Warning: Permanently added '[localhost]:28066' (ECDSA) to the list of known hosts. 2025/08/29 12:49:31 fuzzer started 2025/08/29 12:49:31 dialing manager at localhost:43077 syzkaller login: [ 50.810505] cgroup: Unknown subsys name 'net' [ 50.891158] cgroup: Unknown subsys name 'cpuset' [ 50.920828] cgroup: Unknown subsys name 'rlimit' 2025/08/29 12:49:42 syscalls: 2214 2025/08/29 12:49:42 code coverage: enabled 2025/08/29 12:49:42 comparison tracing: enabled 2025/08/29 12:49:42 extra coverage: enabled 2025/08/29 12:49:42 setuid sandbox: enabled 2025/08/29 12:49:42 namespace sandbox: enabled 2025/08/29 12:49:42 Android sandbox: enabled 2025/08/29 12:49:42 fault injection: enabled 2025/08/29 12:49:42 leak checking: enabled 2025/08/29 12:49:42 net packet injection: enabled 2025/08/29 12:49:42 net device setup: enabled 2025/08/29 12:49:42 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/29 12:49:42 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/29 12:49:42 USB emulation: enabled 2025/08/29 12:49:42 hci packet injection: enabled 2025/08/29 12:49:42 wifi device emulation: enabled 2025/08/29 12:49:42 802.15.4 emulation: enabled 2025/08/29 12:49:42 fetching corpus: 0, signal 0/2000 (executing program) 2025/08/29 12:49:42 fetching corpus: 50, signal 21721/25312 (executing program) 2025/08/29 12:49:42 fetching corpus: 100, signal 34714/39716 (executing program) 2025/08/29 12:49:42 fetching corpus: 150, signal 39800/46243 (executing program) 2025/08/29 12:49:42 fetching corpus: 200, signal 49768/57297 (executing program) 2025/08/29 12:49:43 fetching corpus: 250, signal 53197/62033 (executing program) 2025/08/29 12:49:43 fetching corpus: 300, signal 57904/67878 (executing program) 2025/08/29 12:49:43 fetching corpus: 350, signal 61174/72280 (executing program) 2025/08/29 12:49:43 fetching corpus: 400, signal 63960/76188 (executing program) 2025/08/29 12:49:43 fetching corpus: 450, signal 66151/79524 (executing program) 2025/08/29 12:49:43 fetching corpus: 500, signal 70330/84528 (executing program) 2025/08/29 12:49:43 fetching corpus: 550, signal 72875/88014 (executing program) 2025/08/29 12:49:43 fetching corpus: 600, signal 74815/90977 (executing program) 2025/08/29 12:49:43 fetching corpus: 650, signal 77032/94118 (executing program) 2025/08/29 12:49:43 fetching corpus: 700, signal 78977/96955 (executing program) 2025/08/29 12:49:43 fetching corpus: 750, signal 81731/100464 (executing program) 2025/08/29 12:49:44 fetching corpus: 800, signal 84344/103774 (executing program) 2025/08/29 12:49:44 fetching corpus: 850, signal 86436/106639 (executing program) 2025/08/29 12:49:44 fetching corpus: 900, signal 88825/109682 (executing program) 2025/08/29 12:49:44 fetching corpus: 950, signal 90244/111937 (executing program) 2025/08/29 12:49:44 fetching corpus: 1000, signal 91794/114231 (executing program) 2025/08/29 12:49:44 fetching corpus: 1050, signal 93581/116695 (executing program) 2025/08/29 12:49:44 fetching corpus: 1100, signal 95406/119155 (executing program) 2025/08/29 12:49:44 fetching corpus: 1150, signal 97386/121736 (executing program) 2025/08/29 12:49:44 fetching corpus: 1200, signal 99021/124005 (executing program) 2025/08/29 12:49:44 fetching corpus: 1250, signal 100321/125998 (executing program) 2025/08/29 12:49:45 fetching corpus: 1300, signal 102023/128201 (executing program) 2025/08/29 12:49:45 fetching corpus: 1350, signal 102921/129838 (executing program) 2025/08/29 12:49:45 fetching corpus: 1400, signal 104778/132115 (executing program) 2025/08/29 12:49:45 fetching corpus: 1450, signal 107253/134921 (executing program) 2025/08/29 12:49:45 fetching corpus: 1500, signal 108671/136805 (executing program) 2025/08/29 12:49:45 fetching corpus: 1550, signal 109958/138602 (executing program) 2025/08/29 12:49:45 fetching corpus: 1600, signal 111568/140549 (executing program) 2025/08/29 12:49:45 fetching corpus: 1650, signal 112455/142036 (executing program) 2025/08/29 12:49:45 fetching corpus: 1700, signal 113452/143579 (executing program) 2025/08/29 12:49:45 fetching corpus: 1750, signal 114779/145271 (executing program) 2025/08/29 12:49:46 fetching corpus: 1800, signal 116231/147055 (executing program) 2025/08/29 12:49:46 fetching corpus: 1850, signal 117174/148448 (executing program) 2025/08/29 12:49:46 fetching corpus: 1900, signal 117852/149615 (executing program) 2025/08/29 12:49:46 fetching corpus: 1950, signal 119069/151110 (executing program) 2025/08/29 12:49:46 fetching corpus: 2000, signal 120158/152549 (executing program) 2025/08/29 12:49:46 fetching corpus: 2050, signal 120902/153746 (executing program) 2025/08/29 12:49:46 fetching corpus: 2100, signal 121705/155076 (executing program) 2025/08/29 12:49:46 fetching corpus: 2150, signal 123039/156606 (executing program) 2025/08/29 12:49:47 fetching corpus: 2200, signal 124149/158051 (executing program) 2025/08/29 12:49:47 fetching corpus: 2250, signal 125408/159472 (executing program) 2025/08/29 12:49:47 fetching corpus: 2300, signal 126081/160511 (executing program) 2025/08/29 12:49:47 fetching corpus: 2350, signal 127273/161914 (executing program) 2025/08/29 12:49:47 fetching corpus: 2400, signal 128294/163156 (executing program) 2025/08/29 12:49:47 fetching corpus: 2450, signal 129068/164271 (executing program) 2025/08/29 12:49:47 fetching corpus: 2500, signal 130219/165556 (executing program) 2025/08/29 12:49:47 fetching corpus: 2550, signal 130930/166614 (executing program) 2025/08/29 12:49:47 fetching corpus: 2600, signal 131541/167566 (executing program) 2025/08/29 12:49:47 fetching corpus: 2650, signal 132543/168674 (executing program) 2025/08/29 12:49:48 fetching corpus: 2700, signal 133699/169823 (executing program) 2025/08/29 12:49:48 fetching corpus: 2750, signal 134498/170823 (executing program) 2025/08/29 12:49:48 fetching corpus: 2800, signal 135074/171791 (executing program) 2025/08/29 12:49:48 fetching corpus: 2850, signal 135931/172845 (executing program) 2025/08/29 12:49:48 fetching corpus: 2900, signal 136515/173770 (executing program) 2025/08/29 12:49:48 fetching corpus: 2950, signal 137075/174662 (executing program) 2025/08/29 12:49:48 fetching corpus: 3000, signal 137702/175598 (executing program) 2025/08/29 12:49:48 fetching corpus: 3050, signal 138323/176496 (executing program) 2025/08/29 12:49:48 fetching corpus: 3100, signal 139334/177544 (executing program) 2025/08/29 12:49:48 fetching corpus: 3150, signal 139939/178344 (executing program) 2025/08/29 12:49:48 fetching corpus: 3200, signal 140579/179150 (executing program) 2025/08/29 12:49:48 fetching corpus: 3250, signal 141331/179943 (executing program) 2025/08/29 12:49:49 fetching corpus: 3300, signal 141910/180670 (executing program) 2025/08/29 12:49:49 fetching corpus: 3350, signal 142607/181507 (executing program) 2025/08/29 12:49:49 fetching corpus: 3400, signal 143009/182247 (executing program) 2025/08/29 12:49:49 fetching corpus: 3450, signal 143617/183058 (executing program) 2025/08/29 12:49:49 fetching corpus: 3500, signal 144461/183847 (executing program) 2025/08/29 12:49:49 fetching corpus: 3550, signal 145017/184543 (executing program) 2025/08/29 12:49:49 fetching corpus: 3600, signal 145775/185274 (executing program) 2025/08/29 12:49:49 fetching corpus: 3650, signal 146857/186075 (executing program) 2025/08/29 12:49:49 fetching corpus: 3700, signal 147624/186794 (executing program) 2025/08/29 12:49:49 fetching corpus: 3750, signal 148719/187619 (executing program) 2025/08/29 12:49:49 fetching corpus: 3800, signal 149699/188316 (executing program) 2025/08/29 12:49:50 fetching corpus: 3850, signal 150138/188890 (executing program) 2025/08/29 12:49:50 fetching corpus: 3900, signal 150454/189469 (executing program) 2025/08/29 12:49:50 fetching corpus: 3950, signal 150766/190016 (executing program) 2025/08/29 12:49:50 fetching corpus: 4000, signal 151439/190627 (executing program) 2025/08/29 12:49:50 fetching corpus: 4050, signal 152064/191240 (executing program) 2025/08/29 12:49:50 fetching corpus: 4100, signal 152389/191779 (executing program) 2025/08/29 12:49:50 fetching corpus: 4150, signal 152806/192342 (executing program) 2025/08/29 12:49:50 fetching corpus: 4200, signal 153101/192880 (executing program) 2025/08/29 12:49:50 fetching corpus: 4250, signal 153810/193435 (executing program) 2025/08/29 12:49:50 fetching corpus: 4300, signal 156040/194114 (executing program) 2025/08/29 12:49:50 fetching corpus: 4350, signal 156601/194638 (executing program) 2025/08/29 12:49:50 fetching corpus: 4400, signal 156990/195099 (executing program) 2025/08/29 12:49:51 fetching corpus: 4450, signal 157898/195600 (executing program) 2025/08/29 12:49:51 fetching corpus: 4500, signal 158377/196042 (executing program) 2025/08/29 12:49:51 fetching corpus: 4550, signal 158847/196461 (executing program) 2025/08/29 12:49:51 fetching corpus: 4600, signal 159438/196895 (executing program) 2025/08/29 12:49:51 fetching corpus: 4650, signal 159829/197298 (executing program) 2025/08/29 12:49:51 fetching corpus: 4700, signal 160258/197725 (executing program) 2025/08/29 12:49:51 fetching corpus: 4750, signal 160949/198220 (executing program) 2025/08/29 12:49:51 fetching corpus: 4800, signal 161458/198508 (executing program) 2025/08/29 12:49:51 fetching corpus: 4850, signal 161898/198510 (executing program) 2025/08/29 12:49:51 fetching corpus: 4900, signal 162284/198586 (executing program) 2025/08/29 12:49:51 fetching corpus: 4950, signal 162584/198596 (executing program) 2025/08/29 12:49:51 fetching corpus: 5000, signal 162975/198614 (executing program) 2025/08/29 12:49:52 fetching corpus: 5050, signal 163479/198634 (executing program) 2025/08/29 12:49:52 fetching corpus: 5100, signal 163748/198639 (executing program) 2025/08/29 12:49:52 fetching corpus: 5150, signal 164073/198652 (executing program) 2025/08/29 12:49:52 fetching corpus: 5200, signal 164551/198668 (executing program) 2025/08/29 12:49:52 fetching corpus: 5250, signal 164883/198688 (executing program) 2025/08/29 12:49:52 fetching corpus: 5300, signal 165155/198700 (executing program) 2025/08/29 12:49:52 fetching corpus: 5350, signal 165544/198710 (executing program) 2025/08/29 12:49:52 fetching corpus: 5400, signal 165854/198729 (executing program) 2025/08/29 12:49:52 fetching corpus: 5450, signal 166391/198739 (executing program) 2025/08/29 12:49:52 fetching corpus: 5500, signal 166770/198759 (executing program) 2025/08/29 12:49:52 fetching corpus: 5550, signal 167263/198780 (executing program) 2025/08/29 12:49:52 fetching corpus: 5600, signal 167659/198783 (executing program) 2025/08/29 