Warning: Permanently added '[localhost]:49837' (ECDSA) to the list of known hosts.
2026/01/13 08:45:22 fuzzer started
2026/01/13 08:45:22 dialing manager at localhost:38155
syzkaller login: [   43.815911] cgroup: Unknown subsys name 'net'
[   43.882261] cgroup: Unknown subsys name 'cpuset'
[   43.895557] cgroup: Unknown subsys name 'rlimit'
2026/01/13 08:45:33 syscalls: 2214
2026/01/13 08:45:33 code coverage: enabled
2026/01/13 08:45:33 comparison tracing: enabled
2026/01/13 08:45:33 extra coverage: enabled
2026/01/13 08:45:33 setuid sandbox: enabled
2026/01/13 08:45:33 namespace sandbox: enabled
2026/01/13 08:45:33 Android sandbox: enabled
2026/01/13 08:45:33 fault injection: enabled
2026/01/13 08:45:33 leak checking: enabled
2026/01/13 08:45:33 net packet injection: enabled
2026/01/13 08:45:33 net device setup: enabled
2026/01/13 08:45:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/13 08:45:33 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/13 08:45:33 USB emulation: enabled
2026/01/13 08:45:33 hci packet injection: enabled
2026/01/13 08:45:33 wifi device emulation: enabled
2026/01/13 08:45:33 802.15.4 emulation: enabled
2026/01/13 08:45:33 fetching corpus: 0, signal 0/2000 (executing program)
2026/01/13 08:45:33 fetching corpus: 50, signal 16283/19952 (executing program)
2026/01/13 08:45:33 fetching corpus: 100, signal 37428/42259 (executing program)
2026/01/13 08:45:33 fetching corpus: 150, signal 48963/54975 (executing program)
2026/01/13 08:45:33 fetching corpus: 200, signal 55363/62519 (executing program)
2026/01/13 08:45:33 fetching corpus: 250, signal 59401/67748 (executing program)
2026/01/13 08:45:33 fetching corpus: 300, signal 65335/74707 (executing program)
2026/01/13 08:45:33 fetching corpus: 350, signal 69766/80145 (executing program)
2026/01/13 08:45:33 fetching corpus: 400, signal 74140/85460 (executing program)
2026/01/13 08:45:34 fetching corpus: 450, signal 79746/91731 (executing program)
2026/01/13 08:45:34 fetching corpus: 500, signal 83452/96213 (executing program)
2026/01/13 08:45:34 fetching corpus: 550, signal 85447/99113 (executing program)
2026/01/13 08:45:34 fetching corpus: 600, signal 89567/103810 (executing program)
2026/01/13 08:45:34 fetching corpus: 650, signal 91737/106774 (executing program)
2026/01/13 08:45:34 fetching corpus: 700, signal 94099/109871 (executing program)
2026/01/13 08:45:34 fetching corpus: 750, signal 96639/113041 (executing program)
2026/01/13 08:45:34 fetching corpus: 800, signal 99170/116151 (executing program)
2026/01/13 08:45:34 fetching corpus: 850, signal 101291/118857 (executing program)
2026/01/13 08:45:35 fetching corpus: 900, signal 103038/121243 (executing program)
2026/01/13 08:45:35 fetching corpus: 950, signal 104927/123701 (executing program)
2026/01/13 08:45:35 fetching corpus: 1000, signal 106682/126059 (executing program)
2026/01/13 08:45:35 fetching corpus: 1050, signal 108898/128635 (executing program)
2026/01/13 08:45:35 fetching corpus: 1100, signal 110207/130566 (executing program)
2026/01/13 08:45:35 fetching corpus: 1150, signal 112111/132907 (executing program)
2026/01/13 08:45:35 fetching corpus: 1200, signal 113211/134603 (executing program)
2026/01/13 08:45:35 fetching corpus: 1250, signal 114497/136444 (executing program)
2026/01/13 08:45:36 fetching corpus: 1300, signal 116583/138833 (executing program)
2026/01/13 08:45:36 fetching corpus: 1350, signal 118281/140894 (executing program)
2026/01/13 08:45:36 fetching corpus: 1400, signal 119985/142925 (executing program)
2026/01/13 08:45:36 fetching corpus: 1450, signal 121398/144712 (executing program)
2026/01/13 08:45:36 fetching corpus: 1500, signal 122698/146379 (executing program)
2026/01/13 08:45:36 fetching corpus: 1550, signal 123977/148016 (executing program)
2026/01/13 08:45:36 fetching corpus: 1600, signal 125118/149525 (executing program)
2026/01/13 08:45:36 fetching corpus: 1650, signal 125993/150819 (executing program)
2026/01/13 08:45:36 fetching corpus: 1700, signal 127048/152285 (executing program)
2026/01/13 08:45:37 fetching corpus: 1750, signal 128404/153915 (executing program)
2026/01/13 08:45:37 fetching corpus: 1800, signal 129736/155481 (executing program)
2026/01/13 08:45:37 fetching corpus: 1850, signal 130630/156709 (executing program)
2026/01/13 08:45:37 fetching corpus: 1900, signal 131499/157864 (executing program)
2026/01/13 08:45:37 fetching corpus: 1950, signal 132292/158996 (executing program)
2026/01/13 08:45:37 fetching corpus: 2000, signal 133894/160597 (executing program)
2026/01/13 08:45:37 fetching corpus: 2050, signal 135218/162042 (executing program)
2026/01/13 08:45:37 fetching corpus: 2100, signal 136377/163348 (executing program)
2026/01/13 08:45:37 fetching corpus: 2150, signal 137062/164376 (executing program)
2026/01/13 08:45:38 fetching corpus: 2200, signal 138143/165791 (executing program)
2026/01/13 08:45:38 fetching corpus: 2250, signal 138906/166814 (executing program)
2026/01/13 08:45:38 fetching corpus: 2300, signal 140246/168110 (executing program)
2026/01/13 08:45:38 fetching corpus: 2350, signal 141126/169162 (executing program)
2026/01/13 08:45:38 fetching corpus: 2400, signal 142411/170359 (executing program)
2026/01/13 08:45:38 fetching corpus: 2450, signal 143343/171439 (executing program)
2026/01/13 08:45:38 fetching corpus: 2500, signal 144503/172518 (executing program)
2026/01/13 08:45:38 fetching corpus: 2550, signal 145270/173462 (executing program)
2026/01/13 08:45:39 fetching corpus: 2600, signal 146247/174442 (executing program)
2026/01/13 08:45:39 fetching corpus: 2650, signal 146907/175268 (executing program)
2026/01/13 08:45:39 fetching corpus: 2700, signal 147488/176084 (executing program)
2026/01/13 08:45:39 fetching corpus: 2750, signal 148323/176948 (executing program)
2026/01/13 08:45:39 fetching corpus: 2800, signal 149036/177743 (executing program)
2026/01/13 08:45:39 fetching corpus: 2850, signal 149963/178650 (executing program)
2026/01/13 08:45:39 fetching corpus: 2900, signal 150659/179430 (executing program)
2026/01/13 08:45:39 fetching corpus: 2950, signal 151221/180168 (executing program)
2026/01/13 08:45:39 fetching corpus: 3000, signal 151841/180911 (executing program)
2026/01/13 08:45:40 fetching corpus: 3050, signal 152733/181726 (executing program)
2026/01/13 08:45:40 fetching corpus: 3100, signal 153305/182403 (executing program)
2026/01/13 08:45:40 fetching corpus: 3150, signal 154212/183216 (executing program)
2026/01/13 08:45:40 fetching corpus: 3200, signal 154840/183926 (executing program)
2026/01/13 08:45:40 fetching corpus: 3250, signal 155456/184578 (executing program)
2026/01/13 08:45:40 fetching corpus: 3300, signal 156583/185374 (executing program)
2026/01/13 08:45:40 fetching corpus: 3350, signal 157157/185979 (executing program)
2026/01/13 08:45:40 fetching corpus: 3400, signal 157799/186598 (executing program)
2026/01/13 08:45:41 fetching corpus: 3450, signal 158344/187161 (executing program)
2026/01/13 08:45:41 fetching corpus: 3500, signal 158881/187727 (executing program)
