95.711521] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.712335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.714665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.715258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.717950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.718534] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.732641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.733226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.735319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.744021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.811962] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   95.814313] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.817830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   95.818684] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.822388] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.823975] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   95.837336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.838028] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   95.841213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   95.842069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   95.843715] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   95.846187] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   95.851431] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   95.856345] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   95.867165] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   95.868425] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   95.873871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   95.874255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   95.884013] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   95.891178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   95.897372] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   95.902969] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   95.911726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   95.913796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   95.937828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   95.942435] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   95.948731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   95.955486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   95.980717] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   95.986046] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   97.806162] Bluetooth: hci1: command tx timeout
[   97.806848] Bluetooth: hci0: command tx timeout
[   97.870604] Bluetooth: hci5: command tx timeout
[   97.938389] Bluetooth: hci2: command tx timeout
[   97.939116] Bluetooth: hci6: command tx timeout
[   97.997639] Bluetooth: hci3: command tx timeout
[   97.998477] Bluetooth: hci4: command tx timeout
[   98.062602] Bluetooth: hci7: command tx timeout
[   99.854600] Bluetooth: hci1: command tx timeout
[   99.855364] Bluetooth: hci0: command tx timeout
[   99.917679] Bluetooth: hci5: command tx timeout
[   99.981765] Bluetooth: hci2: command tx timeout
[   99.982835] Bluetooth: hci6: command tx timeout
[  100.045814] Bluetooth: hci4: command tx timeout
[  100.046524] Bluetooth: hci3: command tx timeout
[  100.109627] Bluetooth: hci7: command tx timeout
[  101.903959] Bluetooth: hci0: command tx timeout
[  101.905035] Bluetooth: hci1: command tx timeout
[  101.965692] Bluetooth: hci5: command tx timeout
[  102.029639] Bluetooth: hci2: command tx timeout
[  102.030461] Bluetooth: hci6: command tx timeout
[  102.094600] Bluetooth: hci3: command tx timeout
[  102.095366] Bluetooth: hci4: command tx timeout
[  102.158605] Bluetooth: hci7: command tx timeout
[  103.949621] Bluetooth: hci0: command tx timeout
[  103.950087] Bluetooth: hci1: command tx timeout
[  104.014380] Bluetooth: hci5: command tx timeout
[  104.078705] Bluetooth: hci6: command tx timeout
[  104.079175] Bluetooth: hci2: command tx timeout
[  104.141687] Bluetooth: hci4: command tx timeout
[  104.142151] Bluetooth: hci3: command tx timeout
[  104.206585] Bluetooth: hci7: command tx timeout
[  128.313851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.314520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.023849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.024456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.379773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.380388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.389984] loop4: detected capacity change from 0 to 8
[  129.400480] vfat: Unknown parameter 'appraise_type'
[  129.411155] loop4: detected capacity change from 0 to 8
[  129.412118] vfat: Unknown parameter 'appraise_type'
16:18:03 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='keyring\x00', 0x0)
r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0x0)

[  129.488051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.488680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.528336] audit: type=1400 audit(1768580283.665:8): avc:  denied  { open } for  pid=3823 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  129.530023] audit: type=1400 audit(1768580283.665:9): avc:  denied  { kernel } for  pid=3823 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
16:18:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chmod(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x9, 0x8, 0x6, 0x9, 0x0, 0x4, 0x11, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xa4f, 0x2, @perf_config_ext={0x2, 0xf0}, 0x4, 0x6, 0x9, 0x5, 0x2, 0x1, 0x4, 0x0, 0x20000008, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=<r1=>0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x4041, 0x0)
perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x40, 0x5, 0x6, 0x8, 0x0, 0x401, 0x4801, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x9, 0x9, 0x1, 0x6, 0x7, 0x0, 0x7fff, 0x0, 0x4}, r1, 0xf, r2, 0x0)

16:18:04 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25, 0x5}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'])
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x5c, 0x20000)
r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x430200, 0x151)
r3 = open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x1)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000280)={@desc={0x1, 0x0, @desc1}, 0x21, 0x0, '\x00', @c})
unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200)

16:18:04 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000000000000000010a"], 0x28}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)
sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd2a, 0x211, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x81}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x2c}}, 0x7708db5ae65243f)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000400228005009200000000001000210061000000"], 0x28}}, 0x0)

[  130.024046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.024672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.040519] loop4: detected capacity change from 0 to 64
[  130.043978] FAT-fs (loop4): bogus number of FAT structure
[  130.044468] FAT-fs (loop4): Can't find a valid FAT filesystem
[  130.089698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.090294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.173869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  130.178496] loop4: detected capacity change from 0 to 64
[  130.179872] FAT-fs (loop4): bogus number of FAT structure
[  130.180315] FAT-fs (loop4): Can't find a valid FAT filesystem
[  130.183747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.184334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:18:04 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x10, 0x0, 0x0, @binary="06"}]}]}, 0x28}], 0x1}, 0x0)

16:18:04 executing program 4:
r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f00000016c0)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@empty, @private1, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00006, r4})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@private1, 0x3a, r4})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1f, 0x8, 0x4, 0x3, 0x0, 0x3, 0x8000, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x49c, 0x5, @perf_bp={&(0x7f0000000000), 0x7}, 0x80, 0x5, 0x1, 0xe, 0x5, 0x0, 0x3fc, 0x0, 0x9, 0x0, 0x1}, 0x0, 0x2, r0, 0xe82279891d17a3ce)
r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
signalfd(r5, &(0x7f00000003c0)={[0xffffffffffff8000]}, 0x8)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x4, 0x3f, 0x8, 0x6, 0x0, 0xfffffffffffffffc, 0x21002, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xea84, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x10, 0xbb, 0x6, 0x2, 0xf1, 0x2, 0x3ff, 0x0, 0x7, 0x0, 0x101}, 0xffffffffffffffff, 0xb, r5, 0xe)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/asound/seq/clients\x00', 0x0, 0x0)
pread64(r6, &(0x7f00000000c0)=""/33, 0x21, 0x0)

[  130.252532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.253747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:18:04 executing program 1:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {<r3=>r1}}, './file0\x00'})
recvmsg$unix(r3, &(0x7f0000000380)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000280)=""/121, 0x79}], 0x1, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0)

16:18:04 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff}, 0xe)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="011b040200007174189c69f06d6b413b652697b6b56ee5fda8c41f141bf2e3e3af98e196b626c20ec45e6250e8318245a6480000000000000054153f6a8ca80222972b2b020030346c520b9198903fbec4ca1d6a0141000000", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRESDEC=r2], 0x6)

[  130.375710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.376291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.465290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.466363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.510511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.511095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.539921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.540510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.654372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.655052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.692927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.693528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.701163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.701852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.729301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.729916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.432476] Bluetooth: hci0: command tx timeout
[  134.478777] Bluetooth: hci0: command tx timeout
16:18:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000035", @ANYRES16=r2, @ANYBLOB="050000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}])
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff})
io_setup(0x1ff, &(0x7f0000000000))
faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
dup3(r0, r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0)
ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'})

16:18:13 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@dev, r7}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
setuid(r2)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)
connect$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:13 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff}, 0xe)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="011b040200007174189c69f06d6b413b652697b6b56ee5fda8c41f141bf2e3e3af98e196b626c20ec45e6250e8318245a6480000000000000054153f6a8ca80222972b2b020030346c520b9198903fbec4ca1d6a0141000000", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRESDEC=r2], 0x6)

16:18:13 executing program 0:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev(r2, &(0x7f0000002780)=[{&(0x7f0000000380)="bb", 0x1}], 0x1, 0x8001, 0x0)
write(r2, &(0x7f0000000100)="8a", 0x1)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x2, 0x0, 0xba47})
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x105002, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x40000014100)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10)

16:18:13 executing program 7:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x349200, 0x0)
ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @lba, @lba})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x3e9480, 0x0)
close(r1)

16:18:13 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x24008, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)
getpid()

16:18:13 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x125002, 0x10)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="ef"], 0x1008, 0x0)
msgsnd(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="01"], 0x401, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/214}, 0xde, 0x1, 0x1800)
r2 = msgget$private(0x0, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x5)
setuid(r4)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=<r6=>0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, r4, r5, 0x116, 0x3}, 0x0, 0x0, 0x7, 0x7, 0xfbfd, 0x0, 0x4, 0x0, 0xacb3, 0x1, 0xffffffffffffffff, r6})

16:18:13 executing program 2:
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = dup2(r1, r0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="04022dbd7000ffdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0800090005ac0f000c005080050009000100000004000b000a0006000802110000000000090007008bdb1f5f750000001000508009000400cb0207fd20000000040028000a000600ff0000ffffff00000b000a00cd8de00e5527940ad1708a213b88a3a6cbd26524397348e37fa3fe4ad200"/129], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x404c840)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff)

[  139.620741] =======================================================
[  139.620741] WARNING: The mand mount option has been deprecated and
[  139.620741]          and is ignored by this kernel. Remove the mand
[  139.620741]          option from the mount to silence this warning.
[  139.620741] =======================================================
[  139.654173] audit: type=1400 audit(1768580293.790:10): avc:  denied  { write } for  pid=3957 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  139.676746] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
[  139.688812] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
16:18:13 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@dev, r7}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
setuid(r2)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)
connect$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:13 executing program 3:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x24008, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2008864, 0x0)
getpid()

16:18:13 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff}, 0xe)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="011b040200007174189c69f06d6b413b652697b6b56ee5fda8c41f141bf2e3e3af98e196b626c20ec45e6250e8318245a6480000000000000054153f6a8ca80222972b2b020030346c520b9198903fbec4ca1d6a0141000000", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRESDEC=r2], 0x6)

16:18:13 executing program 7:
r0 = fork()
ptrace(0x10, r0)
ptrace$setregs(0xf, r0, 0x2, &(0x7f0000000680)="ae14ed05dea8842d9718093b066536d44809167011589f3036316e4f65a737363bb09c1950a7c5d111944da1a9a8751c778d703084d6b7e005e16312cc3245dec57f386919ea8adb27faffac3fbfd4f20ae31a1693b78dd407d1ec78f829155588f3ab7d5cfe58ff42e2d3dc17c2670a32c1bb491cfad9d6a4fcc9f513a1d4d009d1a13445ca96822c69e569b454e9f3688d8e9396c2631fd0054107276cfafa8673eac54883a2d9fc91d3343e373b4408af5bc25b22639d98dcb52f056aeb5a0feaa29a1a0775715d53bf61bb107c1fee4f6d7dfd19118b99e5b3e0c711b2ae3c8062b016dfffd2a8645e21c4d2732043")
waitid(0x0, r0, &(0x7f0000000080), 0x8, 0x0)
clone3(&(0x7f0000000440)={0x8081800, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=<r1=>0x0, {0x34}, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/74, &(0x7f0000000400)=[r0], 0x1}, 0x58)
r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xadc}}, r1, 0x0, 0xffffffffffffffff, 0x0)
waitid(0x1, r0, &(0x7f0000000100), 0x40000002, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_snmp6\x00')
r4 = gettid()
tgkill(0x0, r4, 0x0)
sendmsg$AUDIT_SET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x3e9, 0x400, 0x70bd27, 0x25dfdbff, {0x20, 0x0, 0x0, r4, 0x9, 0x7fffffff, 0x4ed9, 0x661e7aaf, 0x0, 0x1f}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000)
getdents64(r3, &(0x7f0000001ac0)=""/255, 0x18)
openat(r3, &(0x7f0000000080)='./file0\x00', 0x123000, 0xd)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)
waitid(0x2, r5, 0x0, 0x2, &(0x7f0000000180))
flistxattr(r2, 0x0, 0x0)

16:18:13 executing program 6:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x125002, 0x10)
r1 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r1, 0x1, &(0x7f0000001400)={{0x3, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})
msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="ef"], 0x1008, 0x0)
msgsnd(r1, &(0x7f0000001040)=ANY=[@ANYBLOB="01"], 0x401, 0x0)
msgrcv(r1, &(0x7f0000000000)={0x0, ""/214}, 0xde, 0x1, 0x1800)
r2 = msgget$private(0x0, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, <r4=>0x0}, &(0x7f0000000040)=0x5)
setuid(r4)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=<r6=>0x0)
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, r4, r5, 0x116, 0x3}, 0x0, 0x0, 0x7, 0x7, 0xfbfd, 0x0, 0x4, 0x0, 0xacb3, 0x1, 0xffffffffffffffff, r6})

16:18:14 executing program 2:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = signalfd(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
dup2(r1, r0)

[  139.957652] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
16:18:14 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@dev, r7}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
setuid(r2)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)
connect$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:14 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff}, 0xe)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="011b040200007174189c69f06d6b413b652697b6b56ee5fda8c41f141bf2e3e3af98e196b626c20ec45e6250e8318245a6480000000000000054153f6a8ca80222972b2b020030346c520b9198903fbec4ca1d6a0141000000", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32=r4, @ANYRESDEC=r2], 0x6)

[  141.646667] Bluetooth: hci0: command tx timeout
[  143.695846] Bluetooth: hci0: command tx timeout
[  145.744242] Bluetooth: hci0: command tx timeout
16:18:22 executing program 0:
accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xffffffff81001f8b}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x14840)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x22a0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)
accept$unix(r0, 0x0, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@generic={0x3, 0x100000001, 0x5})

16:18:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000035", @ANYRES16=r2, @ANYBLOB="050000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}])
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff})
io_setup(0x1ff, &(0x7f0000000000))
faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
dup3(r0, r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0)
ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'})

16:18:22 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}])
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