12:49:52 fetching corpus: 5650, signal 168049/198802 (executing program) 2025/08/29 12:49:53 fetching corpus: 5700, signal 168761/198816 (executing program) 2025/08/29 12:49:53 fetching corpus: 5750, signal 169097/198825 (executing program) 2025/08/29 12:49:53 fetching corpus: 5800, signal 169355/198828 (executing program) 2025/08/29 12:49:53 fetching corpus: 5850, signal 169735/198834 (executing program) 2025/08/29 12:49:53 fetching corpus: 5900, signal 170167/198840 (executing program) 2025/08/29 12:49:53 fetching corpus: 5950, signal 170570/198843 (executing program) 2025/08/29 12:49:53 fetching corpus: 6000, signal 170923/198844 (executing program) 2025/08/29 12:49:53 fetching corpus: 6050, signal 171250/198868 (executing program) 2025/08/29 12:49:53 fetching corpus: 6100, signal 171550/198889 (executing program) 2025/08/29 12:49:53 fetching corpus: 6150, signal 172044/198997 (executing program) 2025/08/29 12:49:53 fetching corpus: 6200, signal 172545/198998 (executing program) 2025/08/29 12:49:53 fetching corpus: 6250, signal 172908/199012 (executing program) 2025/08/29 12:49:53 fetching corpus: 6300, signal 173328/199133 (executing program) 2025/08/29 12:49:53 fetching corpus: 6350, signal 174088/199133 (executing program) 2025/08/29 12:49:54 fetching corpus: 6400, signal 174484/199141 (executing program) 2025/08/29 12:49:54 fetching corpus: 6450, signal 174744/199144 (executing program) 2025/08/29 12:49:54 fetching corpus: 6500, signal 175166/199187 (executing program) 2025/08/29 12:49:54 fetching corpus: 6550, signal 175701/199206 (executing program) 2025/08/29 12:49:54 fetching corpus: 6600, signal 176056/199214 (executing program) 2025/08/29 12:49:54 fetching corpus: 6650, signal 176396/199261 (executing program) 2025/08/29 12:49:54 fetching corpus: 6700, signal 176828/199273 (executing program) 2025/08/29 12:49:54 fetching corpus: 6750, signal 177155/199283 (executing program) 2025/08/29 12:49:54 fetching corpus: 6800, signal 177477/199284 (executing program) 2025/08/29 12:49:54 fetching corpus: 6850, signal 177771/199284 (executing program) 2025/08/29 12:49:54 fetching corpus: 6900, signal 178103/199293 (executing program) 2025/08/29 12:49:55 fetching corpus: 6950, signal 178565/199301 (executing program) 2025/08/29 12:49:55 fetching corpus: 7000, signal 179005/199397 (executing program) 2025/08/29 12:49:55 fetching corpus: 7050, signal 179335/199414 (executing program) 2025/08/29 12:49:55 fetching corpus: 7100, signal 179666/199419 (executing program) 2025/08/29 12:49:55 fetching corpus: 7150, signal 180111/199436 (executing program) 2025/08/29 12:49:55 fetching corpus: 7200, signal 180397/199438 (executing program) 2025/08/29 12:49:55 fetching corpus: 7250, signal 180740/199471 (executing program) 2025/08/29 12:49:55 fetching corpus: 7300, signal 181132/199516 (executing program) 2025/08/29 12:49:55 fetching corpus: 7350, signal 181612/199518 (executing program) 2025/08/29 12:49:55 fetching corpus: 7400, signal 181928/199525 (executing program) 2025/08/29 12:49:55 fetching corpus: 7450, signal 182158/199544 (executing program) 2025/08/29 12:49:56 fetching corpus: 7500, signal 182364/199552 (executing program) 2025/08/29 12:49:56 fetching corpus: 7550, signal 182595/199572 (executing program) 2025/08/29 12:49:56 fetching corpus: 7600, signal 182981/199575 (executing program) 2025/08/29 12:49:56 fetching corpus: 7650, signal 183294/199581 (executing program) 2025/08/29 12:49:56 fetching corpus: 7700, signal 183514/199584 (executing program) 2025/08/29 12:49:56 fetching corpus: 7750, signal 183777/199588 (executing program) 2025/08/29 12:49:56 fetching corpus: 7800, signal 184147/199598 (executing program) 2025/08/29 12:49:56 fetching corpus: 7850, signal 184481/199633 (executing program) 2025/08/29 12:49:56 fetching corpus: 7900, signal 184720/199634 (executing program) 2025/08/29 12:49:56 fetching corpus: 7950, signal 185057/199635 (executing program) 2025/08/29 12:49:56 fetching corpus: 8000, signal 185352/199647 (executing program) 2025/08/29 12:49:57 fetching corpus: 8050, signal 185688/199651 (executing program) 2025/08/29 12:49:57 fetching corpus: 8100, signal 185981/199653 (executing program) 2025/08/29 12:49:57 fetching corpus: 8150, signal 186190/199660 (executing program) 2025/08/29 12:49:57 fetching corpus: 8200, signal 186506/199668 (executing program) 2025/08/29 12:49:57 fetching corpus: 8250, signal 186711/199722 (executing program) 2025/08/29 12:49:57 fetching corpus: 8300, signal 186914/199728 (executing program) 2025/08/29 12:49:57 fetching corpus: 8350, signal 187237/199730 (executing program) 2025/08/29 12:49:57 fetching corpus: 8400, signal 187390/199730 (executing program) 2025/08/29 12:49:57 fetching corpus: 8450, signal 187754/199750 (executing program) 2025/08/29 12:49:57 fetching corpus: 8500, signal 188096/199783 (executing program) 2025/08/29 12:49:57 fetching corpus: 8550, signal 188415/199788 (executing program) 2025/08/29 12:49:58 fetching corpus: 8600, signal 188669/199792 (executing program) 2025/08/29 12:49:58 fetching corpus: 8650, signal 188905/199793 (executing program) 2025/08/29 12:49:58 fetching corpus: 8700, signal 189127/199808 (executing program) 2025/08/29 12:49:58 fetching corpus: 8750, signal 189337/199821 (executing program) 2025/08/29 12:49:58 fetching corpus: 8800, signal 189804/199826 (executing program) 2025/08/29 12:49:58 fetching corpus: 8850, signal 190218/199826 (executing program) 2025/08/29 12:49:58 fetching corpus: 8900, signal 190449/199830 (executing program) 2025/08/29 12:49:58 fetching corpus: 8950, signal 190736/199832 (executing program) 2025/08/29 12:49:58 fetching corpus: 9000, signal 191110/199836 (executing program) 2025/08/29 12:49:58 fetching corpus: 9050, signal 191316/199842 (executing program) 2025/08/29 12:49:58 fetching corpus: 9100, signal 191695/199852 (executing program) 2025/08/29 12:49:58 fetching corpus: 9150, signal 191940/199860 (executing program) 2025/08/29 12:49:59 fetching corpus: 9200, signal 192137/199870 (executing program) 2025/08/29 12:49:59 fetching corpus: 9250, signal 192472/199888 (executing program) 2025/08/29 12:49:59 fetching corpus: 9300, signal 192804/199907 (executing program) 2025/08/29 12:49:59 fetching corpus: 9350, signal 193089/199908 (executing program) 2025/08/29 12:49:59 fetching corpus: 9400, signal 193351/199908 (executing program) 2025/08/29 12:49:59 fetching corpus: 9450, signal 193599/199911 (executing program) 2025/08/29 12:49:59 fetching corpus: 9500, signal 193798/199915 (executing program) 2025/08/29 12:49:59 fetching corpus: 9550, signal 193972/199916 (executing program) 2025/08/29 12:49:59 fetching corpus: 9600, signal 194176/199919 (executing program) 2025/08/29 12:49:59 fetching corpus: 9650, signal 194460/199919 (executing program) 2025/08/29 12:49:59 fetching corpus: 9700, signal 194669/199923 (executing program) 2025/08/29 12:50:00 fetching corpus: 9750, signal 195016/199932 (executing program) 2025/08/29 12:50:00 fetching corpus: 9800, signal 195193/199936 (executing program) 2025/08/29 12:50:00 fetching corpus: 9850, signal 195369/199955 (executing program) 2025/08/29 12:50:00 fetching corpus: 9900, signal 195588/199964 (executing program) 2025/08/29 12:50:00 fetching corpus: 9950, signal 195869/199970 (executing program) 2025/08/29 12:50:00 fetching corpus: 9979, signal 195978/199976 (executing program) 2025/08/29 12:50:00 fetching corpus: 9979, signal 195978/199976 (executing program) 2025/08/29 12:50:02 starting 8 fuzzer processes 12:50:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x18, 0x0, &(0x7f0000000240)) 12:50:02 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:50:02 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000001540)={'#! ', './file0'}, 0xb) 12:50:02 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/memory_tiering', 0x80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:50:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x44, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}]}, 0x44}}, 0x0) 12:50:02 executing program 5: io_setup(0x2, &(0x7f0000000080)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) [ 81.578692] audit: type=1400 audit(1756471802.682:7): avc: denied { execmem } for pid=276 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:50:02 executing program 6: iopl(0x19) [ 82.768150] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.770198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.774941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.779444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.782752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.827950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.831753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.834710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.837651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.840649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.843719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.854187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.856680] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.870032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.879711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.880948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.886148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.888144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.889796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 82.891616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.893236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.896695] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.900609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 82.901926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.907652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 82.922051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 82.928793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.934675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 82.939693] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 82.946068] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 82.954730] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 82.956844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 82.958902] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.961013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.968168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 82.969471] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 82.975525] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 