2026/01/13 08:45:41 fetching corpus: 3550, signal 159636/188330 (executing program)
2026/01/13 08:45:41 fetching corpus: 3600, signal 160239/188876 (executing program)
2026/01/13 08:45:41 fetching corpus: 3650, signal 161216/189485 (executing program)
2026/01/13 08:45:41 fetching corpus: 3700, signal 162039/190078 (executing program)
2026/01/13 08:45:41 fetching corpus: 3750, signal 162595/190557 (executing program)
2026/01/13 08:45:41 fetching corpus: 3800, signal 163309/191068 (executing program)
2026/01/13 08:45:41 fetching corpus: 3850, signal 163921/191541 (executing program)
2026/01/13 08:45:42 fetching corpus: 3900, signal 164460/192025 (executing program)
2026/01/13 08:45:42 fetching corpus: 3950, signal 165006/192468 (executing program)
2026/01/13 08:45:42 fetching corpus: 4000, signal 165653/192938 (executing program)
2026/01/13 08:45:42 fetching corpus: 4050, signal 166013/193309 (executing program)
2026/01/13 08:45:42 fetching corpus: 4100, signal 166374/193687 (executing program)
2026/01/13 08:45:42 fetching corpus: 4150, signal 166829/194087 (executing program)
2026/01/13 08:45:42 fetching corpus: 4200, signal 167822/194513 (executing program)
2026/01/13 08:45:42 fetching corpus: 4250, signal 168433/194876 (executing program)
2026/01/13 08:45:42 fetching corpus: 4300, signal 169137/195259 (executing program)
2026/01/13 08:45:42 fetching corpus: 4350, signal 169505/195567 (executing program)
2026/01/13 08:45:43 fetching corpus: 4400, signal 170081/195911 (executing program)
2026/01/13 08:45:43 fetching corpus: 4450, signal 170529/196250 (executing program)
2026/01/13 08:45:43 fetching corpus: 4500, signal 170999/196572 (executing program)
2026/01/13 08:45:43 fetching corpus: 4550, signal 171632/196904 (executing program)
2026/01/13 08:45:43 fetching corpus: 4600, signal 172137/197223 (executing program)
2026/01/13 08:45:43 fetching corpus: 4650, signal 172888/197529 (executing program)
2026/01/13 08:45:43 fetching corpus: 4700, signal 173484/197805 (executing program)
2026/01/13 08:45:43 fetching corpus: 4750, signal 174133/198090 (executing program)
2026/01/13 08:45:44 fetching corpus: 4800, signal 174721/198354 (executing program)
2026/01/13 08:45:44 fetching corpus: 4850, signal 175392/198605 (executing program)
2026/01/13 08:45:44 fetching corpus: 4900, signal 175752/198731 (executing program)
2026/01/13 08:45:44 fetching corpus: 4950, signal 176329/198731 (executing program)
2026/01/13 08:45:44 fetching corpus: 5000, signal 176845/198733 (executing program)
2026/01/13 08:45:44 fetching corpus: 5050, signal 177377/198733 (executing program)
2026/01/13 08:45:44 fetching corpus: 5100, signal 177866/198733 (executing program)
2026/01/13 08:45:44 fetching corpus: 5150, signal 178303/198733 (executing program)
2026/01/13 08:45:45 fetching corpus: 5200, signal 179619/198738 (executing program)
2026/01/13 08:45:45 fetching corpus: 5250, signal 180003/198738 (executing program)
2026/01/13 08:45:45 fetching corpus: 5300, signal 180398/198742 (executing program)
2026/01/13 08:45:45 fetching corpus: 5350, signal 180765/198742 (executing program)
2026/01/13 08:45:45 fetching corpus: 5400, signal 181233/198745 (executing program)
2026/01/13 08:45:45 fetching corpus: 5450, signal 181793/198751 (executing program)
2026/01/13 08:45:45 fetching corpus: 5500, signal 182173/198751 (executing program)
2026/01/13 08:45:45 fetching corpus: 5550, signal 182478/198751 (executing program)
2026/01/13 08:45:45 fetching corpus: 5600, signal 183034/198755 (executing program)
2026/01/13 08:45:45 fetching corpus: 5650, signal 183799/198755 (executing program)
2026/01/13 08:45:46 fetching corpus: 5700, signal 184412/198755 (executing program)
2026/01/13 08:45:46 fetching corpus: 5750, signal 184832/198755 (executing program)
2026/01/13 08:45:46 fetching corpus: 5800, signal 185137/198755 (executing program)
2026/01/13 08:45:46 fetching corpus: 5850, signal 185508/198764 (executing program)
2026/01/13 08:45:46 fetching corpus: 5900, signal 185829/198778 (executing program)
2026/01/13 08:45:46 fetching corpus: 5950, signal 186215/198779 (executing program)
2026/01/13 08:45:46 fetching corpus: 6000, signal 186530/198779 (executing program)
2026/01/13 08:45:46 fetching corpus: 6050, signal 186944/198794 (executing program)
2026/01/13 08:45:46 fetching corpus: 6100, signal 187508/198795 (executing program)
2026/01/13 08:45:47 fetching corpus: 6150, signal 187772/198795 (executing program)
2026/01/13 08:45:47 fetching corpus: 6200, signal 188109/198797 (executing program)
2026/01/13 08:45:47 fetching corpus: 6250, signal 188455/198797 (executing program)
2026/01/13 08:45:47 fetching corpus: 6300, signal 188997/198797 (executing program)
2026/01/13 08:45:47 fetching corpus: 6350, signal 189672/198797 (executing program)
2026/01/13 08:45:47 fetching corpus: 6400, signal 189960/198797 (executing program)
2026/01/13 08:45:47 fetching corpus: 6450, signal 190246/198797 (executing program)
2026/01/13 08:45:47 fetching corpus: 6500, signal 190649/198798 (executing program)
2026/01/13 08:45:47 fetching corpus: 6550, signal 191041/198798 (executing program)
2026/01/13 08:45:48 fetching corpus: 6600, signal 191468/198798 (executing program)
2026/01/13 08:45:48 fetching corpus: 6650, signal 191884/198799 (executing program)
2026/01/13 08:45:48 fetching corpus: 6700, signal 192338/198799 (executing program)
2026/01/13 08:45:48 fetching corpus: 6750, signal 192724/198804 (executing program)
2026/01/13 08:45:48 fetching corpus: 6800, signal 193072/198811 (executing program)
2026/01/13 08:45:48 fetching corpus: 6850, signal 193506/198823 (executing program)
2026/01/13 08:45:48 fetching corpus: 6900, signal 193860/198823 (executing program)
2026/01/13 08:45:49 fetching corpus: 6950, signal 194243/198825 (executing program)
2026/01/13 08:45:49 fetching corpus: 7000, signal 194568/198830 (executing program)
2026/01/13 08:45:49 fetching corpus: 7050, signal 194929/198855 (executing program)
2026/01/13 08:45:49 fetching corpus: 7100, signal 195333/198860 (executing program)
2026/01/13 08:45:49 fetching corpus: 7150, signal 195578/198860 (executing program)
2026/01/13 08:45:49 fetching corpus: 7200, signal 195874/198869 (executing program)
2026/01/13 08:45:49 fetching corpus: 7250, signal 196188/198872 (executing program)
2026/01/13 08:45:49 fetching corpus: 7300, signal 196486/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7350, signal 196817/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7400, signal 197050/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7450, signal 197383/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7478, signal 197539/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7479, signal 197544/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7480, signal 197564/198873 (executing program)
2026/01/13 08:45:50 fetching corpus: 7480, signal 197564/198873 (executing program)
2026/01/13 08:45:52 starting 8 fuzzer processes
08:45:52 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00')
socketpair(0x1f, 0x0, 0x0, &(0x7f0000000180))