16:18:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')
r1 = getpgrp(0x0)
tgkill(r1, 0x0, 0x0)
clone3(&(0x7f0000000380)={0x100000, &(0x7f0000000080), &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0), {0x21}, &(0x7f0000000480)=""/64, 0x40, &(0x7f0000000240)=""/216, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x6, {r0}}, 0x58)
r3 = openat2(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2a0200, 0x9, 0x4}, 0x18)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x5, 0x73, 0x99, 0x0, 0x5, 0x28c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x81}, 0x12a02, 0x2, 0x1000, 0x0, 0x800, 0x80000000, 0x3, 0x0, 0x1, 0x0, 0x4f8}, r2, 0xa, r3, 0x8)

16:18:22 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=<r0=>0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001700000006dc0303ff021f00020000000600000000000000f500000000020000050000003a00000008001b00800e000001040000d78d3d03cad9edfafd04b2b84d15f1a23d25b9e11387dcf801fafbca20dd6a45464421dc678967de03c1f84ad20be33fb3717e133c918edb07acbcbd9193ab866e4888fe7f31dc51bbef739b730725f98503a2fa5d1eb1031d40749a9f04087820a95dda6aa2373b6f3feb24f3b768ae4cc5c0af72b7635eec2422c35d363718243c39e124946e1c645375c1f60aac7f55f98593269d73354cb55010b6aa7d4b52b282027c70f3d4dcf107f343d486b6a20a24da2abde3474616aa2889b4bf0cc548c17d72976a9ee06f1706acd3b8524750806ff81218d5db0e1120c5befe027499263a3cc88753d5f1d913b76b25023389e46e122ad29c676a32ae65"]})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r7=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@dev, r7}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r3, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
setuid(r2)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)
connect$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:22 executing program 2:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$CDROMREADAUDIO(r0, 0x5392, &(0x7f0000000180)={@msf={0x7}, 0x0, 0x0, 0x0})
r1 = syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x8, &(0x7f0000001480)=[{&(0x7f0000000080)="3a24ed6fd03887f9e702ac97a50fe88ce6ded4ccd26f3b5a8b08bb392e9265379a731f27567153fcdcaf68f06fc429f6286ae71e4009ccc21e8b337059389549794205a13e03a3338cf43bcf38c1396b8e1e319e8bf81905199adf36b1b042869679523cecbb43aa0dbae4018427d5d870587f7812a3d70c25605c3fda381808f94f120202ccdc2b0c7dc4594fe271b31ab993d220a7a5d30b7f2d1afd62d5c6ab0bbaf7ac2c194681bf2a9d7d78ecac84688f017772c6c39e4c0eaad56cf16c06705f5f6670f640d27a09c4cfcc86001fdfcc02976d4f469c7370a06897095eaeccc83cf7e9e5", 0xe7, 0x6}, {&(0x7f00000001c0)="08518c8ebae99fa9aa900cc50ef8648ab37cbac515ec33bdf53206518290c0ff5216981fc36b27d447a3ee4f7c40105c6edc4462d225", 0x36, 0x1}, {&(0x7f0000000200)="a60954f5b2ef0fad5b78dd7b26cc17af3a2548281b0bcee329d20719e022c40eaaef99426dcfbdec28d7d87ac6f018beec2d8e53fe4a00af468651eb08e4b4a64bdcf1c9183f9e7f56d55e2eaf28548d5f47354ed9bf3f507ef8b800452c5e47d759a14fd4e2df70125ff2", 0x6b, 0xfffffffffffffb61}, {&(0x7f0000000280)="e5f4307433b35c5ebd25404382a6217a2281652656bf0e84a987173371a0f13ea7cb2a930556881967c9d7852fb111394680fb4db4650d82ba899a37e85646", 0x3f, 0x7fff}, {&(0x7f0000000480)="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", 0x1000, 0x6}, {&(0x7f00000002c0)="93020d61a4580ddb2ed135a288b86a02d54ac624e6570929f912b7050a2bb4ac8869dbec153b8efb0a6140ba2f3d150da5a41c0a973e7b7a30", 0x39, 0x1}, {&(0x7f0000000300)="9354db4601e6c0c0271b03bc17b7b309cfb3c401f1953918e70d5448d54f126ee09ca97d03b55a0f068eab5018a923ef0a3ce20cf1f9bf968741544e65b9852911e5c01e095d3dee519b264aa5d5b8b04726474f01e14f15c1e5346522e2a813ffdc7436f7991200ba470e58cc26f1cde737e3", 0x73, 0x2}, {&(0x7f0000000380)="c9edb0421ebb98f0a7e28e9ec5a5c72bec69fd8b40ce36d26337e1200aac8d4c8db5d194e36e48d79a536b0a641eb362041641483b8108805d41f76d7c17cacbcb00a30bf6cf3471d3029a7ef2478f47592bab33d304eda214ced57f75201a248fdb3c6487cf9c58c37c21792163adc48a6ff7044cbd554a09fc275ea9967e822d7a09a5ff49544285b9c942b237e848d75f9494345e3bb530db109fdab751bca9267d3ebd339c40fe56f19809195ee9e49f80b940066c216caa711093", 0xbf, 0x6}], 0x8, &(0x7f0000001540)={[], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffc}}, {@context={'context', 0x3d, 'unconfined_u'}}]})
r2 = dup3(r1, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001580)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x407}}, './file1\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000015c0))

16:18:22 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff}, 0xe)

16:18:22 executing program 7:
syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000000680)=[{&(0x7f00000001c0)="06e0e259bc06673c606171ae3259df8979135af8b7682ec68bb458a25e0d067844c0946173cc0490b8e802ce2dc9d5424f6b4e8d9878816bd531e82af9d4e6014a7d76f815517c63ed", 0x49, 0xfffffffffffffffe}, {&(0x7f0000000240)="6919a5e367aa57bf8afc6afd6626cb8dcf43dc1a8cbc39ea80d95b89c4fcf71bb15b06bcd46c55a7ed1f927c129a05f4ab930818e25b39264372baf8d685f87b", 0x40, 0x8}], 0x4008, &(0x7f0000000000)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c756e695f786c6174652601410be6d63d302c757466383d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c696f636861727365743d6d6163726f6d616e696e6e2c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c00"])

[  148.876153] loop7: detected capacity change from 0 to 16383
[  148.883810] vfat: Unknown parameter 'uni_xlate&
AæÖ'
16:18:23 executing program 7:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000035", @ANYRES16=r2, @ANYBLOB="050000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}])
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff})
io_setup(0x1ff, &(0x7f0000000000))
faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
dup3(r0, r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0)
ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'})

16:18:23 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)

[  149.037700] loop2: detected capacity change from 0 to 16379
[  149.052771] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
16:18:23 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001700000006dc0303ff021f00020000000600000000000000f500000000020000050000003a00000008001b00800e000001040000d78d3d03cad9edfafd04b2b84d15f1a23d25b9e11387dcf801fafbca20dd6a45464421dc678967de03c1f84ad20be33fb3717e133c918edb07acbcbd9193ab866e4888fe7f31dc51bbef739b730725f98503a2fa5d1eb1031d40749a9f04087820a95dda6aa2373b6f3feb24f3b768ae4cc5c0af72b7635eec2422c35d363718243c39e124946e1c645375c1f60aac7f55f98593269d73354cb55010b6aa7d4b52b282027c70f3d4dcf107f343d486b6a20a24da2abde3474616aa2889b4bf0cc548c17d72976a9ee06f1706acd3b8524750806ff81218d5db0e1120c5befe027499263a3cc88753d5f1d913b76b25023389e46e122ad29c676a32ae65"]})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@dev, r6}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
setuid(r1)
connect$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

[  149.167820] loop2: detected capacity change from 0 to 16379
[  149.169546] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  150.990617] Bluetooth: hci0: command tx timeout
[  153.037663] Bluetooth: hci0: command tx timeout
16:18:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

16:18:31 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="ee91b199cbdc153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c540104a4c9cc966edb83bd3436a22c2a8e1cafade0533901774e0a16d833be627e96c9a9c78fc0addb28ab7e8606be165d206fdd35dbde963942c729ed3012c7e09c0d6551b21ee644f49fdaf8129893bb95b3681fdbf1fe3b76f07b4c569f58efb9834117517f77165b0423d8c845a2c853fa34796fdf6e03e1f446ff7246090347f2cbfcc4ef2466482dd7bcb3f15f1f2c0b48d428171aa31de19eb27f669857201a76cef43030d2d0c303b343846c434f75d24282d624aa02ef4cc6e650dccd2dbd2de0b166ad0b1c54684640ece62756ed10b4e4824d297b18062d6bc44048a4ecc5cf6556a214d82fa1881064a52f2320ab34e6e014d72a1ad93d8e59300868475bcbbd6d03e9d30ac836d8b4daa4b0a369df915cce362c35df91b000", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

16:18:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00')
r1 = getpgrp(0x0)
tgkill(r1, 0x0, 0x0)
clone3(&(0x7f0000000380)={0x100000, &(0x7f0000000080), &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0), {0x21}, &(0x7f0000000480)=""/64, 0x40, &(0x7f0000000240)=""/216, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r1, 0xffffffffffffffff], 0x6, {r0}}, 0x58)
r3 = openat2(r0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2a0200, 0x9, 0x4}, 0x18)
perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x5, 0x73, 0x99, 0x0, 0x5, 0x28c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x81}, 0x12a02, 0x2, 0x1000, 0x0, 0x800, 0x80000000, 0x3, 0x0, 0x1, 0x0, 0x4f8}, r2, 0xa, r3, 0x8)

16:18:31 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r5=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@dev, r5}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
connect$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:31 executing program 2:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r4 = socket$unix(0x1, 0x5, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001700000006dc0303ff021f00020000000600000000000000f500000000020000050000003a00000008001b00800e000001040000d78d3d03cad9edfafd04b2b84d15f1a23d25b9e11387dcf801fafbca20dd6a45464421dc678967de03c1f84ad20be33fb3717e133c918edb07acbcbd9193ab866e4888fe7f31dc51bbef739b730725f98503a2fa5d1eb1031d40749a9f04087820a95dda6aa2373b6f3feb24f3b768ae4cc5c0af72b7635eec2422c35d363718243c39e124946e1c645375c1f60aac7f55f98593269d73354cb55010b6aa7d4b52b282027c70f3d4dcf107f343d486b6a20a24da2abde3474616aa2889b4bf0cc548c17d72976a9ee06f1706acd3b8524750806ff81218d5db0e1120c5befe027499263a3cc88753d5f1d913b76b25023389e46e122ad29c676a32ae65"]})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r6=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000180)={@dev, r6}, 0x14)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r2, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)
setuid(r1)
connect$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:31 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}])
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x0)

16:18:31 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)
clone3(&(0x7f00000002c0)={0x14820000, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240), {0x36}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/240, &(0x7f0000000280)=[r6, r2], 0x2, {r1}}, 0x58)

16:18:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000035", @ANYRES16=r2, @ANYBLOB="050000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
pread64(r1, &(0x7f0000000180)=""/48, 0x30, 0x10001)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x220}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x2c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004055}, 0x804)
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}])
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x1ff, 0xffffffff})
io_setup(0x1ff, &(0x7f0000000000))
faccessat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1200)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'})
dup3(r0, r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00')
pread64(r6, &(0x7f0000000040)=""/156, 0x9c, 0x0)
ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000140)={'veth0_macvtap\x00'})

16:18:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)

16:18:31 executing program 2:
r0 = fsmount(0xffffffffffffffff, 0x1, 0xf2)
ioctl$TIOCSIG(r0, 0x40045436, 0x3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x60, 0x0}, 0x58)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80000001, 0x40)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='nomand\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6, 0x2}}, './file0\x00'})

16:18:31 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@dev, r4}, 0x14)
connect$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:31 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan0\x00'})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r3, {0xa1, 0x2}}, './file0\x00'})
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed}, 0xe)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000)

16:18:31 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
connect$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)

16:18:31 executing program 6:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4)

16:18:31 executing program 5:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0xa012, r0, 0x0)
r1 = memfd_secret(0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x13, r1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0)

16:18:31 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="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", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

[  158.110508] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  158.111948] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[  158.113453] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[  158.139074] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00
[  158.143769] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 2 prio class 2
[  159.310300] Bluetooth: hci0: command tx timeout
[  161.357653] Bluetooth: hci0: command tx timeout
[  163.405627] Bluetooth: hci0: command tx timeout
[  165.453624] Bluetooth: hci0: command tx timeout
16:18:40 executing program 3:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c36abe9", 0x4}], 0x1, 0x5, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x0, 0x0, 0x9)

16:18:40 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)
clone3(&(0x7f00000002c0)={0x14820000, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240), {0x36}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/240, &(0x7f0000000280)=[r6, r2], 0x2, {r1}}, 0x58)

16:18:40 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)
clone3(&(0x7f00000002c0)={0x14820000, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240), {0x36}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/240, &(0x7f0000000280)=[r6, r2], 0x2, {r1}}, 0x58)

16:18:40 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="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", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

16:18:40 executing program 6:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="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", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

16:18:40 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
socket$unix(0x1, 0x5, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="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"]})
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:40 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="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", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

16:18:40 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

16:18:40 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
socket$unix(0x1, 0x5, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:41 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)

16:18:41 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffc33c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x21020dab, 0x200})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
mlockall(0x3)

[  168.846603] Bluetooth: hci0: command tx timeout
[  170.893655] Bluetooth: hci0: command tx timeout
16:18:49 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="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", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

16:18:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x82142, 0x140)
pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r0, 0x0)
madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x16)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4000, 0x4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
mbind(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x4, 0x4, 0x6)

16:18:49 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffc33c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x21020dab, 0x200})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
mlockall(0x3)

16:18:49 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)
clone3(&(0x7f00000002c0)={0x14820000, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240), {0x36}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/240, &(0x7f0000000280)=[r6, r2], 0x2, {r1}}, 0x58)

16:18:49 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:18:49 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x5, 0x54, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8a9, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x3, 0xe, 0xfffffffff846f703, 0x6c, 0x1, 0x0, 0x5, 0x0, 0xe1}, r3, 0x10, r0, 0x5)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x0)