82.977504] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 82.983230] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 82.986133] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.797878] Bluetooth: hci0: command tx timeout [ 84.861584] Bluetooth: hci1: command tx timeout [ 84.925340] Bluetooth: hci2: command tx timeout [ 85.053482] Bluetooth: hci6: command tx timeout [ 85.053857] Bluetooth: hci7: command tx timeout [ 85.054540] Bluetooth: hci5: command tx timeout [ 85.055162] Bluetooth: hci4: command tx timeout [ 85.055849] Bluetooth: hci3: command tx timeout [ 86.846242] Bluetooth: hci0: command tx timeout [ 86.909484] Bluetooth: hci1: command tx timeout [ 86.973386] Bluetooth: hci2: command tx timeout [ 87.101365] Bluetooth: hci3: command tx timeout [ 87.101803] Bluetooth: hci5: command tx timeout [ 87.102757] Bluetooth: hci4: command tx timeout [ 87.103151] Bluetooth: hci7: command tx timeout [ 87.103568] Bluetooth: hci6: command tx timeout [ 88.893362] Bluetooth: hci0: command tx timeout [ 88.957976] Bluetooth: hci1: command tx timeout [ 89.021319] Bluetooth: hci2: command tx timeout [ 89.149574] Bluetooth: hci6: command tx timeout [ 89.150027] Bluetooth: hci7: command tx timeout [ 89.150587] Bluetooth: hci4: command tx timeout [ 89.150963] Bluetooth: hci3: command tx timeout [ 89.151444] Bluetooth: hci5: command tx timeout [ 90.941348] Bluetooth: hci0: command tx timeout [ 91.005325] Bluetooth: hci1: command tx timeout [ 91.071276] Bluetooth: hci2: command tx timeout [ 91.197320] Bluetooth: hci3: command tx timeout [ 91.197632] Bluetooth: hci5: command tx timeout [ 91.197751] Bluetooth: hci4: command tx timeout [ 91.198178] Bluetooth: hci7: command tx timeout [ 91.198552] Bluetooth: hci6: command tx timeout [ 120.404371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.405040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.644372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.645777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:50:42 executing program 4: r0 = syz_io_uring_setup(0xfffffffd, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) close(r0) 12:50:42 executing program 4: r0 = syz_io_uring_setup(0xfffffffd, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) close(r0) 12:50:42 executing program 4: r0 = syz_io_uring_setup(0xfffffffd, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) close(r0) [ 121.682770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.684469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.725644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.726328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:50:42 executing program 4: r0 = syz_io_uring_setup(0xfffffffd, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) close(r0) [ 121.827567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.828177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:50:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x9, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 122.136600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.137239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:50:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x9, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) 12:50:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x9, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 122.301842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.302685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.438618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.439244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:50:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x9, {0x0, @tcp_ip4_spec={@rand_addr, @private}, @esp_ip4_spec={@multicast1, @local}}}}) [ 122.666483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.667115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.775714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.776369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.997944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.998602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.058169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.059005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.287827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.288605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.356110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.357051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.542770] audit: type=1400 audit(1756471844.645:8): avc: denied { open } for pid=3901 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.546537] audit: type=1400 audit(1756471844.646:9): avc: denied { kernel } for pid=3901 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 123.855301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.855910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.876231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.876938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:50:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:45 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000a40), 0x8) 12:50:45 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/memory_tiering', 0x80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:50:45 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x48, &(0x7f0000000100)="c4952cdf", 0x4) 12:50:45 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/devices\x00', 0x0, 0x0) dup2(r0, r1) 12:50:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) 12:50:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{0xfffffffffffffffc}], 0x1}}], 0x2, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 12:50:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:45 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="01000000000005004000", 0xa, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000dcf4655fdcf4655fdcf4655f00000000000002", 0x1b, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000013b00)) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)) 12:50:45 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:45 executing program 0: clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/181, 0xb5, 0x0, 0x0}, 0x58) 12:50:45 executing program 2: perf_event_open(&(0x7f0000000340)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000004b19}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:50:45 executing program 6: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x15, 0x0, 0x0) 12:50:45 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/memory_tiering', 0x80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:50:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) [ 124.181044] loop5: detected capacity change from 0 to 2048 [ 124.218732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:50:45 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) [ 124.235424] ext4 filesystem being mounted at /syzkaller-testdir195459803/syzkaller.UoV40s/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) 12:50:45 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) 12:50:45 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_trace', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:45 executing program 6: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x15, 0x0, 0x0) 12:50:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) 12:50:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 124.390621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:50:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:50:45 executing program 3: ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/memory_tiering', 0x80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 12:50:45 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x6801, 0xffffffffffffffff) 12:50:45 executing program 6: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x15, 0x0, 0x0) 12:50:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) 12:50:45 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) 12:50:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 12:50:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x5452, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:50:45 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x6801, 0xffffffffffffffff) 12:50:45 executing program 6: r0 = io_uring_setup(0x1ff, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x15, 0x0, 0x0) 12:50:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:50:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 12:50:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:50:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 12:50:45 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) close_range(r0, r1, 0x0) 12:50:45 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:50:45 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x6801, 0xffffffffffffffff) 12:50:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x5452, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:50:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:50:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r0, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)=[@txtime={{0x18}}], 0x18}, 0x0) 12:50:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24040841, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006200)={0x0, 0x989680}) 12:50:45 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x12, r0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 12:50:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) [ 124.838003] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 124.838879] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 124.839561] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 124.840096] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 06 00 [ 124.840817] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 124.843780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.844418] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.845280] Buffer I/O error on dev sr0, logical block 0, async page read [ 124.853900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.854544] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.855317] Buffer I/O error on dev sr0, logical block 1, async page read 12:50:45 executing program 3: creat(&(0x7f0000000080)='./file0\x00', 0x0) quotactl(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 12:50:45 executing program 7: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x6801, 0xffffffffffffffff) [ 124.866134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.866786] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:50:45 