08:45:52 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

08:45:52 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')

08:45:52 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
clock_getres(0x0, 0x0)

08:45:52 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:45:52 executing program 3:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0)

08:45:52 executing program 7:
syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x0]}}]})

08:45:52 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getspdinfo={0x14, 0x27, 0x1, 0x0, 0x0, 0xdf020000}, 0x14}}, 0x0)

[   73.647764] audit: type=1400 audit(1768293952.451:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   74.807184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.810214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.813325] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.819844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.823406] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.878259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.886528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.890455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.900768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.910009] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.938509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.959265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.962703] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.972359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.979793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.002316] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.005554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   75.007031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.010435] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   75.012329] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   75.018617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.020491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.023071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.027369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.029245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.031602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.036919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   75.038160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   75.038831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   75.039947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   75.040789] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   75.044639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   75.045862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   75.047761] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   75.053322] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.054948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   75.057402] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   75.057779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.060085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   75.077466] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   76.842748] Bluetooth: hci0: command tx timeout
[   76.971395] Bluetooth: hci1: command tx timeout
[   77.033509] Bluetooth: hci2: command tx timeout
[   77.097189] Bluetooth: hci6: command tx timeout
[   77.097805] Bluetooth: hci4: command tx timeout
[   77.098481] Bluetooth: hci3: command tx timeout
[   77.099085] Bluetooth: hci5: command tx timeout
[   77.162038] Bluetooth: hci7: command tx timeout
[   78.889590] Bluetooth: hci0: command tx timeout
[   79.017294] Bluetooth: hci1: command tx timeout
[   79.081674] Bluetooth: hci2: command tx timeout
[   79.146134] Bluetooth: hci5: command tx timeout
[   79.146554] Bluetooth: hci4: command tx timeout
[   79.146927] Bluetooth: hci3: command tx timeout
[   79.147370] Bluetooth: hci6: command tx timeout
[   79.210128] Bluetooth: hci7: command tx timeout
[   80.937204] Bluetooth: hci0: command tx timeout
[   81.065258] Bluetooth: hci1: command tx timeout
[   81.129228] Bluetooth: hci2: command tx timeout
[   81.194169] Bluetooth: hci3: command tx timeout
[   81.194885] Bluetooth: hci6: command tx timeout
[   81.195652] Bluetooth: hci4: command tx timeout
[   81.196366] Bluetooth: hci5: command tx timeout
[   81.257666] Bluetooth: hci7: command tx timeout
[   82.986207] Bluetooth: hci0: command tx timeout
[   83.114142] Bluetooth: hci1: command tx timeout
[   83.178033] Bluetooth: hci2: command tx timeout
[   83.242137] Bluetooth: hci3: command tx timeout
[   83.242528] Bluetooth: hci6: command tx timeout
[   83.242902] Bluetooth: hci4: command tx timeout
[   83.243314] Bluetooth: hci5: command tx timeout
[   83.307220] Bluetooth: hci7: command tx timeout
[  108.282497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.293284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.582241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.582859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:27 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

08:46:28 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

[  109.221879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.223016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:28 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

08:46:28 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

08:46:28 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

[  109.495096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.495715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:28 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000200))
timer_create(0x2, 0x0, &(0x7f0000000180)=<r0=>0x0)
timer_delete(r0)

[  109.585717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.586390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:28 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

[  109.663235] audit: type=1400 audit(1768293988.467:8): avc:  denied  { open } for  pid=3865 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  109.664881] audit: type=1400 audit(1768293988.467:9): avc:  denied  { kernel } for  pid=3865 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  109.698771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.699357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:28 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

[  109.780231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.780812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.835409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.836024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.913144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.914362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.993404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.994060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.089633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.090704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.225646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.229474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.312565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.313948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.467718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.474406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.578333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.579385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.721771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.722888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
08:46:29 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00')
socketpair(0x1f, 0x0, 0x0, &(0x7f0000000180))

08:46:29 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:46:29 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')

08:46:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:46:29 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
clock_getres(0x0, 0x0)

08:46:29 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

08:46:29 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getspdinfo={0x14, 0x27, 0x1, 0x0, 0x0, 0xdf020000}, 0x14}}, 0x0)

08:46:29 executing program 7:
syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x0]}}]})

08:46:30 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00')
socketpair(0x1f, 0x0, 0x0, &(0x7f0000000180))

08:46:30 executing program 7:
syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x0]}}]})

08:46:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:46:30 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getspdinfo={0x14, 0x27, 0x1, 0x0, 0x0, 0xdf020000}, 0x14}}, 0x0)