16:18:49 executing program 6:
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0)
mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)

16:18:49 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
socket$unix(0x1, 0x5, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:49 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00000001c0)=0x3, 0x4)
connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
pipe(&(0x7f0000000040))

16:18:49 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
socket$unix(0x1, 0x5, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:49 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:18:50 executing program 6:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @private}})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @private}})

16:18:50 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48})

16:18:50 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x5, 0x54, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8a9, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0x3, 0xe, 0xfffffffff846f703, 0x6c, 0x1, 0x0, 0x5, 0x0, 0xe1}, r3, 0x10, r0, 0x5)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r4, &(0x7f0000000140)=' ', 0x1, 0x0)

[  177.807026] Bluetooth: hci0: command tx timeout
[  179.854509] Bluetooth: hci0: command tx timeout
16:18:59 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x6, 0x3, 0x9, 0x0, 0x1f, 0x2a08c, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0x4d049, 0xbaf, 0x7, 0x3, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0xc010000000000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0xe7, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002180)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x46, 0x0, "517d60a8dfa1273239320761b00773d2e8f22425183aa153e711c2d0dd3cc9d9f1c02db522d62e4c37b5657865e2021923d37da8da241753db27b862a5d8891bc0d0ae95046fc0b8bf7164a2d54af890"}, 0xd8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)="0774ab99a781e3ec6073783e60c49cc523db2b588bcc07967e307f8405a6345f037cb601e182637d6bdeab0ed2", 0x2d, r0}, 0x68)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x400, @remote, 0x3f}, 0x1c)
r2 = signalfd(r0, &(0x7f0000000300)={[0x6]}, 0x8)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x7ffff000}, {&(0x7f0000000540)="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", 0x70}], 0x2}}, {{0x0, 0xfffffffffffffd7a, &(0x7f0000000700)=[{&(0x7f00000002c0)="eaa51a29475655e57a8da599092cdd27f9f2e480d2b82167828c898e6e7a0ad365fc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000780)="c4647c40509dd0acfefb9a97cbf9545c3b366942db3fa674f2a3164b87b82cfa67b785bceefc479ddf5c5bd025f01f3584e05d4f14c9cd7ccaf745bf97fb8cee17", 0x1}], 0x1}}], 0x3, 0x44894)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0x4e24, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff9}, 0x1c)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0x15aa}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/9, 0x0}, 0x58)

16:18:59 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0/file1\x00', 0x6, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="5ac7e74afbb2c639ce122bbb0a3376d353555848505bd6366a33094fd7ff", 0x1e, 0x54}, {&(0x7f0000000240)="d455b18b67484aaf6f36ff9ebcbb8dcc9eed6c8f527e67eecc58aa5d61c60c789461f662833e41bf6e8823710962c0ce66abd65eab30f5aea929e9c29030d3ce594f766a00ff852a3d5eb0efbeb3d5636e90dfbef7eb41728c9a7497e248e3e1a9aafa32eb4635b9c6bf6f5aa32dd90a89c524120141a126bbdf295c4bfe0b801b", 0x81, 0x1}, {&(0x7f00000003c0)="d5d03489d6c4882a0ca80aeca14b7c392ecaf002aab87404f86e295b350b475aa4227abf279c0a928ef591d996024979ac7f1f6de5b9746ef60695b19849b434a4b05b58a7b1a7604ea07b50e6d8123900903f135e2441195fd1da2e4fd48b610f76b98e1c73dc5cdb8befa939d28875603c203b83a708b3326266ad04b221ed9d81c485f76c2a9f7a107f6999439916e24d7b537e1daff20d76311ecb591681368fe5c48ca100669f1606ae36215ed54c4667e6a58795f66190c65a055bcdf2183e3ffdc2fea916064363aa1379fe38ac289d0ebd849e67b0bb3b1d27f80476eba5174025623bbc733f665e1d23c19b65d3ac", 0xf3, 0x3}, {&(0x7f00000004c0)="60b426f21bd2f1a07f1694a9cfcd18929df796116c578ec9a3d3d358f2c7f67ea65b800d685691f3cf441415b709e64e889672ef5c9ca05599654bc4a1509720e4410d0543ea23ef38c32dc88b2d", 0x4e, 0x8}, {&(0x7f0000000300)="2d341e6a5d44352e8245ed6ec4df8891ee404c6adc78b7112c9c2a4da2da51", 0x1f, 0x3}], 0x2805, &(0x7f00000005c0)=ANY=[@ANYBLOB="687567653d6164766973652c73697a653d3035372c81725f696e6f6465733d32312d702c687567653d616c776179732c657569643d", @ANYRESDEC=r1, @ANYBLOB=',fsname=$,obj_role=-#\\:,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000046,dont_measure,\x00'])
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

16:18:59 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
socket$unix(0x1, 0x5, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:59 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x80000000, 0x8000)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x2012, r0, 0x4b000)

16:18:59 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)
clone3(&(0x7f00000002c0)={0x14820000, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240), {0x36}, &(0x7f00000003c0)=""/4096, 0x1000, &(0x7f00000013c0)=""/240, &(0x7f0000000280)=[r6, r2], 0x2, {r1}}, 0x58)

16:18:59 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = accept(r0, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000100)=0x80)
bind$802154_raw(r1, &(0x7f0000000240)={0x24, @long={0x3, 0x2455615bb79da44d}}, 0xff4e)

16:18:59 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48})

16:18:59 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:18:59 executing program 6:
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500003000000002000000786103105f00000000ffffffff21b23535e5df24cb3cede2848c7c50ec4137e4fca00ad34176885152"], 0x0)
syz_emit_ethernet(0x156, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/500], &(0x7f0000000180)={0x0, 0x1, [0xf9b, 0x4cb, 0xc78, 0x8000225]})

16:18:59 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0xa0, r1, 0x800, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x39, 0xe, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x24, 0xff}}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x4, 0x7, 0x32, 0x6}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0xa0}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)={0xdc, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x70}, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xae, 0xc5, "f64507ee8eb4c5f074cd8bac9ae4cd6e4c98b089e31263a756769aa9cf7d3c4e5bbc192efb09fc4f612e8b3be5a57edbc2c7d2ccbc8fff3c3e5bacbde0007ded5fea565f9b968ef1edae103fa2be003235499d0a9ab53eaea6fcc3e7a1ad93ddcd0f38e72cb1af02606f6b30808b0f67db2303f069181eae515e4c9c149ebddec5c07dc601d1cc48c173f11dbcf34792fafbcc6045a778dc32b516bd6d71e0fd6adcc7539bcb7e3e3c66"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0xdc}}, 0xefdcee7573a2f1b5)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33313930313834363600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000005566cbb705fc4d7ea1c5dfc95b00bfe3010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000011e00)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000012600)="0200"/32, 0x20, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d1f4655fd1f4655fd1f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d1f4655fd2f4655fd2f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d1f4655fd1f4655fd1f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d1f4655fd1f4655fd1f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002000200000000000800030000000af30100040000000000000000000000010000001f00000000000000000000000000000000000000000000000000000000000000000000000000000027951c99000000000000000000000000000000000000000000000000ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001000400000000000800010000000af30100040000000000000000000000020000002700000000000000000000000000000000000000000000000000000000000000000000000000000077475a5c000000000000000000000000000000000000000000000000ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3331393031383436362f66696c65302f66696c6530000000000000000000000000000000000000000000002247ea9f000000000000000000000000000000000000000000000000ed8100000a000000d2f4655fd2f4655fd2f4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000029000000000000000000000000000000000000000000000000000000000000000000000000000000401f9fd3200000000000000000000000000000000000000000000000ed81000028230000d2f4655fd2f4655fd2f4655f00000000000002001200000000000800010000000af30100040000000000000000000000090000002a0000000000000000000000000000000000000000000000000000000000000000000000000000001dd000b4000000000000000000000000000000000000000000000000ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001000200000000000800010000000af3010004000000000000000000000001000000330000000000000000000000000000000000000000000000000000000000000000000000000000006b8b381d00"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="37feabdd3dd1747170f1988f40e6aa74478b23fb96e72ee4bfc7db54de8b2bddd42cf9e67f9a029973033c0cc7d5a21ce7ff39ff465a570f3d139ce9604be8c21848b614d2aabf6c27d1a90963dc5e0600e359a4ffe546ac346c879c2e4a4e2df8313bbaa5381e8760afea7930554e5c61a6459cca89a98cadfb6827c9b9f9c2ff9cba8cf46f4e94d92e192dd1b72932efc51ce3003e77"])

16:18:59 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

[  185.207383] loop6: detected capacity change from 0 to 204
[  185.223853] ext4: Unknown parameter '7þ«Ý'
16:18:59 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
socket$unix(0x1, 0x5, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:18:59 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x12, 0xd2, &(0x7f0000000100)="89d0436284fc8b1ae6aa2a1a33d97e9e028dbe6864ab93cd39550b18ed8eea75c9d3ac04cda118d2a4c431027f40682ae8ce97f4469ae5c2172d234f3204d51a32ac5e5d1f9a739fbb30d68dd39bc6950881a88a940f89f6a316486449371a3e75593f1df0c0992e755b317a87d160335641c0ccd5e8353001fc70659962d29a3594af1c397f20efddc6bd0f10b993024499ce713da6ef78755c021c2ec95a61836ea73bbe7f2628d86918561005f28515f2885e8bf16cca6de731e64ed30a5bb21d91b3a30b5c377ea4c71363bc460d3ad8"})
clock_gettime(0x0, &(0x7f0000000200)={<r3=>0x0, <r4=>0x0})
write$evdev(r0, &(0x7f00000000c0)=[{{r3, r4/1000+60000}, 0x14, 0x8a21, 0xfffffffe}], 0x18)

16:18:59 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x22, 0x7, 0x81, "0963838104b777f1d2c50fced9f17e75", "abba190ae6bef610ac92d2a190"}, 0x22, 0x1)
sendfile(r0, r1, 0x0, 0xfdef)

16:18:59 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4)

16:18:59 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

[  187.217391] Bluetooth: hci0: command tx timeout
[  189.264848] Bluetooth: hci0: command tx timeout
16:19:09 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:09 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:09 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0/file1\x00', 0x6, 0x5, &(0x7f0000000540)=[{&(0x7f0000000200)="5ac7e74afbb2c639ce122bbb0a3376d353555848505bd6366a33094fd7ff", 0x1e, 0x54}, {&(0x7f0000000240)="d455b18b67484aaf6f36ff9ebcbb8dcc9eed6c8f527e67eecc58aa5d61c60c789461f662833e41bf6e8823710962c0ce66abd65eab30f5aea929e9c29030d3ce594f766a00ff852a3d5eb0efbeb3d5636e90dfbef7eb41728c9a7497e248e3e1a9aafa32eb4635b9c6bf6f5aa32dd90a89c524120141a126bbdf295c4bfe0b801b", 0x81, 0x1}, {&(0x7f00000003c0)="d5d03489d6c4882a0ca80aeca14b7c392ecaf002aab87404f86e295b350b475aa4227abf279c0a928ef591d996024979ac7f1f6de5b9746ef60695b19849b434a4b05b58a7b1a7604ea07b50e6d8123900903f135e2441195fd1da2e4fd48b610f76b98e1c73dc5cdb8befa939d28875603c203b83a708b3326266ad04b221ed9d81c485f76c2a9f7a107f6999439916e24d7b537e1daff20d76311ecb591681368fe5c48ca100669f1606ae36215ed54c4667e6a58795f66190c65a055bcdf2183e3ffdc2fea916064363aa1379fe38ac289d0ebd849e67b0bb3b1d27f80476eba5174025623bbc733f665e1d23c19b65d3ac", 0xf3, 0x3}, {&(0x7f00000004c0)="60b426f21bd2f1a07f1694a9cfcd18929df796116c578ec9a3d3d358f2c7f67ea65b800d685691f3cf441415b709e64e889672ef5c9ca05599654bc4a1509720e4410d0543ea23ef38c32dc88b2d", 0x4e, 0x8}, {&(0x7f0000000300)="2d341e6a5d44352e8245ed6ec4df8891ee404c6adc78b7112c9c2a4da2da51", 0x1f, 0x3}], 0x2805, &(0x7f00000005c0)=ANY=[@ANYBLOB="687567653d6164766973652c73697a653d3035372c81725f696e6f6465733d32312d702c687567653d616c776179732c657569643d", @ANYRESDEC=r1, @ANYBLOB=',fsname=$,obj_role=-#\\:,euid=', @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000046,dont_measure,\x00'])
rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file1\x00')

16:19:09 executing program 7:
dup(0xffffffffffffffff)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="01803882179e3c1d", @ANYRES32=r0, @ANYBLOB="02000000000000000000000000000000fe36def96edfa8b9c4c5ecd7cfc178cb7738aba4e7bcaafb91"])
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0xffff, 0x300, 0x0, 0x4}})

16:19:09 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)

16:19:09 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/anycast6\x00')
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/136, 0x88}], 0x1, 0x5, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401080}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r2, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x24048054}, 0x8000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

16:19:09 executing program 0:
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x32, @loopback, 0x4e22, 0x2, 'dh\x00', 0xe, 0x9, 0x16}, {@rand_addr=0x64010101, 0x4e23, 0x2001, 0x0, 0x3, 0x800}}, 0x44)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)={0x24, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x2, 0x0, 0x0, 0x1, [@typed={0x0, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x15, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0)

16:19:09 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x22, 0x7, 0x81, "0963838104b777f1d2c50fced9f17e75", "abba190ae6bef610ac92d2a190"}, 0x22, 0x1)
sendfile(r0, r1, 0x0, 0xfdef)

[  195.002792] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
[  195.011757] netlink: 'syz-executor.0': attribute type 21 has an invalid length.
16:19:09 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:09 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x22, 0x7, 0x81, "0963838104b777f1d2c50fced9f17e75", "abba190ae6bef610ac92d2a190"}, 0x22, 0x1)
sendfile(r0, r1, 0x0, 0xfdef)