executing program 5: clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) [ 124.867544] Buffer I/O error on dev sr0, logical block 2, async page read [ 124.888901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.889586] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.890459] Buffer I/O error on dev sr0, logical block 3, async page read [ 124.901548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.902017] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.902803] Buffer I/O error on dev sr0, logical block 4, async page read 12:50:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) 12:50:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x5452, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 124.918119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.918753] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.919501] Buffer I/O error on dev sr0, logical block 5, async page read 12:50:46 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000004c0)={0x18, r1, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 124.939437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.939898] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.940574] Buffer I/O error on dev sr0, logical block 6, async page read [ 124.951653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 124.952097] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.952740] Buffer I/O error on dev sr0, logical block 7, async page read 12:50:46 executing program 7: io_cancel(0x0, 0xfffffffffffffffd, 0x0) 12:50:46 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) 12:50:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x5452, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 12:50:46 executing program 5: clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 12:50:46 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5, 0x3, "ae"}]}]}, 0x2c}}, 0x0) 12:50:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@updsa={0x13c, 0x16, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@remote}, {@in6=@private2, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256-generic\x00'}}}]}, 0x13c}}, 0x0) 12:50:46 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x8916, &(0x7f0000001f40)={0x0, @can, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, @nfc}) 12:50:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) 12:50:46 executing program 5: clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 12:50:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1a000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002100000004001f"], 0x38}}, 0x0) 12:50:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2271, &(0x7f0000000000)) [ 125.626525] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 12:50:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 12:50:46 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000002a40)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@local, @multicast2]}]}}}], 0x20}}], 0x1, 0x0) 12:50:46 executing program 1: syz_io_uring_setup(0x0, 0xfffffffffffffffe, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) 12:50:46 executing program 5: clock_nanosleep(0x1, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 12:50:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3) 12:50:46 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0xa0840, 0x0) ioctl$CDROM_SET_OPTIONS(r0, 0x5320, 0x8) 12:50:46 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r2, 0x0, r0, 0x0, 0x801, 0x0) 12:50:47 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 2: set_mempolicy(0x6, &(0x7f0000000040)=0x7, 0x5db) pipe(&(0x7f0000000440)={0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x276fed8e) 12:50:47 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r0}}}], 0x28}}], 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}], 0x28}}], 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(r4, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r6}}}], 0x28}}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe0}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20001805}, 0x40800) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 12:50:47 executing program 5: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 12:50:47 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x66) 12:50:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5, 0x3, "ae"}]}]}, 0x2c}}, 0x0) 12:50:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000002a40)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@local, @multicast2]}]}}}], 0x20}}], 0x1, 0x0) [ 126.280137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 12:50:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000002a40)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@local, @multicast2]}]}}}], 0x20}}], 0x1, 0x0) 12:50:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5, 0x3, "ae"}]}]}, 0x2c}}, 0x0) 12:50:47 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x66) 12:50:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000058c0)=[{{&(0x7f0000002a40)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003d80)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x4, [@local, @multicast2]}]}}}], 0x20}}], 0x1, 0x0) 12:50:47 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x66) 12:50:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x0, 0x6}) 12:50:47 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x66) 12:50:47 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:47 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 12:50:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x2c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5, 0x3, "ae"}]}]}, 0x2c}}, 0x0) 12:50:48 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:48 executing program 1: creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1000, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='.\x00', 0x0, 0x1002000, 0x0) 12:50:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 12:50:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') pread64(r1, &(0x7f0000000040)=""/169, 0xa9, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = fork() ptrace(0x10, r2) wait4(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)) r3 = fork() ptrace(0x10, r3) kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sched_getaffinity(r2, 0x8, &(0x7f0000000180)) wait4(r0, 0x0, 0x0, 0x0) 12:50:48 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x0) semget(0x1, 0x0, 0x0) 12:50:48 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0xfdfdffff, 0x4}) 12:50:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001680), 0x6) write(r0, &(0x7f0000000000)="89c61133", 0x4) 12:50:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) 12:50:48 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 12:50:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getpeername(r0, 0x0, &(0x7f0000000300)) 12:50:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001680), 0x6) write(r0, &(0x7f0000000000)="89c61133", 0x4) 12:50:48 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 12:50:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0xf, 0x0, &(0x7f0000000140)) 12:50:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) 12:50:48 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) 12:50:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001680), 0x6) write(r0, &(0x7f0000000000)="89c61133", 0x4) 12:50:48 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:48 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:50:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040)) 12:50:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, 0x6, 0x1, 0x101}, 0x14}}, 0x0) 12:50:48 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000240)) 12:50:48 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:48 executing program 4: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:48 executing program 6: sigaltstack(&(0x7f0000afb000/0x1000)=nil, 0x0) mprotect(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x0) 12:50:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001680), 0x6) write(r0, &(0x7f0000000000)="89c61133", 0x4) 12:50:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040)) 12:50:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xffffffff, 0x4) 12:50:48 executing program 5: syz_open_dev$vcsa(&(0x7f0000000140), 0x5, 0x0) 12:50:48 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000240)) 12:50:49 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) clock_gettime(0x0, &(0x7f0000002180)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002240)={{}, {0x0, r0+10000000}}, 0x0) timer_delete(0x0) 12:50:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040)) 12:50:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dc3, 0x1, @perf_config_ext={0x8001, 0x5}}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 12:50:49 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000020105090000000000000000000000000800034000000000080019"], 0x24}}, 0x0) 12:50:49 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000240)) 12:50:49 executing program 6: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 12:50:49 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:50:49 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000740)) 12:50:49 executing program 1: prctl$PR_GET_ENDIAN(0x1a, 0x0) 12:50:49 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000240)) 12:50:49 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) 12:50:49 executing program 6: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x8242, 0x0) sendfile(r0, r0, 0x0, 0xb67) 12:50:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000040)) 12:50:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 12:50:49 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_ACTIVATE(r0, 0x5608, 0x0) 12:50:49 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) 12:50:49 executing program 6: getresuid(0x0, 0x0, 0x0) 12:50:49 executing program 2: mlock2(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 12:50:49 executing program 1: prctl$PR_GET_ENDIAN(0x1a, 0x0) 12:50:49 executing program 3: prctl$PR_SET_TSC(0x3a, 0x1) 12:50:49 executing program 0: mount$9p_unix(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000002240)=[{&(0x7f0000000240)="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", 0xffb, 0x6}], 0x0, 0x0) 12:50:49 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) 12:50:49 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 12:50:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETS(r0, 0x5420, &(0x7f00000000c0)) 