08:46:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:46:30 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')

08:46:30 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
clock_getres(0x0, 0x0)

08:46:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

08:46:30 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
clock_getres(0x0, 0x0)

08:46:30 executing program 0:
syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00')
socketpair(0x1f, 0x0, 0x0, &(0x7f0000000180))

08:46:30 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$tmpfs(0x0, &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')

08:46:30 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:46:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
dup2(r2, r1)

08:46:30 executing program 6:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@getspdinfo={0x14, 0x27, 0x1, 0x0, 0x0, 0xdf020000}, 0x14}}, 0x0)

08:46:30 executing program 7:
syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x0]}}]})

08:46:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

[  111.674826] audit: type=1400 audit(1768293990.479:10): avc:  denied  { watch_reads } for  pid=3962 comm="syz-executor.5" path="/syzkaller-testdir854918572/syzkaller.9VAWAP/4" dev="sda" ino=15977 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
08:46:30 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000600)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

08:46:30 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

08:46:30 executing program 2:
prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0)

08:46:30 executing program 3:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
tee(r1, r0, 0x400, 0x0)

08:46:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

08:46:30 executing program 6:
inotify_init()

08:46:30 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000600)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

08:46:30 executing program 3:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
tee(r1, r0, 0x400, 0x0)

08:46:30 executing program 2:
prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0)

08:46:30 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

08:46:30 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80)

08:46:30 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000600)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

08:46:30 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa})

08:46:30 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$userns(0x0, &(0x7f00000012c0))

08:46:30 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 2:
prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0)

08:46:31 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

08:46:31 executing program 5:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd4000a8b)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x20000600)
creat(&(0x7f0000000180)='./file0\x00', 0x0)

08:46:31 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}]}]}]}, 0x34}}, 0x0)

08:46:31 executing program 4:
perf_event_open$cgroup(&(0x7f0000000a40)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)

08:46:31 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80)

08:46:31 executing program 3:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
tee(r1, r0, 0x400, 0x0)

08:46:31 executing program 2:
prctl$PR_SET_SECCOMP(0x35, 0x1, 0x0)

08:46:31 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80)

08:46:31 executing program 3:
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
tee(r1, r0, 0x400, 0x0)

08:46:31 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind(r0, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x2}}, 0x80)

08:46:31 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)

08:46:31 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}]}]}]}, 0x34}}, 0x0)

08:46:31 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:31 executing program 2:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xe2}, @l2cap_cid_signaling={{0xde}, [@l2cap_disconn_req={{0x6, 0x3, 0x4}, {0x3, 0xce15}}, @l2cap_disconn_rsp={{0x7, 0xe, 0x4}, {0x1, 0x7ff}}, @l2cap_info_rsp={{0xb, 0x28, 0x89}, {0x6, 0x7f, "f88c88e8975c6ad25afddaafe3a5ea30f513bed602dcb013b02ca0dd69ec89a77a550a39cfbd20dc0159ef6a7add798b5d2bae0a46038bdd865d22e28c625490fa222063f56b39cfef846f9ff232cd9e99e1f6450044bec4d11e7ebec8706bc413adde6e978235d987c1c5485b1c1660a15e969fe9a9b4e881cc72fe70bddafc8af970eb89"}}, @l2cap_conf_rsp={{0x5, 0x7, 0x3d}, {0x2, 0x0, 0xaf, [@l2cap_conf_mtu={0x1, 0x2, 0x8}, @l2cap_conf_flushto={0x2, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x1, 0x2, 0x9, 0x7, 0xd4d, 0x5}}, @l2cap_conf_efs={0x6, 0x10, {0x3, 0x1, 0x6, 0x7b4b1e8d, 0x5, 0x3}}, @l2cap_conf_efs={0x6, 0x10, {0x80, 0x1, 0x4767, 0x0, 0x5, 0x6}}]}}]}}, 0xe7)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0x41}, @l2cap_cid_signaling={{0x3d}, [@l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x5}}, @l2cap_conn_rsp={{0x3, 0x4, 0x8}, {0x0, 0x5, 0xfff, 0x200}}, @l2cap_create_chan_rsp={{0xd, 0x2f, 0x8}, {0x9, 0x9, 0xd36b, 0x4}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x8, 0x4a}}, @l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x0, 0xb7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x8001}}, @l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x1f, 0x7ff}}]}}, 0x46)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x3f, 0xc8, 0x20}}}, 0x7)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x3f, 0xc9, 0x6}}}, 0x6)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_conn_rsp={{0x18, 0x20, 0x10}, {0x5, 0xf88, 0x0, 0xc20, [0x20, 0x5, 0x0, 0x7]}}}}, 0x1d)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0x4e}, @l2cap_cid_signaling={{0x4a}, [@l2cap_move_chan_rsp={{0xf, 0xd9, 0x4}, {0x4, 0x6}}, @l2cap_info_rsp={{0xb, 0x40, 0x38}, {0x6, 0x1000, "826b14c6c1883e5a25f69002ff7121a47c0c6a70c443c6dc9ab97a98c68a1afc7894cdf98d39550786ff07c16c218f4b99dc43b8"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x6}}]}}, 0x53)
syz_emit_vhci(&(0x7f0000000300)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x62}, "a522bc2f53e6264fd06b69270b8f69971f12ce71b4f8eb7d8a75f8754afb6324a1c870ebff6211b55fb3b5a5db415ded499f5e537eb266deb1ed49cba58fb7bb999d15dde5e915824d99721baf8430cf0e9d51e9e126947055b6905344d628d211e0"}, 0x66)
syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x9, 0xc8, {0x4, 0x2, 0x3ff, 0x20, 0x2}}}}, 0x17)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x4}, "5ca6c7f4"}}, 0x7)

08:46:31 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x1000)

08:46:31 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}]}]}]}, 0x34}}, 0x0)

08:46:31 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000008040), 0x24, 0x0)
rmdir(&(0x7f0000000540)='./file0\x00')

08:46:31 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"2c50dfbcb4a79ed4871a488c"}}], 0x1c)

08:46:31 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0))

08:46:31 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000008040), 0x24, 0x0)
rmdir(&(0x7f0000000540)='./file0\x00')

08:46:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x24440, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)

08:46:31 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x1000)

08:46:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:31 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000013c0)='numa_maps\x00')
r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r2 = dup(r1)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0)
syz_io_uring_submit(r3, 0x0, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, 0x5827, 0x0)

08:46:31 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:31 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x1000)

08:46:31 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:31 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x24440, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)

08:46:31 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x18}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3d}]}]}]}, 0x34}}, 0x0)

08:46:31 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000008040), 0x24, 0x0)
rmdir(&(0x7f0000000540)='./file0\x00')

08:46:31 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0))

08:46:31 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
preadv(r0, 0x0, 0x0, 0x0, 0x0)