16:19:09 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:09 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed}, 0x8)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{}, {}, 0x0, 0xb})
r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x40, 0x1, 0xac, 0x0, 0xd99, 0x15400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x2000, 0x2, 0x0, 0x1, 0x0, 0xffffffff, 0x5, 0x0, 0x7fffffff, 0x0, 0x40}, 0x0, 0x6, r1, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r3, &(0x7f0000000900)="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", 0x200)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x44000)
sendfile(r3, r4, 0x0, 0xfdef)
sendfile(r2, r0, 0x0, 0x6)

16:19:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETSF2(r0, 0x5423, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f3e2a9286b6a770ff8c2b978657df3480824"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100))
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x80)

16:19:09 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file1\x00'})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f80), 0x200, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4004}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xab, 0xfffff801, 0x4, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r4 = syz_io_uring_complete(0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2ce00d0000766d61ca0867"])
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00000000000000001f00000000000000040000000100000002000000000000000100000000000000000000000100000008000000000000000000000000000000000000000000000004020000000000000000000000000000010001000000000007000000000021a3ffff0000000400"/144])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6)
r8 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x3, 0x42280)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x840)
write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8a, 0x7, 0x6b, 0xfe, 0xffffffff80000001, 0x3, 0x6, 0x0, 0x2ee, 0x40, 0x34b, 0x5, 0x3, 0x38, 0x1, 0x3, 0x4, 0x7ff}, [{0x0, 0x6, 0x1f, 0x7, 0x2, 0x7fffffff, 0x0, 0x6}, {0x3, 0x80000000, 0xfffffffffffffffc, 0x10001, 0x6, 0x1, 0x10000, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaaa)

16:19:09 executing program 1:
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:09 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)
gettid()

[  195.377006] audit: type=1400 audit(1768580349.507:11): avc:  denied  { watch_reads } for  pid=4295 comm="syz-executor.3" path="/syzkaller-testdir716169635/syzkaller.qdE2ei/10" dev="sda" ino=15975 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
[  195.395063] 9p: Bad value for 'wfdno'
16:19:09 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:09 executing program 1:
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

[  195.487780] 9p: Bad value for 'wfdno'
16:19:09 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)

16:19:09 executing program 1:
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:09 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)
gettid()

16:19:09 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file1\x00'})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f80), 0x200, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4004}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xab, 0xfffff801, 0x4, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r4 = syz_io_uring_complete(0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2ce00d0000766d61ca0867"])
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00000000000000001f00000000000000040000000100000002000000000000000100000000000000000000000100000008000000000000000000000000000000000000000000000004020000000000000000000000000000010001000000000007000000000021a3ffff0000000400"/144])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6)
r8 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x3, 0x42280)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x840)
write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8a, 0x7, 0x6b, 0xfe, 0xffffffff80000001, 0x3, 0x6, 0x0, 0x2ee, 0x40, 0x34b, 0x5, 0x3, 0x38, 0x1, 0x3, 0x4, 0x7ff}, [{0x0, 0x6, 0x1f, 0x7, 0x2, 0x7fffffff, 0x0, 0x6}, {0x3, 0x80000000, 0xfffffffffffffffc, 0x10001, 0x6, 0x1, 0x10000, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaaa)

[  195.810278] 9p: Bad value for 'wfdno'
[  196.045071] syz-executor.6 (4268) used greatest stack depth: 23992 bytes left
16:19:10 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)

16:19:10 executing program 6:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff}, 0x80, 0x9, 0x2e, 0x0, 0x8001, 0x0, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r0, &(0x7f0000000900)="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", 0x200)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={0x0, 0xfb, 0x22, 0x7, 0x81, "0963838104b777f1d2c50fced9f17e75", "abba190ae6bef610ac92d2a190"}, 0x22, 0x1)
sendfile(r0, r1, 0x0, 0xfdef)

16:19:10 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:10 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:10 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)
gettid()

16:19:19 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file1\x00'})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f80), 0x200, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4004}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xab, 0xfffff801, 0x4, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r4 = syz_io_uring_complete(0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2ce00d0000766d61ca0867"])
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00000000000000001f00000000000000040000000100000002000000000000000100000000000000000000000100000008000000000000000000000000000000000000000000000004020000000000000000000000000000010001000000000007000000000021a3ffff0000000400"/144])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6)
r8 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x3, 0x42280)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x840)
write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8a, 0x7, 0x6b, 0xfe, 0xffffffff80000001, 0x3, 0x6, 0x0, 0x2ee, 0x40, 0x34b, 0x5, 0x3, 0x38, 0x1, 0x3, 0x4, 0x7ff}, [{0x0, 0x6, 0x1f, 0x7, 0x2, 0x7fffffff, 0x0, 0x6}, {0x3, 0x80000000, 0xfffffffffffffffc, 0x10001, 0x6, 0x1, 0x10000, 0x5}], "285f41d09a9fb6799fe575e7b0308b7e12810d27a4eb36b57c6ae5c73e787364dd5643ab1011cd273f27773bfcd468638dfa0b6518526f2f5cbc2d48b0c82d4a5228cf970cdf3448c068d5c5f03e2a561003a48e461032b2a2621126a736549731a77eb0e3fbe577e7f90351f390cc604b0323be9723bfd12f06e460d238a89e1f09e9edfe1fe8ae746b5c92d2a778636ec01ecc138cefb299829c05050e6ee9ea72762569711a4b4341e70f8eae4a5d02c10502499a0f7b8c12d559232e67e485b96fd62160a0def7376f7d68761fc4683ee55350246130f1880b28e4da65fbd69b5af85c487bfda1d0677adf4340772285753264b72388dd89", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaaa)

16:19:19 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:19 executing program 2:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file1\x00'})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f80), 0x200, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4004}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xab, 0xfffff801, 0x4, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r4 = syz_io_uring_complete(0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2ce00d0000766d61ca0867"])
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00000000000000001f00000000000000040000000100000002000000000000000100000000000000000000000100000008000000000000000000000000000000000000000000000004020000000000000000000000000000010001000000000007000000000021a3ffff0000000400"/144])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6)
r8 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x3, 0x42280)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x840)
write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8a, 0x7, 0x6b, 0xfe, 0xffffffff80000001, 0x3, 0x6, 0x0, 0x2ee, 0x40, 0x34b, 0x5, 0x3, 0x38, 0x1, 0x3, 0x4, 0x7ff}, [{0x0, 0x6, 0x1f, 0x7, 0x2, 0x7fffffff, 0x0, 0x6}, {0x3, 0x80000000, 0xfffffffffffffffc, 0x10001, 0x6, 0x1, 0x10000, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaaa)

16:19:19 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:19 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)

16:19:19 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)

16:19:19 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)
gettid()

16:19:19 executing program 7:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed}, 0x8)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{}, {}, 0x0, 0xb})
r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x40, 0x1, 0xac, 0x0, 0xd99, 0x15400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x2000, 0x2, 0x0, 0x1, 0x0, 0xffffffff, 0x5, 0x0, 0x7fffffff, 0x0, 0x40}, 0x0, 0x6, r1, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x44000)
sendfile(r3, r4, 0x0, 0xfdef)
sendfile(r2, r0, 0x0, 0x6)

[  205.786027] 9p: Bad value for 'wfdno'
[  205.788282] 9p: Bad value for 'wfdno'
16:19:19 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:19:29 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:29 executing program 3:
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001100)={{0x1, 0x1, 0x18, <r2=>r1, @out_args}, './file1\x00'})
ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0xd4000a8b)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000f80), 0x200, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4004}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0xab, 0xfffff801, 0x4, 0x5]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xff}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r4 = syz_io_uring_complete(0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2ce00d0000766d61ca0867"])
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001140)='devices.allow\x00', 0x2, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00000000000000001f00000000000000040000000100000002000000000000000100000000000000000000000100000008000000000000000000000000000000000000000000000004020000000000000000000000000000010001000000000007000000000021a3ffff0000000400"/144])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6)
r8 = syz_open_dev$vcsu(&(0x7f0000000e40), 0x3, 0x42280)
sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e80)={0x20, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x2f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x840)
write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8a, 0x7, 0x6b, 0xfe, 0xffffffff80000001, 0x3, 0x6, 0x0, 0x2ee, 0x40, 0x34b, 0x5, 0x3, 0x38, 0x1, 0x3, 0x4, 0x7ff}, [{0x0, 0x6, 0x1f, 0x7, 0x2, 0x7fffffff, 0x0, 0x6}, {0x3, 0x80000000, 0xfffffffffffffffc, 0x10001, 0x6, 0x1, 0x10000, 0x5}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xaaa)

16:19:29 executing program 7:
rseq(&(0x7f0000000040), 0x59, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1de)
close(r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x9, 0x1, 0x1, 0x9, 0x0, 0x1}, 0x20)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

16:19:29 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
r5 = getpgrp(0x0)
r6 = gettid()
tgkill(r5, r6, 0x0)

16:19:29 executing program 2:
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed}, 0x8)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000080)={{}, {}, 0x0, 0xb})
r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x40, 0x1, 0xac, 0x0, 0xd99, 0x15400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x2000, 0x2, 0x0, 0x1, 0x0, 0xffffffff, 0x5, 0x0, 0x7fffffff, 0x0, 0x40}, 0x0, 0x6, r1, 0xb)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff)
r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff)
write(r3, &(0x7f0000000900)="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", 0x200)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x44000)
sendfile(r3, r4, 0x0, 0xfdef)
sendfile(r2, r0, 0x0, 0x6)

16:19:29 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)
gettid()

16:19:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))

16:19:29 executing program 4:
clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

[  215.295330] process 'syz-executor.7' launched './file1' with NULL argv: empty string added
[  215.317036] 9p: Bad value for 'wfdno'
16:19:29 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:29 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)

16:19:29 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

[  220.560845] Bluetooth: hci6: command 0x0406 tx timeout
[  220.562352] Bluetooth: hci3: command 0x0406 tx timeout
[  220.566475] Bluetooth: hci4: command 0x0406 tx timeout
[  220.570514] Bluetooth: hci2: command 0x0406 tx timeout
[  220.571504] Bluetooth: hci7: command 0x0406 tx timeout
[  220.572496] Bluetooth: hci0: command 0x0406 tx timeout
[  220.573482] Bluetooth: hci1: command 0x0406 tx timeout
[  220.574451] Bluetooth: hci5: command 0x0406 tx timeout
16:19:38 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:38 executing program 2:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/hibernate_compression_threads', 0x40181, 0x0)
write$cgroup_pid(r0, &(0x7f0000000040), 0x12)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0x48, [0x1, 0x1f, 0x0, 0x59, 0x1f, 0x7df97ec7], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/72}, &(0x7f00000001c0)=0x78)

16:19:38 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0807011af608ecb5ebc2cb196b6f9bc977d6bf364a3e368cc757949a4d20a19c00988254f8529f8cb9b87b23010000806f85af7dab359ab9276ae5f9d295abdd90981c4959151021875998a7afd94020a1001bb4182f4565accda24d3451050f0b207a6891712b0f2adeede8405a0057f2805bfdf9bb3641fd52498bd643"], 0x24}], 0x1}, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x9, 0xb7, 0x81}, {0x3, 0x4, 0x4, 0x7}, {0x3, 0x1, 0x7, 0x2}, {0x8000, 0x7, 0x1f, 0x6}]}, 0x10)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00c105d30a0cab5828b78915d0fb0b49d5593a58e1e325ca82db0edc21eddfc6e5a6b517e712d9c0a7495081bdc7a2cdf0e4df03161f0eb8c7ca3f66ca19f65fbcec5d598952c9f09c45", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf250000000008000500000000000800050001000000b00008803800008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b080003000300000008000a0001000000740000801400040002004e23ac1414bb000000000000000008000a000100000006000500ff7f000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b200004000a004e2300000008fe8000000000000000000000000000bb528c8f2d0600050008000000"], 0xd4}, 0x1, 0x0, 0x0, 0x44004}, 0x20000041)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
sendmsg$sock(r5, &(0x7f0000000180)={&(0x7f0000000040)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)="e3390a62ba391eb37de25cbb3559", 0xe}], 0x1, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0xa8}}, @mark={{0x14, 0x1, 0x24, 0xfffffffd}}], 0x30}, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r7 = dup(r6)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r8, &(0x7f0000000140)=' ', 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x7, 0x3, 0x0, 0x7fffffff, 0x0, 0x1}, 0x2)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1538a007c81ba33b, 0x12, r7, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r9, 0x118, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, 0x0, 0x0)
fork()

16:19:38 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, 0x0, 0x0)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:19:38 executing program 7:
rseq(&(0x7f0000000040), 0x59, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1de)
close(r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x9, 0x1, 0x1, 0x9, 0x0, 0x1}, 0x20)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

16:19:38 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)

16:19:38 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

16:19:38 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:38 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:19:38 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:38 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:38 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:38 executing program 7:
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x5, 0xfffffc01, 0x4, 0x7, 0x7})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)="8f9b3a818f4a1aa245db7cbcddeb45160e1cee915ba5a23957ef0fb91c36b0622d28f7140a9deb4b8c9a67b8356310fad28d9036ece20edef5d954347a5c956801dfb5e9856e287544febcaab2c4079d9d16c7ed4ecc9c", 0x57, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$P9_RSTAT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffefffffffffffb, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@barrier}, {@usrjquota}]})