12:50:49 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="91", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x3, r1, 0x0, 0x0) 12:50:49 executing program 1: prctl$PR_GET_ENDIAN(0x1a, 0x0) 12:50:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) 12:50:49 executing program 4: r0 = socket$inet(0x2, 0x3, 0x26) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) read(r0, &(0x7f0000000100)=""/201, 0xc9) 12:50:49 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:50:49 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x4c, 0x0, 0x0) 12:50:49 executing program 1: prctl$PR_GET_ENDIAN(0x1a, 0x0) 12:50:49 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) dup2(r1, r0) 12:50:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) 12:50:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12:50:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETS(r0, 0x5420, &(0x7f00000000c0)) 12:50:49 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:50:49 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 128.898877] audit: type=1400 audit(1756471849.999:10): avc: denied { write } for pid=4316 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 129.652757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.656485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.672012] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 129.677960] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.680374] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.685730] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.691805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.693983] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.705739] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.713868] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 129.717228] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.723675] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 129.729401] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.733682] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.738829] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.747745] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 129.750341] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.755160] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 129.763357] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 129.765920] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 129.770726] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 129.778359] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 129.781715] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 129.786813] Bluetooth: hci7: Opcode 0x0406 failed: -4 12:50:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) 12:50:50 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x1) 12:50:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETS(r0, 0x5420, &(0x7f00000000c0)) 12:50:50 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000100), 0x4) 12:50:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12:50:50 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) io_setup(0x9b7f, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:50:50 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "f05760", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x89}]}}}}}, 0x0) 12:50:50 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 12:50:51 executing program 7: syz_mount_image$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000001b00)) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 12:50:51 executing program 0: io_destroy(0x0) 12:50:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCGETS(r0, 0x5420, &(0x7f00000000c0)) 12:50:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000080), 0x0) 12:50:51 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ff9000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) 12:50:51 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000140)) io_setup(0x4, &(0x7f0000000640)) 12:50:51 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) read(r0, &(0x7f00000000c0)=""/137, 0x89) [ 130.777280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.778554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.780744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.782804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.784070] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.785843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 130.787002] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 130.788601] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:50:52 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 12:50:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12:50:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x1a}) 12:50:52 executing program 2: syz_emit_ethernet(0x83, &(0x7f0000000400)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "409d26", 0x4d, 0x88, 0x0, @private0, @mcast2, {[], {0x0, 0x0, 0x4d, 0x0, @gue={{0x2}, "37020e94febd24d51dc3e7aa99f4babd49c5a89bb9076365751d31e1db2d9f4806589ffa8c4e0ff7a2172b76deba9435db55aa771dff42662679ca3f79"}}}}}}}, 0x0) 12:50:52 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@name={'name', 0x3d, '!'}}]}) 12:50:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f0, &(0x7f0000005a00)={'syz_tun\x00'}) 12:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) 12:50:52 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xe0000000}, {0x0, 0x0, 0x8}}}}}, 0x0) 12:50:52 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 12:50:52 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001b80)='(\xe8\xf5\x82j\xca', 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fff}) [ 131.219948] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.228741] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:50:52 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 12:50:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@empty}, 0x14) [ 131.298123] cgroup: Invalid name [ 131.317492] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.319133] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.320356] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.321511] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 131.322796] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.324549] cgroup: Invalid name 12:50:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) 12:50:52 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 12:50:52 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 12:50:52 executing program 4: setgroups(0x1, &(0x7f0000000340)=[0xee01]) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 131.521687] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 131.523387] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 131.524500] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 131.525589] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 131.526793] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.060397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.061469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.064727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.065657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 132.067178] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 132.068627] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 132.069542] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 132.070147] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:50:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) 12:50:53 executing program 4: setgroups(0x1, &(0x7f0000000340)=[0xee01]) socket$inet6_icmp(0xa, 0x2, 0x3a) 12:50:53 executing program 2: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 12:50:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 12:50:53 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 12:50:53 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ff, 0x0) 12:50:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 12:50:53 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 12:50:53 executing program 4: setgroups(0x1, &(0x7f0000000340)=[0xee01]) socket$inet6_icmp(0xa, 0x2, 0x3a) 12:50:53 executing program 2: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) [ 132.266537] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.268326] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.269428] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.270499] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 132.271699] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:50:53 executing program 4: setgroups(0x1, &(0x7f0000000340)=[0xee01]) socket$inet6_icmp(0xa, 0x2, 0x3a) 12:50:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) 12:50:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 12:50:53 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 12:50:53 executing program 2: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 12:50:53 executing program 4: syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="0422970a"], 0x9a) syz_emit_vhci(0x0, 0x0) [ 132.420088] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 132.421866] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 132.423171] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 132.424408] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 132.425806] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:50:53 executing program 4: syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="0422970a"], 0x9a) syz_emit_vhci(0x0, 0x0) 12:50:53 executing program 2: syz_emit_ethernet(0x136, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x100, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, [{0x0, 0x1d, "2a94b064bfcabdaabb8cd5309bf220d0a49af1af9a2608a5f54f1971cf3d3ba94abd965ad3c687deca3eba10b52318114216a0dad2e5a23b2dd4153b6e8e60cf660a0201d21fa36a6aff628305dcc7bf2218c99d8813dd069b6bd7b1bbeaf381c6965646e78418be54db5eedf4c7e781ba79b112c040913a2088aff1c33cc139fc8708c9b09949c719e69fe6ad9f6c8faadf1048875ebcfca8cb62aa9bd062e32e551a70bd9176b560d98ea580a6ea18892dc6b50d5a20fc413ea5948a909387f73e28288cd1e4e12cdc744b48d1e2cdab6c6974408e73e66a0f446cd1a093d67fb1dd35f4f27a010b1c"}, {0x0, 0x0, "eb50"}]}}}}}}, 0x0) 12:50:53 executing program 4: syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="0422970a"], 0x9a) syz_emit_vhci(0x0, 0x0) 12:50:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 133.076434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.077147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.085717] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.087287] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.087882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.089306] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 