08:46:32 executing program 5:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:32 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x24440, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)

08:46:32 executing program 3:
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x1000)

08:46:32 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:32 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
preadv(r0, 0x0, 0x0, 0x0, 0x0)

08:46:32 executing program 7:
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000008040), 0x24, 0x0)
rmdir(&(0x7f0000000540)='./file0\x00')

[  113.358743] 
[  113.359081] =====================================
[  113.359768] WARNING: bad unlock balance detected!
[  113.360473] 6.19.0-rc5-next-20260113 #1 Not tainted
[  113.361192] -------------------------------------
[  113.361879] syz-executor.0/4080 is trying to release lock (rcu_read_lock) at:
[  113.364452] [<ffffffff81c20365>] __wait_on_freeing_inode+0x105/0x350
[  113.366295] but there are no more locks to release!
[  113.368247] 
[  113.368247] other info that might help us debug this:
[  113.371421] 4 locks held by syz-executor.0/4080:
[  113.372117]  #0: ffff88800f68a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  113.373377]  #1: ffff888044ac2a00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  113.374815]  #2: ffff88800f68e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  113.376114]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  113.377438] 
[  113.377438] stack backtrace:
[  113.378086] CPU: 1 UID: 0 PID: 4080 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  113.378112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  113.378124] Call Trace:
[  113.378131]  <TASK>
[  113.378139]  dump_stack_lvl+0xca/0x120
[  113.378182]  ? __wait_on_freeing_inode+0x105/0x350
[  113.378209]  print_unlock_imbalance_bug+0x118/0x130
[  113.378235]  ? __wait_on_freeing_inode+0x105/0x350
[  113.378262]  lock_release+0x1ee/0x270
[  113.378289]  __wait_on_freeing_inode+0x10a/0x350
[  113.378316]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  113.378345]  ? __pfx_var_wake_function+0x10/0x10
[  113.378377]  ? lock_is_held_type+0x9e/0x120
[  113.378398]  insert_inode_locked+0x25f/0x890
[  113.378430]  __ext4_new_inode+0x223d/0x4cd0
[  113.378460]  ? __pfx___ext4_new_inode+0x10/0x10
[  113.378486]  ? __pfx___dquot_initialize+0x10/0x10
[  113.378519]  ? __pfx_avc_has_perm+0x10/0x10
[  113.378548]  ext4_symlink+0x406/0xb40
[  113.378582]  ? __pfx_ext4_symlink+0x10/0x10
[  113.378611]  ? security_inode_permission+0x72/0xe0
[  113.378635]  vfs_symlink+0x44b/0x840
[  113.378665]  do_symlinkat+0x153/0x440
[  113.378690]  ? __pfx_do_symlinkat+0x10/0x10
[  113.378715]  ? strncpy_from_user+0x21b/0x2f0
[  113.378747]  __x64_sys_symlink+0x79/0xa0
[  113.378772]  do_syscall_64+0xbf/0x420
[  113.378795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.378817] RIP: 0033:0x7f49952be427
[  113.378833] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  113.378852] RSP: 002b:00007ffdcb85d698 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  113.378871] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49952be427
[  113.378885] RDX: 00007ffdcb85d773 RSI: 00007f4995319022 RDI: 00007ffdcb85d760
[  113.378898] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdcb85d530
[  113.378910] R10: 00007ffdcb85d3e7 R11: 0000000000000202 R12: 0000000000000001
[  113.378923] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdcb85d760
[  113.378941]  </TASK>
[  113.407173] ------------[ cut here ]------------
[  113.407849] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/4080
[  113.409406] Modules linked in:
[  113.409961] CPU: 1 UID: 0 PID: 4080 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) 
[  113.411441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  113.412627] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  113.413474] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9
[  113.416066] RSP: 0018:ffff88806cf08cb8 EFLAGS: 00010086
[  113.416836] RAX: 00000000ffffffff RBX: ffff888016e9b700 RCX: ffffffff81893b34
[  113.417889] RDX: 0000000000000000 RSI: ffffffff81893b4b RDI: ffff888016e9bafc
[  113.418917] RBP: ffff888016e9b700 R08: 0000000000000000 R09: 0000000000000000
[  113.419939] R10: 0000000000000000 R11: ffff88806cf08ff8 R12: ffff888016e9b700
[  113.420993] R13: 0000000000000001 R14: ffff88806cf379c0 R15: ffff88806cf37a20
[  113.422016] FS:  0000555572da2400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  113.423162] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  113.424016] CR2: 0000555572da2708 CR3: 0000000049edd000 CR4: 0000000000350ef0
[  113.425078] Call Trace:
[  113.425545]  <IRQ>
[  113.426704]  sched_tick+0x232/0x6e0
[  113.429075]  update_process_times+0x116/0x210
[  113.430883]  tick_nohz_handler+0x4ff/0x8c0
[  113.432490]  ? __pfx_tick_nohz_handler+0x10/0x10
[  113.433793]  ? lock_release+0x1c7/0x270
[  113.435325]  ? __pfx_tick_nohz_handler+0x10/0x10
[  113.436948]  __hrtimer_run_queues+0x654/0xbb0
[  113.440571]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  113.441414]  ? ktime_get_update_offsets_now+0x252/0x3c0
[  113.444603]  hrtimer_interrupt+0x369/0x830
[  113.448488]  __sysvec_apic_timer_interrupt+0xbb/0x300
[  113.449914]  sysvec_apic_timer_interrupt+0x6b/0x80
[  113.450980]  </IRQ>
[  113.451329]  <TASK>
[  113.452001]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  113.452943] RIP: 0010:__report_bug+0x2/0x5b0
[  113.453731] Code: 5a fd ff ff e8 7f 08 ef fc e9 53 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 <41> 56 41 55 41 54 49 89 f4 55 48 bd 00 00 00 00 00 fc ff df 53 48
[  113.456334] RSP: 0018:ffff888052137860 EFLAGS: 00000246
[  113.457102] RAX: 0000000000000000 RBX: 0000000000000004 RCX: ffffffff84c50526
[  113.458138] RDX: ffff8880521378f8 RSI: ffffffff815d780f RDI: 0000000000000000
[  113.459189] RBP: ffff8880521378f8 R08: 0000000000000000 R09: 0000000000000000
[  113.460246] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff815d780f
[  113.461291] R13: ffff8880521378f8 R14: 0000000000000002 R15: 000000000000000b
[  113.462816]  ? __rcu_read_unlock+0x25f/0x5c0
[  113.464738]  ? report_bug+0x66/0x120
[  113.465587]  ? __rcu_read_unlock+0x25f/0x5c0
[  113.467540]  report_bug+0x7c/0x120
[  113.468414]  ? __rcu_read_unlock+0x25f/0x5c0
[  113.469329]  handle_bug+0x2e8/0x4f0
[  113.470192]  ? trace_hardirqs_off_finish+0xe3/0x110
[  113.472023]  exc_invalid_op+0x35/0x80
[  113.473240]  asm_exc_invalid_op+0x1a/0x20
[  113.474020] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  113.474874] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9
[  113.477557] RSP: 0018:ffff8880521379a0 EFLAGS: 00010286
[  113.478323] RAX: 00000000ffffffff RBX: ffff888016e9b700 RCX: ffffffff815664c7
[  113.479363] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff888016e9bafc
[  113.480383] RBP: ffff888016e9b700 R08: 0000000000000000 R09: fffffbfff0ba6ff4
[  113.481394] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016e9b700
[  113.482417] R13: 0000000000000001 R14: ffffffff85c0f0e0 R15: ffff888044a558e0
[  113.485226]  ? nbcon_cpu_emergency_exit+0x117/0x1c0
[  113.486232]  ? nbcon_cpu_emergency_exit+0x120/0x1c0
[  113.488954]  __wait_on_freeing_inode+0x10f/0x350
[  113.490140]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  113.491996]  ? __pfx_var_wake_function+0x10/0x10
[  113.494107]  ? lock_is_held_type+0x9e/0x120
[  113.495981]  insert_inode_locked+0x25f/0x890
[  113.498757]  __ext4_new_inode+0x223d/0x4cd0
[  113.503013]  ? __pfx___ext4_new_inode+0x10/0x10
[  113.505121]  ? __pfx___dquot_initialize+0x10/0x10
[  113.506429]  ? __pfx_avc_has_perm+0x10/0x10
[  113.509459]  ext4_symlink+0x406/0xb40
[  113.513308]  ? __pfx_ext4_symlink+0x10/0x10
[  113.515034]  ? security_inode_permission+0x72/0xe0
[  113.517833]  vfs_symlink+0x44b/0x840
[  113.520030]  do_symlinkat+0x153/0x440
[  113.521904]  ? __pfx_do_symlinkat+0x10/0x10
[  113.523128]  ? strncpy_from_user+0x21b/0x2f0
[  113.526338]  __x64_sys_symlink+0x79/0xa0
[  113.527582]  do_syscall_64+0xbf/0x420
[  113.528967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.529868] RIP: 0033:0x7f49952be427
[  113.530515] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  113.533109] RSP: 002b:00007ffdcb85d698 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  113.534196] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49952be427
[  113.535208] RDX: 00007ffdcb85d773 RSI: 00007f4995319022 RDI: 00007ffdcb85d760
[  113.536231] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdcb85d530
[  113.537275] R10: 00007ffdcb85d3e7 R11: 0000000000000202 R12: 0000000000000001
[  113.538273] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdcb85d760
[  113.542718]  </TASK>
[  113.543069] irq event stamp: 599
[  113.543556] hardirqs last  enabled at (599): [<ffffffff84d14a2c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  113.545010] hardirqs last disabled at (598): [<ffffffff84d14783>] _raw_spin_lock_irqsave+0x53/0x60
[  113.546397] softirqs last  enabled at (594): [<ffffffff812cdb99>] kernel_fpu_end+0x59/0x70
[  113.547676] softirqs last disabled at (592): [<ffffffff812cea6b>] kernel_fpu_begin_mask+0x1bb/0x300
[  113.549136] ---[ end trace 0000000000000000 ]---
08:46:32 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0))