16:19:38 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x13ac}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = signalfd(r0, &(0x7f00000001c0)={[0x1f]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000022c0)={{0x1, 0x1, 0x18, <r2=>r1}, './file1\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000002300)='user.syz\x00')
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
fcntl$setlease(r3, 0x400, 0x1)
fremovexattr(r3, &(0x7f0000000000)=@known='user.syz\x00')
clock_gettime(0x0, &(0x7f0000001ec0)={<r4=>0x0, <r5=>0x0})
recvmmsg$unix(r1, &(0x7f0000001e00)=[{{&(0x7f0000000200), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/234, 0xea}, {&(0x7f0000000400)=""/190, 0xbe}], 0x3}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/239, 0xef}, {&(0x7f0000001680)=""/165, 0xa5}, {&(0x7f0000001740)=""/226, 0xe2}, {&(0x7f0000001840)=""/145, 0x91}, {&(0x7f0000001900)=""/238, 0xee}], 0x6, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {<r6=>0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b40)=""/38, 0x26}, {&(0x7f0000001b80)=""/125, 0x7d}], 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=<r7=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="38000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000100001c0000100002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x188}}], 0x3, 0x40, &(0x7f0000001f00)={r4, r5+10000000})
writev(r7, &(0x7f00000021c0)=[{&(0x7f0000001f40)="c74e529ad747312ebd17e1cf858e3ba7cb5102756b74f8a8716ac66a685849bb9570f6b03479a118b2489d8606c3071f86f30635d6842bc621a906ea9442969507728460f7859c119e0e308cc795025766ca00ac74748880e2011dd664b02fb97c808326d602d0490a9a3b159daacba75d38d46bca80186350478b31495861b2da5304bd9534afbb85736cc7f58da824a7995dd0ba678a4cf14ea1c300bc18d50bb4f4f40c6d240132d008af9f4092d7b2c76b868093a466d2a4a61b358e38", 0xbf}, {&(0x7f0000002000)="b5d6f7a6b092710f4f148e02dc387a91913375430beb45a1af1e63d5ac539b27c20c3fcd59a646ccd1508711e59379c40c40ac9c86f3ea45923388e4ecbcef6efbf536696f7d9d157f407d8c188342f2ec33a9a3e8ee6f82bac3a7733489fb20046914d7978a279cdc8c5bf9b5f39082dbe067feff7b188a890d52a7d4848ce7", 0x80}, {&(0x7f0000002080)="bf667f3aa09c3a681ea32696c86c9e33e3783e0786fed2492caa335c1429f714d041643b0a65a794d4c89f717cdd7f1e4ed1242c2b0d8e7cb8f3726c41b3dc18b189febd716b43d3b76db35cc3646446488aaba2913477eca6c89b2fc9fda389d7293dbef62c8758604f9176ab66cdadb60352967fc2fcd0ce8d3292b034a7d2847ba4972aaa8910fbf9e65906477871fbd62c8a6f708caa83b66b68f982bee0e52452bcc051c70fe499f9a88c26b715", 0xb0}, {&(0x7f0000002140)="4b24e7467322ab3430019d91a7a3c3d4076b30932247d64417cec74619d110426e8c0040e6aeebfb701284a52b98a1d4f8253c43edda87bbc3c1906e8f3a1c15ff2ea134133154abcf386d469b6a0258a150a27ad8b9c1c387a07780f01e", 0x5e}], 0x4)
r8 = gettid()
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r9, r10, 0x0, 0xa0103)
perf_event_open(&(0x7f0000002240)={0x0, 0x80, 0x6, 0x8, 0x7, 0x4, 0x0, 0x8001, 0x210, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_bp={&(0x7f0000002200), 0x1}, 0x0, 0x7df, 0x3, 0x9, 0x4, 0x5, 0x9, 0x0, 0x5, 0x0, 0x1b}, r6, 0x1, r10, 0x2)
tgkill(0x0, r8, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x3f, 0x9, 0x40, 0x0, 0x7f, 0x20, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x40000, 0x1, 0x1ff, 0x6, 0x9, 0x3f, 0x3f, 0x0, 0x9, 0x0, 0xffffffffffffffd1}, r8, 0x3, r0, 0x1f)

[  224.717508] loop7: detected capacity change from 0 to 264192
[  224.747182] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
16:19:48 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:48 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)
getpgrp(0x0)

16:19:48 executing program 7:
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x5, 0xfffffc01, 0x4, 0x7, 0x7})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)="8f9b3a818f4a1aa245db7cbcddeb45160e1cee915ba5a23957ef0fb91c36b0622d28f7140a9deb4b8c9a67b8356310fad28d9036ece20edef5d954347a5c956801dfb5e9856e287544febcaab2c4079d9d16c7ed4ecc9c", 0x57, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$P9_RSTAT(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffefffffffffffb, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@barrier}, {@usrjquota}]})

16:19:48 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x12215, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400005})
fcntl$getown(r0, 0x9)
r2 = fork()
r3 = syz_io_uring_complete(0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, 0x0, 0x8000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
wait4(r2, &(0x7f0000000000), 0x8, &(0x7f0000000100))

16:19:48 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:48 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:19:48 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:19:48 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)

16:19:48 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:48 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x0)

[  234.893774] loop7: detected capacity change from 0 to 264192
[  234.910492] EXT4-fs (loop7): VFS: Can't find ext4 filesystem
16:19:49 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:19:49 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0xffff}}}, 0x8)

16:19:49 executing program 2:
getrusage(0x0, &(0x7f00000002c0))
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="9811b416240013000002000092675a9eed92a8c20c45248749b7e852000000ce92eb0000082af67a1bfa", 0x2a}, {&(0x7f0000000180)="12cda53dadd3d2c58403b1d415ca445618bdc703c5f8daba1df16ec691c3f6910a745fa4d1d22927a14234c05abb7e92ea7d1f9264002c7e492ff60b081f7d87e2f1d3e77493b1b160171c16dfea90533f5fb837494c92ee8d460ec72e16532ab3679fda75bb7bc9a081f770a395cd97ddfb5ebefdfdc152319efc16eddda48700ada4875f44f027af91cef756c421ad4cfd8378b6fa7e670ccafcec437b7598debd35ddffc98a78c82a2ce1b80a67d546596c1faea97c3315875b", 0xbb}, {&(0x7f0000000080)="bd9c7207156c5228dcc122e5e9578fbc9f2f8d73f3e18ba210af", 0x1a}], 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x40000000, &(0x7f0000000380))

16:19:49 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)

16:19:49 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x0)

16:19:49 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:19:49 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, 0x0, 0x0)

16:19:49 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x4000)
mount$bind(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00), 0x14001, 0x0)
clock_gettime(0x0, &(0x7f0000001c40))
clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[  235.200905] loop3: detected capacity change from 0 to 264192
16:19:58 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x4000)
mount$bind(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00), 0x14001, 0x0)
clock_gettime(0x0, &(0x7f0000001c40))
clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:58 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

16:19:58 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x4000)
mount$bind(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00), 0x14001, 0x0)
clock_gettime(0x0, &(0x7f0000001c40))
clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:58 executing program 2:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x9, 0x0, 0xb0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x8141, 0x9, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
syncfs(r4)

16:19:58 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

16:19:58 executing program 7:
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x0, &(0x7f0000000200), 0x4050444, &(0x7f0000000340)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1000}}], [{@obj_type={'obj_type', 0x3d, '}!&'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@measure}, {@dont_appraise}, {@euid_gt={'euid>', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, 'noextend'}}]})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9d14, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
rmdir(&(0x7f0000000000)='./file0\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766036ecadba3b6219c36d91aa6a9321db77a92ec30ec4736bddf1c4955f8b396a7a6304fdde9af75d5a43b0b5a03f6ce5e8be2077070a928d415aa7ad439b3faf5199083fe0b701b244335b8221e94c26ba9fc84185bebdf2b8d6b2726c9419bf96194288c75f748b7dd973a83325f2a687103f314a39c1c4114811f7d876153e52a839c1e782e76744c93fad141ef7253153d2fbd7ecd21969be333750660c28475f86a6e7e976bcb", @ANYRESHEX=r0, @ANYBLOB=',cache=loose,version=9p2000.L,noextend,dont_appraise,\x00'])
rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0, {0x8, 0x40}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
epoll_wait(r2, &(0x7f0000000280)=[{}, {}], 0x2, 0x9)

16:19:58 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x0)

16:19:58 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, 0x0, 0x0)

[  244.679170] loop7: detected capacity change from 0 to 2048
[  244.705040] loop6: detected capacity change from 0 to 264192
[  244.716296] loop7: detected capacity change from 0 to 2048
16:19:58 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

16:19:58 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)
prlimit64(r3, 0x4, 0x0, &(0x7f0000000080))

16:19:58 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, 0x0, 0x0)

16:19:58 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r1 = getpgrp(0x0)
r2 = gettid()
tgkill(r1, r2, 0x0)

16:19:59 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[])
mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140), 0x4000)
mount$bind(&(0x7f0000001b80)='./file1\x00', &(0x7f0000001bc0)='./file1\x00', &(0x7f0000001c00), 0x14001, 0x0)
clock_gettime(0x0, &(0x7f0000001c40))
clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58)

16:19:59 executing program 3:
epoll_create(0x6)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000))
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0)

[  245.093369] loop7: detected capacity change from 0 to 264192
[  245.101233] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
[  245.109661] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
16:20:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)

16:20:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:07 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {r0}}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

16:20:07 executing program 3:
epoll_create(0x6)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mounts\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000))
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x31006, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000868, 0x0)

16:20:07 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0x0, 0xffff}}}, 0x8)

16:20:07 executing program 2:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0)

16:20:07 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffd8c)
io_setup(0x3, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:07 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
r3 = gettid()
tgkill(r2, r3, 0x0)

16:20:07 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

[  253.649285] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8.
16:20:07 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa4200, 0x0)
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x5}}, './file1\x00'})
openat(r1, &(0x7f0000000040)='./file1\x00', 0x80000, 0x85)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syncfs(r0)
io_uring_enter(r1, 0x1d92, 0x48bb, 0x0, &(0x7f0000000080)={[0x7]}, 0x8)

16:20:07 executing program 3:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "2ccb7cdfae12499fc0d3c190196518e52bb4ab7ccde0bf94e143376cfa6306bfa24616059ffbe658b48432012536468a3098f5a5fd76185b17679c6c916b7d71"}, 0x48, 0xfffffffffffffffc)
r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="d60fac0e424bf2520cfdd4653d7b1727314dd3a56d7d5fa1b20ac0a1553772f216da1d9df5cff8aa1f44dce242b78d4bf89c93df6922f404f9eaac", 0x3b, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1})
r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "e2d483f105ed6133e1a25a965d53d2c7172743507d186bdbdb11562a02df26bf52b3b2b861b4afbee0b2fca80697477bc4816a5404c26a7557005277912fd30d", 0x40}, 0x48, r0)
keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x1)
keyctl$read(0xb, r0, 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000940)={0x0, "af64ab5b483a88e9c1357d7ff791ec2ff40655cf41caae43734784eba74b896fa06b27803856057747907ba5e8da6507e6471939f8e92347bd9c010f35f032e5"}, 0x48, 0xfffffffffffffffe)
keyctl$update(0x2, r3, 0x0, 0x0)
keyctl$describe(0x6, r3, &(0x7f0000000300)=""/50, 0x32)

16:20:07 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_bp={0x0, 0x4}, 0x4404, 0xf26c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x84)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x8, 0xfff, 0x0, 'queue1\x00', 0x7})
write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3ff, {}, {0x0, 0x1}, @addr={0x9}}], 0x1c)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'})

16:20:07 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:20:07 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xc44}, 0xe)

16:20:07 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8)

16:20:07 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffd8c)
io_setup(0x3, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:07 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

[  255.693734] Bluetooth: hci0: command 0x0406 tx timeout
[  257.741805] Bluetooth: hci0: command 0x0406 tx timeout
16:20:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = getpgrp(0x0)
tgkill(r2, 0x0, 0x0)

16:20:16 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffd8c)
io_setup(0x3, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:16 executing program 7:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {r0}}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

16:20:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:16 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_bp={0x0, 0x4}, 0x4404, 0xf26c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x84)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x8, 0xfff, 0x0, 'queue1\x00', 0x7})
write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick=0x3ff, {}, {0x0, 0x1}, @addr={0x9}}], 0x1c)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'})

16:20:16 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffd8c)
io_setup(0x3, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:16 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8) (fail_nth: 1)

16:20:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xc44}, 0xe)

16:20:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

[  262.254348] FAULT_INJECTION: forcing a failure.
[  262.254348] name failslab, interval 1, probability 0, space 0, times 1
[  262.256453] CPU: 1 UID: 0 PID: 4620 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  262.256485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  262.256499] Call Trace:
[  262.256507]  <TASK>
[  262.256516]  dump_stack_lvl+0xfa/0x120
[  262.256576]  should_fail_ex+0x4d7/0x5e0
[  262.256621]  should_failslab+0xc2/0x120
[  262.256649]  kmem_cache_alloc_node_noprof+0x87/0x730
[  262.256689]  ? __alloc_skb+0x159/0x440
[  262.256728]  ? __alloc_skb+0x159/0x440
[  262.256756]  __alloc_skb+0x159/0x440
[  262.256784]  ? __alloc_skb+0x37d/0x440
[  262.256814]  ? __pfx___alloc_skb+0x10/0x10
[  262.256849]  ? perf_trace_lock_acquire+0xc8/0x580
[  262.256883]  ? should_fail_alloc_page+0xe8/0x110
[  262.256918]  alloc_skb_with_frags+0x8f/0x7c0
[  262.256964]  sock_alloc_send_pskb+0x7cb/0x950
[  262.256994]  ? lock_acquire+0x15e/0x2d0
[  262.257023]  ? avc_has_perm_noaudit+0x59/0x390
[  262.257056]  ? avc_has_perm_noaudit+0x11c/0x390
[  262.257091]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  262.257122]  ? avc_has_perm_noaudit+0x141/0x390
[  262.257157]  ? sock_has_perm+0x21c/0x2b0
[  262.257187]  ? __pfx_sock_has_perm+0x10/0x10
[  262.257224]  hci_sock_sendmsg+0x190/0x2270
[  262.257252]  ? __lock_acquire+0x451/0x2250
[  262.257285]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  262.257322]  sock_write_iter+0x57e/0x610
[  262.257349]  ? __pfx_sock_write_iter+0x10/0x10
[  262.257371]  ? lock_release+0xc8/0x270
[  262.257417]  ? security_file_permission+0x22/0x90
[  262.257452]  vfs_write+0xbe9/0x1150
[  262.257478]  ? __pfx_sock_write_iter+0x10/0x10
[  262.257502]  ? __fget_files+0x34/0x3b0
[  262.257527]  ? __pfx_vfs_write+0x10/0x10
[  262.257577]  ksys_write+0x1ef/0x240
[  262.257600]  ? __pfx_ksys_write+0x10/0x10
[  262.257621]  ? irqentry_exit+0xee/0x650
[  262.257644]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  262.257676]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  262.257717]  do_syscall_64+0xbf/0x420
[  262.257747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.257773] RIP: 0033:0x7f0f2a6dcb19
[  262.257793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  262.257817] RSP: 002b:00007f0f27c52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  262.257841] RAX: ffffffffffffffda RBX: 00007f0f2a7eff60 RCX: 00007f0f2a6dcb19
[  262.257858] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000004
[  262.257872] RBP: 00007f0f27c521d0 R08: 0000000000000000 R09: 0000000000000000
[  262.257887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.257908] R13: 00007ffec9ca5c3f R14: 00007f0f27c52300 R15: 0000000000022000
[  262.257958]  </TASK>
16:20:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xc44}, 0xe)