133.089855] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 133.091134] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:50:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)) 12:50:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {0x0, 0x0, 0x1e0}], 0x0, &(0x7f0000010d00)=ANY=[]) statfs(&(0x7f0000000140)='./file0\x00', 0x0) 12:50:54 executing program 4: syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB="0422970a"], 0x9a) syz_emit_vhci(0x0, 0x0) 12:50:54 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 12:50:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x30}}, 0x0) 12:50:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12:50:54 executing program 6: setresuid(0xee01, 0xee00, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0}, &(0x7f0000008600)=0xc) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) linkat(r3, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) 12:50:54 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) write(r0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) 12:50:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12:50:54 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 12:50:54 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 12:50:54 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/locks\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x103001, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x0) 12:50:54 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue1\x00'}) 12:50:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x30}}, 0x0) 12:50:54 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12:50:54 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 12:50:54 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x30}}, 0x0) 12:50:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12:50:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x3}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:50:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x0) 12:50:55 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40086602, &(0x7f0000002a00)) 12:50:55 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 12:50:55 executing program 5: r0 = eventfd(0x3ff) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) 12:50:55 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000880)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x30}}, 0x0) 12:50:55 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12:50:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x0) 12:50:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x3}, 0x20) [ 134.221627] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:55 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 134.245758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) [ 134.269321] Bluetooth: hci0: command 0x0c1a tx timeout 12:50:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x40002, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 12:50:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x0) 12:50:55 executing program 3: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 12:50:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x3}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:50:55 executing program 2: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) 12:50:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) r2 = getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x0, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x100, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) [ 134.414091] mmap: syz-executor.2 (4517) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 12:50:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x541b, 0xf0ff1f00000000) 12:50:55 executing program 2: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) 12:50:55 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) read(r0, &(0x7f0000000080)=""/101, 0x65) 12:50:55 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) [ 134.515017] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 135.103130] Bluetooth: hci6: command 0x0c1a tx timeout [ 135.103949] Bluetooth: hci7: command 0x0c1a tx timeout [ 135.104392] Bluetooth: hci5: command 0x0c1a tx timeout [ 135.104793] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.105197] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.105627] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.105684] Bluetooth: hci1: command 0x0c1a tx timeout 12:50:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 12:50:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x3}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:50:56 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) 12:50:56 executing program 2: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) 12:50:56 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) r2 = getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x0, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x100, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 12:50:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x40050) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) dup3(r2, r1, 0x0) 12:50:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xa7b, 0x4) [ 135.571420] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) 12:50:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x40050) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) dup3(r2, r1, 0x0) 12:50:56 executing program 7: openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syncfs(r0) 12:50:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci={0x1f, 0x5865, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1}, 0x0) 12:50:56 executing program 2: remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0xa00, 0x0, 0x0, 0x0) 12:50:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, r1, 0x70b, 0x0, 0x0, {{}, {@val={0x3}, @val={0x8}, @void}}}, 0x24}}, 0x0) 12:50:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_async', 0x28001, 0x0) write$tcp_mem(r0, &(0x7f0000000280), 0x48) [ 135.817580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 12:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 12:50:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x40050) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) dup3(r2, r1, 0x0) 12:50:57 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd", 0x38}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a00)='m', 0x1}], 0x1}}], 0x3, 0x44894) shutdown(r0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12:50:57 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8927, &(0x7f0000000080)={'vxcan0\x00'}) 12:50:57 executing program 2: perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:50:57 executing program 5: prctl$PR_SET_NAME(0x25, &(0x7f00000002c0)='\xb3^@}\xf5%!)],#{@$(-/[\\\x00') 12:50:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) r2 = getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x0, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x100, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 12:50:57 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) 12:50:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) [ 136.319290] Bluetooth: hci0: command 0x0c1a tx timeout 12:50:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x2284, 0xfffffffffffffffc) 12:50:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000c80), 0x80000, 0x40050) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) dup3(r2, r1, 0x0) 12:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 12:50:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 12:50:57 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) r2 = getpid() pidfd_open(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x81, 0x0, 0x0, 0x0, 0x5, 0x4440, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8000}, 0x60, 0x0, 0x9, 0x2, 0x100, 0x100, 0xff, 0x0, 0x3, 0x0, 0x1}, r2, 0x4, r0, 0xe) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 12:50:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x8d3b6) 12:50:57 executing program 5: prctl$PR_SET_NAME(0x25, &(0x7f00000002c0)='\xb3^@}\xf5%!)],#{@$(-/[\\\x00') 12:50:57 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) 12:50:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 12:50:57 executing program 5: prctl$PR_SET_NAME(0x25, &(0x7f00000002c0)='\xb3^@}\xf5%!)],#{@$(-/[\\\x00') 12:50:57 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) 12:50:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x8d3b6) 12:50:57 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x4a002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 12:50:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x1, 0x400, 0x4}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 12:50:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c20000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31393337373136313800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005500000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300001e0400"/19, 0x13, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x2000000031000}], 0x0, &(0x7f0000014a00)) 12:50:57 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) 12:50:57 executing program 5: prctl$PR_SET_NAME(0x25, &(0x7f00000002c0)='\xb3^@}\xf5%!)],#{@$(-/[\\\x00') 12:50:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x8d3b6) 12:50:57 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x0) 12:50:57 executing program 2: r0 = getpid() setpgid(r0, 0x0) 12:50:58 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$FIBMAP(r0, 0x127f, &(0x7f0000000080)=0x400) 12:50:58 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:58 executing program 1: openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 12:50:58 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000140)='./file0/file0\x00') 12:50:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x8d3b6) 12:50:58 executing program 2: r0 = getpid() setpgid(r0, 0x0) 12:50:58 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 6: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = gettid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:50:58 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 0: creat(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x84013, r0, 0x0) 12:50:58 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$FIBMAP(r0, 0x127f, &(0x7f0000000080)=0x400) 12:50:58 executing program 2: r0 = getpid() setpgid(r0, 0x0) 12:50:58 