08:46:32 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
preadv(r0, 0x0, 0x0, 0x0, 0x0)

08:46:32 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x24440, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9)

08:46:32 executing program 6:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x1c)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)

08:46:32 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)

08:46:32 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

08:46:32 executing program 2:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSLCKTRMIOS(r0, 0x5411, &(0x7f00000002c0))

08:46:32 executing program 5:
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffc000/0x4000)=nil)

08:46:32 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
preadv(r0, 0x0, 0x0, 0x0, 0x0)

08:46:32 executing program 7:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)

08:46:32 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x7ffffffff000)

08:46:32 executing program 7:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)

08:46:32 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x7ffffffff000)

08:46:32 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

08:46:32 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0x0)

08:46:32 executing program 5:
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffc000/0x4000)=nil)

08:46:32 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000040)={0x24, r1, 0xcea008a6e34dc3c1, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

08:46:32 executing program 7:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)

08:46:32 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

08:46:32 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x7ffffffff000)

08:46:32 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1)

08:46:32 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0x0)

08:46:32 executing program 5:
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffc000/0x4000)=nil)

08:46:32 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)

08:46:32 executing program 7:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7)

08:46:32 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000040)={0x24, r1, 0xcea008a6e34dc3c1, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

08:46:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000040)={0x24, r1, 0xcea008a6e34dc3c1, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

08:46:33 executing program 5:
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffc000/0x4000)=nil)

08:46:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080), 0x7ffffffff000)

08:46:33 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "708329", 0x14, 0x2b, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

08:46:33 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0x0)

08:46:33 executing program 7:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read(r0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:46:33 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)

08:46:33 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1)

08:46:33 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b)

08:46:33 executing program 6:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000040)={0x24, r1, 0xcea008a6e34dc3c1, 0x0, 0x0, {{0x11}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0)

08:46:33 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x77, 0x465b})

[  114.436351] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.665404] Bluetooth: hci3: command 0x0406 tx timeout
08:46:34 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1)

08:46:34 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000140), 0x0)

08:46:34 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b)

08:46:34 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x77, 0x465b})

08:46:34 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x3, 0x23)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10)

08:46:34 executing program 7:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read(r0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:46:34 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300))

08:46:34 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0)
io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}])

[  115.280533] loop6: detected capacity change from 0 to 136
[  115.288674] ISOFS: Unable to identify CD-ROM format.
[  115.290438] loop6: detected capacity change from 0 to 136
[  115.291999] ISOFS: Unable to identify CD-ROM format.
08:46:34 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b)

08:46:34 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x77, 0x465b})

08:46:34 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300))

08:46:34 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKTRACESTART(r0, 0x1262, 0x0)

[  115.363482] loop6: detected capacity change from 0 to 136
[  115.369292] ISOFS: Unable to identify CD-ROM format.
08:46:34 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
migrate_pages(0x0, 0x0, 0x0, 0x0)

08:46:34 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1b)

08:46:34 executing program 7:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read(r0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:46:34 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
migrate_pages(0x0, 0x0, 0x0, 0x0)

08:46:34 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300))

08:46:34 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0x77, 0x465b})

08:46:34 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="0d8fbb9dc2850f669541b114ee023e286e456b5d46b3928107ff5dabb2205855628ec5c71c8f82ed775629e1e7ad5c9eebfa38f51b25c6", 0x37}], 0x1)

08:46:34 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0)
io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}])

08:46:34 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKTRACESTART(r0, 0x1262, 0x0)