16:20:16 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x0)

16:20:16 executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
uname(&(0x7f0000000400))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c)
pread64(r1, &(0x7f0000000300)=""/188, 0xbc, 0xda)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r0, {r0}}, './file0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff)
close_range(r2, r3, 0x2)
r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
copy_file_range(r4, 0x0, r5, 0x0, 0x0, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff)
pidfd_getfd(r6, r6, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180))
clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58)

16:20:16 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffd8c)
io_setup(0x3, &(0x7f00000000c0)=<r0=>0x0)
io_getevents(r0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:16 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8) (fail_nth: 2)

16:20:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x0)

16:20:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4}, 0xe)

16:20:16 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x12, r1, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r4 = dup(r3)
ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000000))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)

16:20:16 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0xe, 0x0, &(0x7f0000000280))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000080)={{r3}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r6, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
r7 = dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103)
write$sndseq(0xffffffffffffffff, &(0x7f0000001400)=[{0x8, 0x80, 0x9, 0x5, @tick=0xffffffc0, {0x2}, {0x3f, 0x4}, @control={0xf8, 0x8, 0xfff}}, {0x80, 0x3, 0x3, 0x0, @time={0x1, 0x6}, {0xf4, 0x4}, {0xf2, 0x3}, @queue={0x7, {0x2, 0x101}}}, {0x4a, 0x0, 0x4, 0x8, @time={0x401, 0x66}, {0x3f, 0x73}, {0xf7, 0x7f}, @control={0x6, 0x81, 0x5}}, {0x0, 0x20, 0x37, 0xc0, @tick=0x8, {0x0, 0x9e}, {0x20, 0x1}, @control={0x3, 0x7, 0x1f}}, {0x57, 0x9, 0x5, 0x0, @time={0x8, 0x8}, {0x5, 0x1f}, {0x0, 0x7f}, @addr={0x7, 0x81}}], 0x8c)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:16 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0)
r2 = gettid()
tgkill(0x0, r2, 0x0)

16:20:16 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', 0x0, 0xfffffffffffffd8c)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:16 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8) (fail_nth: 3)

16:20:16 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4}, 0xe)

[  262.693299] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
16:20:16 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r1 = getpgrp(0x0)
r2 = gettid()
tgkill(r1, r2, 0x0)

[  262.740940] FAULT_INJECTION: forcing a failure.
[  262.740940] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  262.758209] CPU: 0 UID: 0 PID: 4658 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  262.758228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  262.758241] Call Trace:
[  262.758246]  <TASK>
[  262.758251]  dump_stack_lvl+0xfa/0x120
[  262.758272]  should_fail_ex+0x4d7/0x5e0
[  262.758296]  _copy_from_iter+0x27b/0x1610
[  262.758315]  ? lock_acquire+0x15e/0x2d0
[  262.758332]  ? find_held_lock+0x2b/0x80
[  262.758351]  ? __virt_addr_valid+0x2e8/0x5d0
[  262.758366]  ? __pfx__copy_from_iter+0x10/0x10
[  262.758384]  ? __virt_addr_valid+0x100/0x5d0
[  262.758397]  ? __check_object_size+0x5b3/0x980
[  262.758419]  hci_sock_sendmsg+0x402/0x2270
[  262.758434]  ? __lock_acquire+0x451/0x2250
[  262.758449]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  262.758464]  sock_write_iter+0x57e/0x610
[  262.758478]  ? __pfx_sock_write_iter+0x10/0x10
[  262.758488]  ? lock_release+0xc8/0x270
[  262.758508]  ? security_file_permission+0x22/0x90
[  262.758525]  vfs_write+0xbe9/0x1150
[  262.758538]  ? __pfx_sock_write_iter+0x10/0x10
[  262.758553]  ? __fget_files+0x34/0x3b0
[  262.758567]  ? __pfx_vfs_write+0x10/0x10
[  262.758587]  ksys_write+0x1ef/0x240
[  262.758598]  ? __pfx_ksys_write+0x10/0x10
[  262.758608]  ? irqentry_exit+0xee/0x650
[  262.758619]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  262.758636]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  262.758654]  do_syscall_64+0xbf/0x420
[  262.758669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.758682] RIP: 0033:0x7f0f2a6dcb19
[  262.758691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  262.758703] RSP: 002b:00007f0f27c52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  262.758715] RAX: ffffffffffffffda RBX: 00007f0f2a7eff60 RCX: 00007f0f2a6dcb19
[  262.758723] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000004
[  262.758730] RBP: 00007f0f27c521d0 R08: 0000000000000000 R09: 0000000000000000
[  262.758737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.758744] R13: 00007ffec9ca5c3f R14: 00007f0f27c52300 R15: 0000000000022000
[  262.758759]  </TASK>
16:20:16 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:16 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

[  264.590590] Bluetooth: hci0: command 0x0406 tx timeout
16:20:27 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x20003, 0x11, 0x130, &(0x7f0000000080)})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0x5)
setuid(r2)
ioctl$TIOCL_PASTESEL(r0, 0x541d, 0x0)

16:20:27 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:27 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4}, 0xe)

16:20:27 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:27 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:27 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:27 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0xe, 0x0, &(0x7f0000000280))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000080)={{r3}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r6, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
r7 = dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103)
write$sndseq(0xffffffffffffffff, &(0x7f0000001400)=[{0x8, 0x80, 0x9, 0x5, @tick=0xffffffc0, {0x2}, {0x3f, 0x4}, @control={0xf8, 0x8, 0xfff}}, {0x80, 0x3, 0x3, 0x0, @time={0x1, 0x6}, {0xf4, 0x4}, {0xf2, 0x3}, @queue={0x7, {0x2, 0x101}}}, {0x4a, 0x0, 0x4, 0x8, @time={0x401, 0x66}, {0x3f, 0x73}, {0xf7, 0x7f}, @control={0x6, 0x81, 0x5}}, {0x0, 0x20, 0x37, 0xc0, @tick=0x8, {0x0, 0x9e}, {0x20, 0x1}, @control={0x3, 0x7, 0x1f}}, {0x57, 0x9, 0x5, 0x0, @time={0x8, 0x8}, {0x5, 0x1f}, {0x0, 0x7f}, @addr={0x7, 0x81}}], 0x8c)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:27 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8) (fail_nth: 4)

16:20:27 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:27 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:27 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:27 executing program 5:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:27 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

[  275.213684] Bluetooth: hci0: command 0x0406 tx timeout
16:20:37 executing program 5:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:37 executing program 4:
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x38, 0x88, 0x0, @private0, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x30, 0x6c1c}, @hopopts={0x0, 0x3, '\x00', [@ra, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @dev}]}], {0x0, 0x0, 0x8}}}}}}, 0x0)

16:20:37 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe) (fail_nth: 1)

16:20:37 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
clock_gettime(0x1, &(0x7f0000000080))
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:37 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0xe, 0x0, &(0x7f0000000280))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000080)={{r3}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r6, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
r7 = dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103)
write$sndseq(0xffffffffffffffff, &(0x7f0000001400)=[{0x8, 0x80, 0x9, 0x5, @tick=0xffffffc0, {0x2}, {0x3f, 0x4}, @control={0xf8, 0x8, 0xfff}}, {0x80, 0x3, 0x3, 0x0, @time={0x1, 0x6}, {0xf4, 0x4}, {0xf2, 0x3}, @queue={0x7, {0x2, 0x101}}}, {0x4a, 0x0, 0x4, 0x8, @time={0x401, 0x66}, {0x3f, 0x73}, {0xf7, 0x7f}, @control={0x6, 0x81, 0x5}}, {0x0, 0x20, 0x37, 0xc0, @tick=0x8, {0x0, 0x9e}, {0x20, 0x1}, @control={0x3, 0x7, 0x1f}}, {0x57, 0x9, 0x5, 0x0, @time={0x8, 0x8}, {0x5, 0x1f}, {0x0, 0x7f}, @addr={0x7, 0x81}}], 0x8c)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:37 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8) (fail_nth: 5)

16:20:37 executing program 7:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="00e43c7e41e96800000000002e356647"])
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r7, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, r4)
sendfile(r5, r6, 0x0, 0xa0103)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r1)

16:20:37 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0xe, 0x0, &(0x7f0000000280))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000080)={{r3}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r6, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
r7 = dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103)
write$sndseq(0xffffffffffffffff, &(0x7f0000001400)=[{0x8, 0x80, 0x9, 0x5, @tick=0xffffffc0, {0x2}, {0x3f, 0x4}, @control={0xf8, 0x8, 0xfff}}, {0x80, 0x3, 0x3, 0x0, @time={0x1, 0x6}, {0xf4, 0x4}, {0xf2, 0x3}, @queue={0x7, {0x2, 0x101}}}, {0x4a, 0x0, 0x4, 0x8, @time={0x401, 0x66}, {0x3f, 0x73}, {0xf7, 0x7f}, @control={0x6, 0x81, 0x5}}, {0x0, 0x20, 0x37, 0xc0, @tick=0x8, {0x0, 0x9e}, {0x20, 0x1}, @control={0x3, 0x7, 0x1f}}, {0x57, 0x9, 0x5, 0x0, @time={0x8, 0x8}, {0x5, 0x1f}, {0x0, 0x7f}, @addr={0x7, 0x81}}], 0x8c)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

[  283.296192] FAULT_INJECTION: forcing a failure.
[  283.296192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.297196] CPU: 1 UID: 0 PID: 4718 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  283.297212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  283.297220] Call Trace:
[  283.297224]  <TASK>
[  283.297229]  dump_stack_lvl+0xfa/0x120
[  283.297249]  should_fail_ex+0x4d7/0x5e0
[  283.297273]  _copy_from_iter+0x27b/0x1610
[  283.297294]  ? lock_acquire+0x15e/0x2d0
[  283.297311]  ? find_held_lock+0x2b/0x80
[  283.297330]  ? __virt_addr_valid+0x2e8/0x5d0
[  283.297345]  ? __pfx__copy_from_iter+0x10/0x10
[  283.297364]  ? __virt_addr_valid+0x100/0x5d0
[  283.297377]  ? __check_object_size+0x5b3/0x980
[  283.297400]  hci_sock_sendmsg+0x402/0x2270
[  283.297414]  ? __lock_acquire+0x451/0x2250
[  283.297429]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  283.297446]  sock_write_iter+0x57e/0x610
[  283.297460]  ? __pfx_sock_write_iter+0x10/0x10
[  283.297470]  ? lock_release+0xc8/0x270
[  283.297490]  ? security_file_permission+0x22/0x90
[  283.297507]  vfs_write+0xbe9/0x1150
[  283.297519]  ? __pfx_sock_write_iter+0x10/0x10
[  283.297530]  ? __fget_files+0x34/0x3b0
[  283.297547]  ? __pfx_vfs_write+0x10/0x10
[  283.297568]  ksys_write+0x1ef/0x240
[  283.297579]  ? __pfx_ksys_write+0x10/0x10
[  283.297589]  ? irqentry_exit+0xee/0x650
[  283.297600]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  283.297617]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  283.297636]  do_syscall_64+0xbf/0x420
[  283.297651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.297664] RIP: 0033:0x7f0f2a6dcb19
[  283.297673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  283.297684] RSP: 002b:00007f0f27c52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  283.297696] RAX: ffffffffffffffda RBX: 00007f0f2a7eff60 RCX: 00007f0f2a6dcb19
[  283.297704] RDX: 0000000000000008 RSI: 0000000020000100 RDI: 0000000000000004
[  283.297712] RBP: 00007f0f27c521d0 R08: 0000000000000000 R09: 0000000000000000
[  283.297719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.297726] R13: 00007ffec9ca5c3f R14: 00007f0f27c52300 R15: 0000000000022000
[  283.297741]  </TASK>
[  283.318632] FAULT_INJECTION: forcing a failure.
[  283.318632] name fail_usercopy, interval 1, probability 0, space 0, times 0
16:20:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