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 12:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b40, &(0x7f0000000140)) [ 137.151065] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.151875] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.151899] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.152352] Bluetooth: hci5: command 0x0c1a tx timeout [ 137.152373] Bluetooth: hci7: command 0x0c1a tx timeout [ 137.152819] Bluetooth: hci6: command 0x0c1a tx timeout [ 137.153269] Bluetooth: hci1: command 0x0c1a tx timeout 12:50:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x1, 0x0) dup3(r0, r1, 0x0) recvmmsg$unix(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x50a, 0x0, 0x0) 12:50:58 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b40, &(0x7f0000000140)) 12:50:58 executing program 2: r0 = getpid() setpgid(r0, 0x0) 12:50:58 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$FIBMAP(r0, 0x127f, &(0x7f0000000080)=0x400) 12:50:58 executing program 7: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) 12:50:58 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x10001, &(0x7f0000ffc000/0x4000)=nil, 0x2) 12:50:58 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000340)) 12:50:58 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) [ 137.320642] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 137.353752] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 137.373047] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 137.380696] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 137.395363] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 137.396871] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 137.398893] Bluetooth: hci4: Received unexpected HCI Event 0x00 12:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b40, &(0x7f0000000140)) 12:50:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="8b687df60e9b3944", 0x8}], 0x1) 12:50:58 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x7, 0x0, &(0x7f0000000240)) 12:50:58 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000dc0), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0x0) 12:50:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) 12:50:58 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 12:50:58 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145802, 0x0) ioctl$FIBMAP(r0, 0x127f, &(0x7f0000000080)=0x400) 12:50:58 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x10001, &(0x7f0000ffc000/0x4000)=nil, 0x2) 12:50:58 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 12:50:58 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x10001, &(0x7f0000ffc000/0x4000)=nil, 0x2) [ 137.399446] Bluetooth: hci4: SCO packet for unknown connection handle 201 12:50:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b40, &(0x7f0000000140)) [ 137.507224] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 137.547964] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 137.558089] Bluetooth: hci4: Received unexpected HCI Event 0x00 12:50:58 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x0, 0x4c, 0x0, @wg=@response={0x2, 0x0, 0x0, "912c684f2a808e748e0d03fb3a04dadcd5b61d00", "3e5454d4891c54ecf2f4042ead654623", {"c9df1d92fdba9d2c7fafc401eee65512", "be89216b442023102034790295f5310e"}}}}}}}, 0x0) 12:50:58 executing program 3: futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0) 12:50:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) 12:50:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) 12:50:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="8b687df60e9b3944", 0x8}], 0x1) 12:50:58 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 12:50:58 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x10001, &(0x7f0000ffc000/0x4000)=nil, 0x2) 12:50:58 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000270000004f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f", 0x2c, 0x600}], 0x0, &(0x7f0000010d00)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) [ 137.559683] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 137.680008] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 137.683045] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 137.708229] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 137.710439] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 137.712082] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 137.716977] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 137.734769] Bluetooth: hci1: Received unexpected HCI Event 0x00 12:50:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) 12:50:58 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) 12:50:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="8b687df60e9b3944", 0x8}], 0x1) 12:50:58 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 12:50:58 executing program 3: futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0) 12:50:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240)=0x53580000, 0x4) 12:50:58 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) 12:50:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) [ 137.741611] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 137.822024] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 137.823239] Bluetooth: hci4: Received unexpected HCI Event 0x00 12:50:58 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40a85323, &(0x7f0000000140)={{0x80}, 'port0\x00'}) 12:50:58 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) 12:50:58 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 12:50:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)="8b687df60e9b3944", 0x8}], 0x1) 12:50:59 executing program 3: futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0) 12:50:59 executing program 4: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x800, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 137.920077] Bluetooth: hci1: unexpected event for opcode 0x0406 [ 137.931679] Bluetooth: hci1: Received unexpected HCI Event 0x00 12:50:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) 12:50:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35313233303831343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b00cb2cc029f49d8b90449a7ecd54d49010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dff4655fdff4655fdff4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000dff4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000dff4655fdff4655fdff4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000dff4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000024a8270e00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000e0f4655fe0f4655fe0f4655f000000000000010004000000000000000100000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038ac705900000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3531323330383134372f66696c65302f66696c653000000000000000000000000000000000000000000000ae39138600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c412e2ee000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) 12:50:59 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETLED(r0, 0x5600, 0xf0ff1f00000000) 12:50:59 executing program 4: setrlimit(0x0, &(0x7f0000000100)) 12:50:59 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 12:50:59 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002cc0), 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="7f00f012000e000520153f0a00036366c6df424b3a9a3cf39b70000010b90027000400"], 0x17) syz_emit_vhci(&(0x7f0000000340)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80024d0a4f59906c11a26eaec30126ea2650838b69877c8fa4b2915a255a1000801000700a23b012515fc1a260979e1003e5ec1134905ae3527ff6192"], 0x3e) syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x1a) init_module(0x0, 0xfffc2, 0x0) init_module(&(0x7f00000001c0)=')^{}\xdc)\'-\x00', 0x9, &(0x7f0000000200)='-\x00\x02T\xb0V>\x8d\x99\xcb\x94\xd5\xb0\x01\x98\x01\xa5x\xf7v8q\xf1P\xf4(\x7f\xbc\r\x1e$\r\xcf\'\x8aGQR`\xad\x1fT\xfc\x1a\x06\xe7\xb8vva\x11\xb7\x19\xd8\xc9\xa35D\xf6g\xa2\x8fU<\xcc\x01\x9b~2\x12\xc3y\x87>\xbc\xbd\xf8\xc7\x86\xaa\xcaHv)l\xc4\x1b$\x8e}\xe5\xdb,') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x406}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x8, 0x40000) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000700000000"], 0x6) bind$802154_dgram(r0, &(0x7f0000000100)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000200)={0x81, 0x0, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000600)) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xb8}, "d133c9e09cc40737df92573b1a92858ddbbec0d4db659b3492aa8d5c8c20b4d42ea8c08637dea9f54deb236116de135f75e9aecd02db1587641c58a591cb3d4fc86475e0a748b4683d76e41f04444e6080d0dbf85f9325de44a36cc630d66a51438b12e2ca5c5a064094988853d562ff7b4fd17598b2990c7c2588f7790c00bb9d288b1776dc401022626fb5cff26509372de57addd5530615adc98ad0cf6a422e0be3a6bc8ba64b8e4de6fb197d89b9ac4a04b63ed76a3a"}, 0xbc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xa) 12:50:59 executing program 3: futex(&(0x7f0000000000), 0x8b, 0x0, &(0x7f0000000040), 0x0, 0x0) 12:50:59 executing program 2: perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001280)='ns/uts\x00') [ 138.062300] loop0: detected capacity change from 0 to 512 [ 138.094219] Bluetooth: hci1: unexpected event for opcode 0x0406 12:50:59 executing program 4: openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x100}, 0x18) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)=0x2) [ 138.126029] Bluetooth: hci1: Received unexpected HCI Event 0x00 12:50:59 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00\x14~\xfe\x9a!\xb2\xb73h\xd2oR\arV(C\xe7\xbb\xd3\x83\xd4\x9b\xb7\xc8t_X\xf0\xcb\xba_\x82qgk\xcbW\xe7\xcd\x87\xf9\xb2\x89\xb94\x06s\xa1B\x96\xc4\x17\x11\xba\xae\xba/N~%\xaf\xcbw\xa4\xd99\xab)\x8f\x1b2\x1bJ\x86\xb1\xee\x8d;\x12\xd4\x7fT\x06\xaakm^\x85\xd1\xd1\xcd\x98L2\xe3\x14\xb7v\xbb\x94x\x82\xab\xc1dK(\x99/9\xc6\xbe\xcd?