[  116.219759] loop6: detected capacity change from 0 to 136
[  116.223010] ISOFS: Unable to identify CD-ROM format.
08:46:35 executing program 0:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x23, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383337383038363200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e883faa764e6453ab2efc3f3d55b247d010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500080000000000000000000000040000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000029000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010500)="ff3f0c00fc010000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x1080, 0x2000}, {&(0x7f0000011600)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x4000}, {&(0x7f0000011700)="00000000001000"/32, 0x20, 0x5000}, {&(0x7f0000011800)="00000000001000"/32, 0x20, 0x6000}, {&(0x7f0000011900)="00000000001000"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="504d4d00504d4dffe0f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x8000}, {&(0x7f0000011b00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x9000}, {&(0x7f0000011c00)="0200"/32, 0x20, 0x9400}, {&(0x7f0000011d00)="0300"/32, 0x20, 0x9800}, {&(0x7f0000011e00)="0400"/32, 0x20, 0x9c00}, {&(0x7f0000011f00)="0500"/32, 0x20, 0xa000}, {&(0x7f0000012000)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xa400}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xb000}, {&(0x7f0000012200)="0200"/32, 0x20, 0xb400}, {&(0x7f0000012300)="0300"/32, 0x20, 0xb800}, {&(0x7f0000012400)="0400"/32, 0x20, 0xbc00}, {&(0x7f0000012500)="0500"/32, 0x20, 0xc000}, {&(0x7f0000012600)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000d000"/96, 0x60, 0xc400}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0xd000}, {&(0x7f0000012800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/4192, 0x1060, 0x12000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x13fe0}, {&(0x7f0000013a00)="0000000000000000dff4655fdff4655fdff4655f00"/32, 0x20, 0x22000}, {&(0x7f0000013b00)="ed41000000100000dff4655fe0f4655fe0f4655f00000000000004000800000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x22080}, {&(0x7f0000013c00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af301000400000000000000000000000200000009000000", 0x40, 0x22100}, {&(0x7f0000013d00)="8081000000180000dff4655fdff4655fdff4655f00000000000001001000000010000800000000000af30100040000000000000000000000020000000b000000", 0x40, 0x22180}, {&(0x7f0000013e00)="c041000000400000dff4655fdff4655fdff4655f00000000000002002000000000000800000000000af301000400000000000000000000000400000004000000", 0x40, 0x22500}, {&(0x7f0000013f00)="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"/768, 0x300, 0x22580}, {&(0x7f0000014200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x23000}, {&(0x7f0000014700)='syzkallers\x00'/32, 0x20, 0x24000}, {&(0x7f0000014800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000014900))

08:46:35 executing program 6:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}], 0x0, &(0x7f0000011300))

[  116.266913] loop0: detected capacity change from 0 to 640
08:46:35 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
migrate_pages(0x0, 0x0, 0x0, 0x0)

[  116.286368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.287825] ext4 filesystem being mounted at /syzkaller-testdir690033473/syzkaller.BmPdOJ/21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
08:46:35 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0)
io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}])

08:46:35 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x7f})

08:46:35 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, 0x0)

[  116.323732] loop6: detected capacity change from 0 to 136
[  116.326964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
08:46:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_secret(0x0)
ftruncate(r0, 0x6)
finit_module(r0, 0x0, 0x0)

08:46:35 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKTRACESTART(r0, 0x1262, 0x0)

[  116.346182] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  116.364726] ISOFS: Unable to identify CD-ROM format.
08:46:35 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, 0x0)

08:46:35 executing program 7:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
read(r0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$sr(0xffffffffffffff9c, 0x0, 0x0, 0x0)

08:46:35 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, 0x0)

08:46:35 executing program 1:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140))
migrate_pages(0x0, 0x0, 0x0, 0x0)

08:46:35 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_secret(0x0)
ftruncate(r0, 0x6)
finit_module(r0, 0x0, 0x0)

08:46:35 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x7f})

08:46:35 executing program 4:
r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
ioctl$BLKTRACESTART(r0, 0x1262, 0x0)

08:46:35 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0xc2, &(0x7f0000000140)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote, {[@rr={0x7, 0xb, 0x0, [@empty, @loopback]}, @generic={0x0, 0xb, "c26b7ec526fef2d029"}, @end, @cipso={0x86, 0x66, 0x0, [{0x0, 0xc, "cf63c7228ec54f006365"}, {0x0, 0xc, "5faa14ef18e7604de58f"}, {0x0, 0xc, "c3e18d3d02b9945e99a9"}, {0x0, 0x9, "8768a82bc3fac0"}, {0x0, 0x5, "32b324"}, {0x0, 0xd, "197de571e8d2faae6210d8"}, {0x0, 0x10, "2fe92aed4f295c1ca7a38b31c502"}, {0x0, 0x8, "d39a07003f2e"}, {0x0, 0x9, "451bed18c2ed9d"}]}]}}}}}}}, 0x0)

08:46:35 executing program 3:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0xfff, &(0x7f0000000040)=<r1=>0x0)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwrite64(r2, &(0x7f00000000c0)="10", 0x1, 0x0)
io_submit(r1, 0x3, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f00000000c0)="d3", 0x1}])

[  117.107465] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
08:46:35 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
write(r0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)

08:46:35 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x7f})

08:46:35 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x17, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]})

08:46:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_secret(0x0)
ftruncate(r0, 0x6)
finit_module(r0, 0x0, 0x0)

08:46:36 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000140), 0x8)
setsockopt$bt_BT_VOICE(r0, 0x112, 0x7, 0x0, 0x0)

[  117.214989] audit: type=1326 audit(1768293996.019:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4256 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aabc6cb19 code=0x0
08:46:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0)

[  117.275531] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  117.294942] audit: type=1326 audit(1768293996.099:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4256 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f7aabc1f72b code=0x0
08:46:36 executing program 3:
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000000), 0x0)

08:46:36 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
write(r0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)

08:46:36 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x17, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]})

08:46:36 executing program 3:
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000000), 0x0)

08:46:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0)

08:46:36 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_secret(0x0)
ftruncate(r0, 0x6)
finit_module(r0, 0x0, 0x0)

08:46:36 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x7f})

08:46:36 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10)

08:46:36 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
write(r0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)

08:46:36 executing program 7:
r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040))

[  118.005690] audit: type=1326 audit(1768293996.810:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4275 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aabc6cb19 code=0x0
[  118.011917] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  118.023362] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  118.029224] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  118.038927] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
08:46:36 executing program 3:
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000000), 0x0)

[  118.053975] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  118.062250] audit: type=1326 audit(1768293996.860:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4275 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f7aabc1f72b code=0x0
08:46:36 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
write(r0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)

08:46:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0)

08:46:36 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x17, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]})