[  283.330650] CPU: 0 UID: 0 PID: 4721 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  283.330690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  283.330703] Call Trace:
[  283.330711]  <TASK>
[  283.330720]  dump_stack_lvl+0xfa/0x120
[  283.330750]  should_fail_ex+0x4d7/0x5e0
[  283.330790]  _copy_from_user+0x30/0xd0
[  283.330827]  move_addr_to_kernel.part.0+0x40/0x120
[  283.330869]  __sys_connect+0xd4/0x1a0
[  283.330895]  ? __pfx___sys_connect+0x10/0x10
[  283.330927]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  283.330960]  ? ksys_write+0x1a3/0x240
[  283.330981]  ? __pfx_ksys_write+0x10/0x10
[  283.331001]  ? irqentry_exit+0xee/0x650
[  283.331022]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  283.331050]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  283.331099]  __x64_sys_connect+0x73/0xb0
[  283.331126]  do_syscall_64+0xbf/0x420
[  283.331153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.331176] RIP: 0033:0x7f40db5fbb19
[  283.331194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  283.331216] RSP: 002b:00007f40d8b71188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  283.331238] RAX: ffffffffffffffda RBX: 00007f40db70ef60 RCX: 00007f40db5fbb19
[  283.331254] RDX: 000000000000000e RSI: 00000000200002c0 RDI: 0000000000000004
[  283.331268] RBP: 00007f40d8b711d0 R08: 0000000000000000 R09: 0000000000000000
[  283.331281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.331295] R13: 00007fff2ef6b8cf R14: 00007f40d8b71300 R15: 0000000000022000
[  283.331324]  </TASK>
16:20:37 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8) (fail_nth: 6)

16:20:37 executing program 5:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:37 executing program 4:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"])
r1 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x44900, 0x44)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000340)=0xffffffff)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000180)={@desc={0x1, 0x0, @desc2}})
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000380))
pipe2(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r6=>r3, @ANYBLOB="0000000000000000ae2f66696c65300094426cb053d1aa569b2256e45e92395379f69bd35d4fe5a027fafafe1a8c68f737a44016e9b813fe67eb8cc0f6ac58e117f8156ebd2ed67313d03b0994aafac54c9b392ea5aabd27f132e74884c188d0618e04df6e36fbb458bfaa005974b3298c6ed268b4c2b48d90a27dc87755cf45b369341f3d415898d9e17f336a325544ccdec7928072c4ef795e1d3f4fd7e789e4779f582631da1e3c4a765eae0311fc0d44b0828019b9e4bdb267c12496d85b8b2af05d34c2a43fc4ccf3695c81b19b6e724c6e64aff85016f5d23a61f0938d8bbb2f422a78974116439cb77896f2b0d528bcf932e043c7"])
sendmsg$AUDIT_TTY_SET(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x18, 0x3f9, 0xdb7d30e426ea9511, 0x70bd29, 0x25dfdbfe, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x48000}, 0x20004003)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dab08348b7ffb814dc6b6f30b2ece0d19e2e6e38c", @ANYRES64, @ANYRESHEX, @ANYRESHEX=r4, @ANYBLOB=',\x00', @ANYRESDEC=r5])
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000240), 0x204001, 0x0)
sendfile(r7, r5, &(0x7f0000000280)=0x7fffffff, 0xfff)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

16:20:37 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

[  283.431108] FAULT_INJECTION: forcing a failure.
[  283.431108] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  283.432138] CPU: 1 UID: 0 PID: 4734 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  283.432154] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  283.432161] Call Trace:
[  283.432166]  <TASK>
[  283.432171]  dump_stack_lvl+0xfa/0x120
[  283.432192]  should_fail_ex+0x4d7/0x5e0
[  283.432215]  _copy_to_user+0x32/0xd0
[  283.432237]  simple_read_from_buffer+0xe0/0x180
[  283.432259]  proc_fail_nth_read+0x18a/0x240
[  283.432276]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  283.432291]  ? security_file_permission+0x22/0x90
[  283.432306]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  283.432321]  vfs_read+0x1eb/0xc70
[  283.432342]  ? __pfx___mutex_lock+0x10/0x10
[  283.432354]  ? __fget_files+0x34/0x3b0
[  283.432366]  ? __pfx_vfs_read+0x10/0x10
[  283.432385]  ? lock_release+0xc8/0x270
[  283.432404]  ? __fget_files+0x20d/0x3b0
[  283.432420]  ksys_read+0x121/0x240
[  283.432431]  ? __pfx_ksys_read+0x10/0x10
[  283.432440]  ? irqentry_exit+0xee/0x650
[  283.432451]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  283.432468]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  283.432486]  do_syscall_64+0xbf/0x420
[  283.432501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.432514] RIP: 0033:0x7f0f2a68f69c
[  283.432524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  283.432535] RSP: 002b:00007f0f27c52170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  283.432551] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f0f2a68f69c
[  283.432559] RDX: 000000000000000f RSI: 00007f0f27c521e0 RDI: 0000000000000003
[  283.432566] RBP: 00007f0f27c521d0 R08: 0000000000000000 R09: 0000000000000000
[  283.432573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.432581] R13: 00007ffec9ca5c3f R14: 00007f0f27c52300 R15: 0000000000022000
[  283.432596]  </TASK>
16:20:37 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0xe, 0x0, &(0x7f0000000280))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000080)={{r3}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r6, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
r7 = dup(r0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa0103)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:37 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x5000000)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

[  283.559212] 9p: Bad value for 'rfdno'
[  285.453664] Bluetooth: hci0: command 0x0406 tx timeout
16:20:47 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe) (fail_nth: 2)

16:20:47 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:47 executing program 4:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="00e43c7e41e96800000000002e356647"])
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r7, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, r4)
sendfile(r5, r6, 0x0, 0xa0103)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r1)

16:20:47 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:47 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:47 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8)

16:20:47 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r4, 0x1, 0xe, 0x0, &(0x7f0000000280))
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r6=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000080)={{r3}, r6, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r6, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
r7 = dup(r0)
getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:47 executing program 7:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="00e43c7e41e96800000000002e356647"])
r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26082, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r7, 0x0)
ioctl$LOOP_CTL_ADD(r7, 0x4c80, r4)
sendfile(r5, r6, 0x0, 0xa0103)
ioctl$LOOP_CTL_ADD(r6, 0x4c80, r1)

[  293.544235] FAULT_INJECTION: forcing a failure.
[  293.544235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.546150] CPU: 0 UID: 0 PID: 4766 Comm: syz-executor.2 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  293.546180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  293.546193] Call Trace:
[  293.546201]  <TASK>
[  293.546210]  dump_stack_lvl+0xfa/0x120
[  293.546243]  should_fail_ex+0x4d7/0x5e0
[  293.546285]  _copy_to_user+0x32/0xd0
[  293.546325]  simple_read_from_buffer+0xe0/0x180
[  293.546367]  proc_fail_nth_read+0x18a/0x240
[  293.546400]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.546431]  ? security_file_permission+0x22/0x90
[  293.546460]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  293.546490]  vfs_read+0x1eb/0xc70
[  293.546530]  ? __pfx___mutex_lock+0x10/0x10
[  293.546560]  ? __fget_files+0x34/0x3b0
[  293.546584]  ? __pfx_vfs_read+0x10/0x10
[  293.546623]  ? lock_release+0xc8/0x270
[  293.546658]  ? __fget_files+0x20d/0x3b0
[  293.546694]  ksys_read+0x121/0x240
[  293.546716]  ? __pfx_ksys_read+0x10/0x10
[  293.546735]  ? irqentry_exit+0xee/0x650
[  293.546756]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  293.546786]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  293.546827]  do_syscall_64+0xbf/0x420
[  293.546855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.546879] RIP: 0033:0x7f40db5ae69c
[  293.546897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  293.546919] RSP: 002b:00007f40d8b71170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  293.546941] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f40db5ae69c
[  293.546956] RDX: 000000000000000f RSI: 00007f40d8b711e0 RDI: 0000000000000003
[  293.546970] RBP: 00007f40d8b711d0 R08: 0000000000000000 R09: 0000000000000000
[  293.546984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.546997] R13: 00007fff2ef6b8cf R14: 00007f40d8b71300 R15: 0000000000022000
[  293.547031]  </TASK>
16:20:47 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000002c0)={{}, r5, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000080)={{r2}, r5, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r5, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:47 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:47 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:47 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:20:47 executing program 4:
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

16:20:47 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

[  295.566572] Bluetooth: hci0: command 0x0406 tx timeout
16:20:56 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x5, @add_sco={{0x407, 0x4}}}, 0x8)

16:20:56 executing program 4:
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001000000000000000200000001000600000000000000000000000000800029a3169df153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="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", 0x120, 0x4400}, {&(0x7f0000010900)="2e20202020202020202020100034eb70325132510000eb7032510300000000002e2e202020202020202020100034eb70325132510000eb70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200034eb70325132510000eb70325104001a040000", 0x80, 0x14400}, {&(0x7f0000010a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24400}, {&(0x7f0000010f00)='syzkallers\x00'/32, 0x20, 0x34400}, {&(0x7f0000011000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54400}], 0x0, &(0x7f0000011100)=ANY=[@ANYBLOB='w'])
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', r0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000016c0)={'L-', 0x4000}, 0x16, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="b7824fe2881e9f83a15dc6cef924178fb7d70ddf832ba10672ba74b4d01941506228b7ea7bd922fb75705d547c4f477aac13dd0e52269bc93e32619c209869c5cf62b63afa690c884eee8add5e2aebc1f437de8f8c16a3041748c80d3b9dda8e92696e98566fcf8811737a10eeb582bf000000000000"], 0x150}, 0x6488e5bf268de93c)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000001700)=0x5)

16:20:56 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:20:56 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:20:56 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000002c0)={{}, r5, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000080)={{r2}, r5, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r5, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:20:56 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:56 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:20:56 executing program 7:
unshare(0x24000000)
unshare(0x2c020600)
unshare(0x4000580)

16:20:56 executing program 0:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:05 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x8, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:05 executing program 0:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:05 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000002c0)={{}, r5, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000080)={{r2}, r5, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r5, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:05 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:05 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0)
write$P9_RMKDIR(r0, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x40, 0x3, 0x3}}, 0x14)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
pread64(r1, &(0x7f0000000040)=""/26, 0x1a, 0x8001)
connect$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:21:05 executing program 7:
unshare(0x24000000)
unshare(0x2c020600)
unshare(0x4000580)

16:21:05 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:05 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
r0 = gettid()
tgkill(0x0, r0, 0x0)

16:21:06 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x7}}}, 0x8)

16:21:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:06 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000002c0)={{}, r5, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000080)={{r2}, r5, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r5, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:06 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:21:06 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:06 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000002c0)={{}, r5, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000080)={{r2}, r5, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
r6 = dup(r0)
getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:06 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:06 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
r0 = gettid()
tgkill(0x0, r0, 0x0)

16:21:06 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:06 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5}, 0xe)

[  314.061700] Bluetooth: hci0: command 0x0406 tx timeout
[  316.109672] Bluetooth: hci0: command 0x0406 tx timeout
16:21:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:14 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
r0 = gettid()
tgkill(0x0, r0, 0x0)

16:21:14 executing program 7:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x7}}}, 0x8)

16:21:14 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:14 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:14 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:14 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{}, r4, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
r5 = dup(r0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:14 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xe1b}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
write(r4, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295", 0x10)
r5 = syz_open_dev$evdev(&(0x7f0000000080), 0xc28, 0x10400)
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000940)={0x3, 0x3, @start={<r6=>0x0, 0x1, "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", "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"}, [0x2, 0x3, 0x5, 0xee, 0x101, 0x5, 0x0, 0x2, 0xffff, 0x2, 0xffffffff, 0xffffffff, 0x8, 0x401, 0xfffffffffffffff9, 0x9e, 0x80, 0x400, 0xceba, 0x40, 0x5, 0x80000001, 0x6, 0x4, 0x400, 0x6, 0x3, 0x4, 0x1f18000000000, 0x0, 0x4, 0x5, 0x2, 0x5, 0xbf, 0x9, 0x5, 0x5, 0xa1a8, 0x8, 0x2, 0x9041, 0x4, 0x8, 0x9e4, 0x8001, 0x0, 0xffffffffffff8000, 0x81, 0x9, 0xfffffffffffffffe, 0x4, 0xff, 0x3f, 0x9, 0x3, 0x7, 0x5, 0x6ff5, 0x4, 0x25, 0x9, 0x0, 0x9b]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={<r7=>0x0, 0x0, 0x1, [0x0, 0x94e, 0x80000001, 0x401, 0x7fff], [0x40, 0x40, 0x3, 0x4, 0x5, 0x3, 0x1, 0x66d, 0xfffffffffffffff7, 0x100000000, 0xe34, 0x6, 0x400, 0x34, 0xac3, 0x6, 0x3, 0xa7, 0x0, 0x10000, 0x7ff, 0x6, 0x8, 0x3b6, 0x4, 0x5, 0x7c00000000, 0x4, 0xc88d, 0xffffffff00000000, 0x1f, 0x101, 0xe651, 0x20, 0x10000, 0x9, 0x9, 0x3f, 0x7fff, 0x4, 0x785, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0xf9, 0x1, 0x8, 0xfff, 0x8, 0x6, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x100000000, 0x5900000000000, 0x800, 0x100000000, 0x0, 0x3, 0x495, 0x10000, 0x6, 0x1, 0x2, 0xffffffffffffff3d, 0x7fff, 0xfffffffffffffffb, 0x2984, 0x9169, 0x7, 0x400, 0x7fffffff, 0xfff3, 0xfff, 0x8000, 0x100, 0x40, 0x7f00000000, 0xffffffffffffffff, 0x4, 0x9, 0x7, 0x3ff, 0x7fffffff, 0xfffffffffffffffc, 0x3317, 0x57c, 0x9, 0x8, 0xb84e, 0x3, 0xfffffffffffffffa, 0x9, 0x1, 0xfffffffffffffff9, 0x1ff, 0x0, 0xfffffffffffffffa, 0xfffffffffffff001, 0x6, 0xffff, 0x1f, 0x1, 0x7fffffff, 0x1, 0x47d, 0x0, 0x0, 0x20, 0x7fffffff, 0x0, 0x0, 0x487, 0x0, 0xf98, 0x7, 0xde, 0x7fff]})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001380)={0x0, 0x0, {0x8, @usage=0x100, 0x0, 0x2, 0x100000000, 0x8, 0x3ff, 0x40, 0x2, @struct={0x20, 0x5}, 0x6, 0x6, [0x0, 0xb5, 0x0, 0x80000000, 0x8000, 0x3e44]}, {0x10001, @usage=0xfff, r6, 0x6, 0xfff, 0xffffffff, 0x3, 0xa9f00, 0x440, @struct={0x6, 0x3}, 0x9, 0x7c21, [0x6, 0x1, 0x68, 0x401, 0x0, 0x8]}, {0x2, @usage=0xfffffffffffff000, r7, 0xa2f2, 0x7fffffff, 0x3, 0x4, 0xfc9, 0x18, @struct={0x7, 0x2}, 0x3, 0x40, [0x8, 0x1, 0x7, 0x6, 0x861, 0x7ff]}, {0x3, 0x2, 0x1}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
sendfile(r8, r8, 0x0, 0x4000fdea)
close_range(r2, r3, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4)