[  118.166603] audit: type=1326 audit(1768293996.968:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4297 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aabc6cb19 code=0x0
[  118.213838] audit: type=1326 audit(1768293997.018:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4297 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f7aabc1f72b code=0x0
08:46:36 executing program 3:
r0 = io_uring_setup(0x5053, &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0xa, &(0x7f0000000000), 0x0)

08:46:36 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10)

[  118.230296] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  118.235254] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
08:46:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)={0x14, 0x12, 0xffffffffffffffff, 0x0, 0x0, "", [@generic='\n']}, 0x14}], 0x1}, 0x0)

08:46:37 executing program 4:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x8, 0xffffffffffffffff, 0xffffffffffffffff)

08:46:37 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10)

08:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

08:46:37 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x17, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]})

08:46:37 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

08:46:37 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:46:37 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSKBSENT(r0, 0x4b49, 0x0)

[  118.299728] audit: type=1326 audit(1768293997.104:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4306 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aabc6cb19 code=0x0
[  118.310962] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  118.315126] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
08:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

[  118.351553] audit: type=1326 audit(1768293997.156:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4306 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f7aabc1f72b code=0x0
08:46:37 executing program 5:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001700)={r2, 0x1, 0x6, @multicast}, 0x10)

[  118.405977] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  118.415297] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
08:46:37 executing program 4:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x8, 0xffffffffffffffff, 0xffffffffffffffff)

08:46:37 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

08:46:37 executing program 7:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0105"], 0x1b2)
syz_emit_vhci(0x0, 0x0)

08:46:37 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

[  118.470748] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260
[  118.470784] Bluetooth: hci7: unexpected subevent 0x05 length: 430 > 12
[  118.472954] Bluetooth: hci7: unexpected event 0x3e length: 431 > 260
[  118.472977] Bluetooth: hci7: unexpected subevent 0x05 length: 430 > 12
08:46:37 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

08:46:37 executing program 4:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x8, 0xffffffffffffffff, 0xffffffffffffffff)

08:46:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

08:46:37 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:46:37 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x441, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}}}, 0xb8}}, 0x0)

08:46:37 executing program 4:
r0 = getpid()
r1 = getpid()
kcmp(r0, r1, 0x8, 0xffffffffffffffff, 0xffffffffffffffff)

08:46:37 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

08:46:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss, @sack_perm], 0x54)

08:46:37 executing program 0:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0x5)
setuid(r1)
chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

08:46:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x3, &(0x7f0000000380)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0)
io_submit(r0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)='\n', 0x1}])

08:46:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

08:46:37 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

08:46:37 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b3a, 0x0)

08:46:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

08:46:37 executing program 3:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

08:46:37 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x24, 0x3, 0x4})

08:46:37 executing program 7:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="d7084d7b712a283048b42c2dafd0fa45", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)

08:46:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss, @sack_perm], 0x54)

[  118.825017] blktrace: Concurrent blktraces are not allowed on sg0
08:46:37 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b3a, 0x0)

08:46:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)

08:46:37 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x24, 0x3, 0x4})

08:46:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0x1b}}, 0x14}}, 0x0)

08:46:37 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b3a, 0x0)

08:46:37 executing program 3:
r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0)
ftruncate(r0, 0x8800000)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1)

08:46:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
fork()
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
dup(0xffffffffffffffff)

08:46:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss, @sack_perm], 0x54)

[  119.037126] blktrace: Concurrent blktraces are not allowed on sg0
08:46:37 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff)

08:46:37 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x24, 0x3, 0x4})

08:46:37 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
modify_ldt$read(0x0, 0x0, 0x0)
fork()
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
dup(0xffffffffffffffff)

08:46:37 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b3a, 0x0)

08:46:37 executing program 3:
r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0)
ftruncate(r0, 0x8800000)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1)

08:46:37 executing program 6:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss, @sack_perm], 0x54)

[  119.163498] blktrace: Concurrent blktraces are not allowed on sg0
08:46:37 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff)

08:46:38 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32343530303330383600"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b138543112eb43ac9dbc7e1411f64d55010040000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000003400000000000000", 0x20, 0x560}, {&(0x7f0000010300)="03000000040000000500000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d7f4655fd8f4655fd8f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1480}, {&(0x7f0000010e00)="8081000000300404d7f4655fd7f4655fd7f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x1700}, {&(0x7f0000010f00)="c041000000300000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1900}, {&(0x7f0000011000)="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"/768, 0x300, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011400)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011600)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011700)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011800)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012000)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000012200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000012700)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x20000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x203e0}, {&(0x7f0000012a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000012b00))

08:46:38 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x24, 0x3, 0x4})

[  119.242296] loop1: detected capacity change from 0 to 1024
[  119.251399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.254124] blktrace: Concurrent blktraces are not allowed on sg0
08:46:38 executing program 3:
r0 = memfd_create(&(0x7f0000000280)='R^/\x00~\xf7\x15H\x83\x8fr\xcfh\xe3\xa3B\xd2\x8e\x95\xea\b\xa7\xe0\xe6\xac\xf2\x80[t\xc2\x0f\x11\x1eq\xb2\x05\xee\xcd6RA\x8165u \x93\xd1\xc1(\xcb\x03\xd0\xf4\x81\xf9/\xa14\xce\xd2\x89\x12\xc1\x85\x89(\xfa\xe7\xdc\x81\xbau\x1dj\xe4C\x14\xcc\x86\xf3\x12\x1b\x93\xf4\xf1e\a\v\x9c\x1b\x16z\xe3#\xea\x93\xc9U\xd3\x9a\xb6R\xcbz8\n\xdfp\x89\xe8T~\x82?\xe2\xf1\xe5\xb3\xe1C\xa8K\x8a`\xd4}cA\xa2=\x8a\xa4B\xc2X\xdc\x8d\xb9t\xd2\x97\xe5\xa2\x02G%\xc2r\x142\bZLj\x10N\x1ez\xe9M\xfc\xe6\xe4&?\x89fl\x19\x1b\x14\xe1\xcd\xca\xc0\xbd~\x99~\x13R<\xe6\xbd\xa1\x97\xf8\xb5\x00'/201, 0x0)
ftruncate(r0, 0x8800000)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1)

08:46:38 executing program 7:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff)

[  119.263752] ext4 filesystem being mounted at /syzkaller-testdir266224574/syzkaller.kuh7r1/25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.318543] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.489254] Bluetooth: hci7: command tx timeout
[  121.901000] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  121.902577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  121.904042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  121.907056] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  121.908924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  122.537205] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
08:46:32  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f687b50
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11001ed0f6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f687b88
RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558bb6c400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe6d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558bb75c58 CR3=000000000cf4f000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff8880521374a8
R8 =0000000000000000 R9 =ffffed1001561046 R10=000000000000006f R11=6e6920726568746f
R12=000000000000006f R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30
RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555572da2400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe5000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555572da2708 CR3=0000000049edd000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000