16:21:14 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:14 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:14 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

[  322.445650] Bluetooth: hci0: command 0x0406 tx timeout
[  324.493713] Bluetooth: hci0: command 0x0406 tx timeout
[  326.541757] Bluetooth: hci0: command 0x0406 tx timeout
16:21:22 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r3, 0x1, 0xe, 0x0, &(0x7f0000000280))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r5=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000002c0)={{}, r5, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000080)={{r2}, r5, 0x0, @unused=[0x2, 0x0, 0x8, 0xfffffffffffffffd], @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b7fa9905496809c1bb8f84af4b15ae5d", r5, 0x0, {0x9, 0x1}, {0x0, 0x80000000}, 0x6, [0x0, 0x3, 0x4, 0xfffffffffffffff9, 0x5, 0x3, 0x101, 0x0, 0x4, 0x9, 0x7b578f8f, 0x7, 0x3, 0x2, 0x2]})
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:22 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:22 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xffffffffffffffb3)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})

16:21:22 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
gettid()
tgkill(r0, 0x0, 0x0)

16:21:22 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{}, r4, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
r5 = dup(r0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:22 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0x2}}}, 0x8)

16:21:22 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:22 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
gettid()
tgkill(r0, 0x0, 0x0)

16:21:22 executing program 4:
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:22 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:23 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:23 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0x4}}}, 0x8)

16:21:23 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'vxcan1\x00', {0x2, 0x0, @empty}})
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xc40}, 0xe)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xe)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3f, @none, 0x101, 0x1}, 0xe)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2f3, @any, 0x403}, 0xe)

16:21:23 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280))
r4 = dup(r0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

[  330.829676] Bluetooth: hci0: command 0x0406 tx timeout
[  332.877692] Bluetooth: hci0: command 0x0406 tx timeout
[  334.925662] Bluetooth: hci0: command 0x0406 tx timeout
16:21:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
r4 = dup(r0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0x5}}}, 0x8)

16:21:31 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:31 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x3f, 0x2, 0x0, 0x0, 0x3, 0x3}, 0xc)
connect$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x800, @any, 0xc44}, 0xe)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000})
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
close_range(r2, r3, 0x2)

16:21:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0)

16:21:31 executing program 4:
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:31 executing program 7:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{}, r4, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
r5 = dup(r0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
gettid()
tgkill(r0, 0x0, 0x0)

16:21:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0x6}}}, 0x8)

16:21:31 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:31 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080300}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xdd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10d0}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x697}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4c}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x810)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0xc44}, 0xe)

16:21:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{}, r4, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
r5 = dup(r0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:31 executing program 4:
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:31 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
r1 = gettid()
tgkill(r0, r1, 0x0) (fail_nth: 1)

16:21:31 executing program 6:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:31 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
r4 = dup(r0)
getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
r0 = gettid()
tgkill(0x0, r0, 0x0)

16:21:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{}, r4, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
r5 = dup(r0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:31 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @add_sco={{0x407, 0x4}, {0x7}}}, 0x8)

[  337.407731] FAULT_INJECTION: forcing a failure.
[  337.407731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.409620] CPU: 0 UID: 0 PID: 4965 Comm: syz-executor.7 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  337.409650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  337.409663] Call Trace:
[  337.409673]  <TASK>
[  337.409683]  dump_stack_lvl+0xfa/0x120
[  337.409723]  should_fail_ex+0x4d7/0x5e0
[  337.409777]  _copy_to_user+0x32/0xd0
[  337.409828]  simple_read_from_buffer+0xe0/0x180
[  337.409880]  proc_fail_nth_read+0x18a/0x240
[  337.409921]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.409961]  ? security_file_permission+0x22/0x90
[  337.409997]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.410035]  vfs_read+0x1eb/0xc70
[  337.410083]  ? __pfx___mutex_lock+0x10/0x10
[  337.410109]  ? __fget_files+0x34/0x3b0
[  337.410137]  ? __pfx_vfs_read+0x10/0x10
[  337.410185]  ? lock_release+0xc8/0x270
[  337.410233]  ? __fget_files+0x20d/0x3b0
[  337.410294]  ksys_read+0x121/0x240
[  337.410320]  ? __pfx_ksys_read+0x10/0x10
[  337.410345]  ? trace_hardirqs_on_prepare+0xe3/0x110
[  337.410377]  ? lockdep_hardirqs_on_prepare+0xdb/0x190
[  337.410433]  do_syscall_64+0xbf/0x420
[  337.410472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.410499] RIP: 0033:0x7fa360ca669c
[  337.410520] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  337.410549] RSP: 002b:00007fa35e269170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  337.410572] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa360ca669c
[  337.410587] RDX: 000000000000000f RSI: 00007fa35e2691e0 RDI: 0000000000000004
[  337.410601] RBP: 00007fa35e2691d0 R08: 0000000000000000 R09: 0000000000000000
[  337.410614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.410628] R13: 00007ffcdc31b30f R14: 00007fa35e269300 R15: 0000000000022000
[  337.410693]  </TASK>
[  337.439835] 
[  337.439997] =====================================
[  337.440384] WARNING: bad unlock balance detected!
[  337.440776] 6.19.0-rc5-next-20260116 #1 Not tainted
[  337.441185] -------------------------------------
[  337.441569] syz-executor.1/4969 is trying to release lock (rcu_read_lock) at:
[  337.442147] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  337.442682] but there are no more locks to release!
[  337.443076] 
[  337.443076] other info that might help us debug this:
[  337.443595] 4 locks held by syz-executor.1/4969:
[  337.444776]  #0: ffff88800f6ca3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  337.446861]  #1: ffff88804eda3d10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  337.449335]  #2: ffff88800f6ce950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  337.451353]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  337.452641] 
[  337.452641] stack backtrace:
[  337.453010] CPU: 1 UID: 0 PID: 4969 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  337.453023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  337.453030] Call Trace:
[  337.453034]  <TASK>
[  337.453038]  dump_stack_lvl+0xca/0x120
[  337.453052]  ? __wait_on_freeing_inode+0x105/0x350
[  337.453066]  print_unlock_imbalance_bug+0x118/0x130
[  337.453081]  ? __wait_on_freeing_inode+0x105/0x350
[  337.453095]  lock_release+0x1ee/0x270
[  337.453110]  __wait_on_freeing_inode+0x10a/0x350
[  337.453125]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  337.453141]  ? __pfx_var_wake_function+0x10/0x10
[  337.453159]  ? lock_is_held_type+0x9e/0x120
[  337.453171]  insert_inode_locked+0x25f/0x890
[  337.453189]  __ext4_new_inode+0x223d/0x4cd0
[  337.453208]  ? __pfx___ext4_new_inode+0x10/0x10
[  337.453223]  ? __pfx___dquot_initialize+0x10/0x10
[  337.453242]  ? __pfx_avc_has_perm+0x10/0x10
[  337.453259]  ext4_symlink+0x623/0xb40
[  337.453280]  ? __pfx_ext4_symlink+0x10/0x10
[  337.453295]  ? security_inode_permission+0x72/0xe0
[  337.453309]  vfs_symlink+0x44b/0x840
[  337.453326]  filename_symlinkat+0x158/0x440
[  337.453341]  ? __pfx_filename_symlinkat+0x10/0x10
[  337.453355]  ? strncpy_from_user+0x21b/0x2f0
[  337.453373]  __x64_sys_symlink+0x82/0x110
[  337.453387]  do_syscall_64+0xbf/0x420
[  337.453400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.453412] RIP: 0033:0x7f0f2a6dc427
[  337.453421] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  337.453432] RSP: 002b:00007ffec9ca5e88 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  337.453442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f2a6dc427
[  337.453450] RDX: 00007ffec9ca5f63 RSI: 00007f0f2a73702f RDI: 00007ffec9ca5f50
[  337.453457] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffec9ca5d20
[  337.453464] R10: 00007ffec9ca5bd7 R11: 0000000000000206 R12: 0000000000000001
[  337.453471] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffec9ca5f50
[  337.453483]  </TASK>
[  337.468734] ------------[ cut here ]------------
[  337.469104] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/4969
[  337.469992] Modules linked in:
[  337.470281] CPU: 1 UID: 0 PID: 4969 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  337.471114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  337.471804] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  337.472265] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  337.473785] RSP: 0018:ffff88801d8c79a0 EFLAGS: 00010286
[  337.474207] RAX: 00000000ffffffff RBX: ffff88804d480000 RCX: ffffffff815660f7
[  337.474812] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88804d4803fc
[  337.475369] RBP: ffff88804d480000 R08: 0000000000000000 R09: fffffbfff0ba7040
[  337.475975] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804d480000
[  337.476579] R13: 0000000000000001 R14: ffffffff85c0f450 R15: ffff88804ed932c0
[  337.477139] FS:  0000555581367400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  337.477820] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.478279] CR2: 00005555861a6c58 CR3: 000000000ecaf000 CR4: 0000000000350ef0
[  337.478884] Call Trace:
[  337.479120]  <TASK>
[  337.479806]  __wait_on_freeing_inode+0x10f/0x350
[  337.480469]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  337.481618]  ? __pfx_var_wake_function+0x10/0x10
[  337.482866]  ? lock_is_held_type+0x9e/0x120
[  337.483977]  insert_inode_locked+0x25f/0x890
[  337.485602]  __ext4_new_inode+0x223d/0x4cd0
[  337.488036]  ? __pfx___ext4_new_inode+0x10/0x10
[  337.489244]  ? __pfx___dquot_initialize+0x10/0x10
[  337.490042]  ? __pfx_avc_has_perm+0x10/0x10
[  337.491817]  ext4_symlink+0x623/0xb40
[  337.494055]  ? __pfx_ext4_symlink+0x10/0x10
[  337.495053]  ? security_inode_permission+0x72/0xe0
[  337.496688]  vfs_symlink+0x44b/0x840
[  337.497943]  filename_symlinkat+0x158/0x440
[  337.499061]  ? __pfx_filename_symlinkat+0x10/0x10
[  337.499851]  ? strncpy_from_user+0x21b/0x2f0
[  337.501710]  __x64_sys_symlink+0x82/0x110
[  337.502405]  do_syscall_64+0xbf/0x420
[  337.503218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.503770] RIP: 0033:0x7f0f2a6dc427
[  337.504127] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  337.505624] RSP: 002b:00007ffec9ca5e88 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  337.506221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f2a6dc427
[  337.506819] RDX: 00007ffec9ca5f63 RSI: 00007f0f2a73702f RDI: 00007ffec9ca5f50
[  337.507382] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffec9ca5d20
[  337.507995] R10: 00007ffec9ca5bd7 R11: 0000000000000206 R12: 0000000000000001
[  337.508597] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffec9ca5f50
[  337.511147]  </TASK>
[  337.511339] irq event stamp: 1037
[  337.511655] hardirqs last  enabled at (1037): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  337.512470] hardirqs last disabled at (1036): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  337.513285] softirqs last  enabled at (1032): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  337.514047] softirqs last disabled at (1030): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  337.514866] ---[ end trace 0000000000000000 ]---
16:21:31 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x460080)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_buf(r2, 0x1, 0xe, 0x0, &(0x7f0000000280))
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x3ff, @fixed, 0x0, 0x2}, 0xe)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f00000012c0)={{0x7, 0x21c2}, 0x100, './file0\x00'})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280)=<r4=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000002c0)={{}, r4, 0x10, @unused=[0x4, 0x2, 0x101, 0x58], @subvolid=0x20})
r5 = dup(r0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x1)

16:21:31 executing program 6:
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8004}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_getevents(0x0, 0xffffffffffff7fff, 0x1, &(0x7f00000001c0)=[{}], 0xfffffffffffffffd)

16:21:31 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x2, @add_sco={{0x407, 0x4}}}, 0x8)

16:21:31 executing program 0:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpgrp(0x0)
r0 = gettid()
tgkill(0x0, r0, 0x0)

[  339.149662] Bluetooth: hci0: command 0x0406 tx timeout
[  339.986155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  339.988735] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  339.990382] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  340.000284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  340.002781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  341.197708] Bluetooth: hci0: command 0x0406 tx timeout
[  342.032302] Bluetooth: hci1: command tx timeout
[  343.247577] Bluetooth: hci0: command 0x0406 tx timeout
[  344.077603] Bluetooth: hci1: command tx timeout
[  345.293696] Bluetooth: hci0: command 0x0406 tx timeout
[  346.125658] Bluetooth: hci1: command tx timeout

VM DIAGNOSIS:
16:21:31  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f28fb40
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11001e51f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f28fb78
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558d4f4400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe4e94b0a0 CR3=000000000e17b000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88801d8c7488
R8 =0000000000000000 R9 =ffffed1001684046 R10=000000000000002e R11=666666203a332320
R12=000000000000002e R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555581367400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe2f00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555861a6c58 CR3=000000000ecaf000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000