\xd6-%\x8b\xbeiSA\xdc\xaa\xec\xban3\xbf\x8ew\xee\x91SB\xb0\xb5\xc4,f\xf0\xca\xb3\xb0\xa5\x02\x1f\xd4\xf8\xe7_A\xf0b\xa4\xec\xe8\xeed\xaf\xdf\xdf-w]_\xe4\xb8\x9850\xcd\x8f*\xb5\x98>Y\xef.5\xfd\xcbC\xf0(=\'\xaa^kD\xf5\x81f\xd0 i\x84\xb2\xc5\x1d\x96\xa5\v\xaf\x18w|J\xdbE\x80\x97\xe9U\xd8\x01[A\xaa\xc1%\xa95^X\xea\x17\x1f&]K\xc4\xe6\x17\x00\x04\xfe\x12o\xf0\xad\xfa\xa8\x81\xdd\xe8\t\xa12P\xfc@\x1a\xea\x92|\x04W\xd6-\xb22S`[oUAY\xa8\x93\xc5H\xbe\xc4\x95\x87\x9b\x05\x80\xfc\xec1\xcd\xe4\x8e\xb8\xb0\xdf\xfd\xd2\x19\xf0\x0e\x98{\x9f\f\xd3\xc3\x8e\xdb\xdf\x86$\x8a\xf1\t\x8a\xa8}\xf27\x9c6\xe5\x05\xe5\t\xb8', 0x0) fallocate(r0, 0x0, 0x0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) sendfile(r1, r0, 0x0, 0x9) [ 138.145839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:50:59 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f08d6c2cf47288f8895dca6e85d1f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, 0x0) 12:50:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') write$tcp_mem(r0, &(0x7f00000000c0)={0xfffffffffffffffd}, 0x48) 12:50:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) [ 138.258525] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:50:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$KDSETLED(r0, 0x4b34, 0x0) 12:50:59 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000d40)=""/4096, 0x1000) 12:50:59 executing program 2: perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001280)='ns/uts\x00') 12:50:59 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 12:50:59 executing program 4: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:59 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f08d6c2cf47288f8895dca6e85d1f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, 0x0) 12:50:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) 12:50:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@nl=@unspec, 0x80) [ 138.367275] Bluetooth: hci0: command 0x0c1a tx timeout 12:50:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@nl=@unspec, 0x80) 12:50:59 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000d40)=""/4096, 0x1000) 12:50:59 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f08d6c2cf47288f8895dca6e85d1f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, 0x0) [ 138.493277] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.493898] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.494647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.495217] Bluetooth: hci3: Opcode 0x0c1a failed: -4 12:50:59 executing program 2: perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001280)='ns/uts\x00') 12:50:59 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 12:50:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) [ 138.513741] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.514358] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 138.514918] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 138.524443] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:50:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@nl=@unspec, 0x80) 12:50:59 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 12:50:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect(r0, &(0x7f00000001c0)=@nl=@unspec, 0x80) 12:50:59 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 12:50:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0) [ 138.595998] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.599109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.601863] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.604481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.607138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.612851] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 138.619405] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 138.620031] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:50:59 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000d40)=""/4096, 0x1000) 12:50:59 executing program 6: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f08d6c2cf47288f8895dca6e85d1f1f7d4666d7035828c4690bca329e"], 0x52) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d4, 0x0) 12:50:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2d02, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 12:50:59 executing program 4: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:50:59 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x4061070, 0xffffffffffffffff, 0x10000000) 12:50:59 executing program 0: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 12:50:59 executing program 2: perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001280)='ns/uts\x00') 12:50:59 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x0) getdents(r0, &(0x7f0000000d40)=""/4096, 0x1000) 12:50:59 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) 12:50:59 executing program 1: clock_gettime(0x3, &(0x7f0000000000)) 12:50:59 executing program 5: timer_create(0x3, 0x0, &(0x7f0000000240)) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, 0x0) [ 138.862646] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 138.863415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 138.863999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 138.865018] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 138.865633] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 138.866231] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 138.866832] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 138.867492] Bluetooth: hci7: Opcode 0x0c1a failed: -4 12:51:00 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) 12:51:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x62, 0x4) 12:51:00 executing program 4: r0 = io_uring_setup(0x3e96, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12:51:00 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000007340)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f000000bd00)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r2}}}], 0x28}}], 0x1, 0x0) 12:51:00 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xb) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 12:51:00 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000100), 0x4) 12:51:00 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r1 = fork() ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = getpid() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000000)={r4, r0}) getpriority(0x1, r3) r5 = fork() ptrace(0x10, r5) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) pidfd_open(r6, 0x0) ptrace$setsig(0x4203, r5, 0xbe13, &(0x7f0000000100)={0xc, 0x0, 0x2}) ptrace$setregs(0xf, r5, 0x3, &(0x7f0000000180)="89c8a8e7673e954ade969f0d89412d396a1847e2c8532bec") perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0x8, 0x5, 0x44, 0x0, 0xffffffffffffffe1, 0x400, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x7ff}, 0x12000, 0x4, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0x5}, r5, 0xe, r0, 0x9) ptrace$setsig(0x4203, r1, 0xf738, &(0x7f0000000100)={0x1d, 0x100, 0x1}) 12:51:00 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) [ 139.004031] kmemleak: Found object by alias at 0x607f1a6315b0 [ 139.004051] CPU: 0 UID: 0 PID: 4887 Comm: isc-worker0000 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.004069] Tainted: [W]=WARN [ 139.004073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.004080] Call Trace: [ 139.004084] [ 139.004089] dump_stack_lvl+0xca/0x120 [ 139.004117] __lookup_object+0x94/0xb0 [ 139.004135] delete_object_full+0x27/0x70 [ 139.004151] free_percpu+0x30/0x1160 [ 139.004168] ? arch_uprobe_clear_state+0x16/0x140 [ 139.004189] futex_hash_free+0x38/0xc0 [ 139.004204] mmput+0x2d3/0x390 [ 139.004224] begin_new_exec+0x14bd/0x36c0 [ 139.004246] ? kernel_read+0xcb/0x230 [ 139.004260] load_elf_binary+0x855/0x4f70 [ 139.004281] ? perf_trace_lock+0xb5/0x5d0 [ 139.004300] ? __pfx_perf_trace_lock+0x10/0x10 [ 139.004312] ? load_misc_binary+0x979/0xcd0 [ 139.004331] ? __pfx_load_elf_binary+0x10/0x10 [ 139.004346] ? find_held_lock+0x2b/0x80 [ 139.004363] ? bprm_execve+0x8b7/0x15a0 [ 139.004373] ? lock_release+0xc8/0x290 [ 139.004391] bprm_execve+0x8d9/0x15a0 [ 139.004406] ? __pfx_bprm_execve+0x10/0x10 [ 139.004424] do_execveat_common+0x5b2/0x770 [ 139.004437] ? __pfx_do_execveat_common+0x10/0x10 [ 139.004452] ? getname_flags.part.0+0x1c6/0x540 [ 139.004473] __x64_sys_execve+0x95/0xc0 [ 139.004487] do_syscall_64+0xbf/0x360 [ 139.004499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.004512] RIP: 0033:0x7fcaf8bd06c7 [ 139.004527] Code: Unable to access opcode bytes at 0x7fcaf8bd069d. [ 139.004532] RSP: 002b:00007fcaf87a1cf8 EFLAGS: 00000202 ORIG_RAX: 000000000000003b [ 139.004544] RAX: ffffffffffffffda RBX: 000055c3dd34eca0 RCX: 00007fcaf8bd06c7 [ 139.004551] RDX: 00007fcaf00028c0 RSI: 00007fcaf87a1d10 RDI: 000055c3cdbdb0f0 [ 139.004559] RBP: 000055c3cdbdb0f0 R08: 00007fcaf00020e0 R09: 00007fcaf8afa2d0 [ 139.004566] R10: 00007fcaf87a2700 R11: 0000000000000202 R12: 00007fcaf00028c0 [ 139.004574] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fcaf87a30f0 [ 139.004593] [ 139.004597] kmemleak: Object (percpu) 0x607f1a631540 (size 960): [ 139.004604] kmemleak: comm "systemd", pid 1, jiffies 4294706154 [ 139.004610] kmemleak: min_count = 1 [ 139.004614] kmemleak: count = 1 [ 139.004618] kmemleak: flags = 0x21 [ 139.004622] kmemleak: checksum = 0 [ 139.004626] kmemleak: backtrace: [ 139.004629] pcpu_alloc_noprof+0x87a/0x1170 [ 139.004643] mem_cgroup_css_alloc+0x5c9/0x15e0 [ 139.004657] cgroup_apply_control_enable+0x446/0x9f0 [ 139.004669] cgroup_mkdir+0x86e/0x1110 [ 139.004681] kernfs_iop_mkdir+0x111/0x190 [ 139.004696] vfs_mkdir+0x59a/0x8d0 [ 139.004710] do_mkdirat+0x19f/0x3d0 [ 139.004721] __x64_sys_mkdir+0xf3/0x140 [ 139.004731] do_syscall_64+0xbf/0x360 [ 139.004739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.051910] kmemleak: Cannot insert 0x607f1a6315b0 into the object search tree (overlaps existing) [ 139.051934] CPU: 1 UID: 0 PID: 1 Comm: systemd Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.051952] Tainted: [W]=WARN [ 139.051956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.051963] Call Trace: [ 139.051967] [ 139.051972] dump_stack_lvl+0xca/0x120 [ 139.051999] __link_object+0x190/0x210 03:33:20 executing program 1: statx(0xffffffffffffff9c, 0x0, 0x6000, 0x0, 0x0) 03:33:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) 03:33:20 executing program 7: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sockstat\x00') r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc0c0583b, &(0x7f0000000000)) 03:33:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x1400c8d0) 03:33:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x2, 0x0, "6c7abb3e9a9a691096b5eb47d00faa3f87c4977f0e265c767b95baf2e31dd631e7b9d3f684a50d0b1e7c136a28dfcd2b47d688f255b9df442a8090a173937522cbeb7c2948aede525200"}, 0xd8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) [ 139.052019] __create_object+0x48/0x80 [ 139.052037] pcpu_alloc_noprof+0x87a/0x1170 [ 139.052064] mem_cgroup_css_alloc+0x7e7/0x15e0 [ 139.052081] ? lock_is_held_type+0x9e/0x120 [ 139.052101] cgroup_apply_control_enable+0x446/0x9f0 [ 139.052126] cgroup_mkdir+0x86e/0x1110 [ 139.052145] ? __pfx_cgroup_mkdir+0x10/0x10 [ 139.052161] kernfs_iop_mkdir+0x111/0x190 [ 139.052180] vfs_mkdir+0x59a/0x8d0 [ 139.052201] do_mkdirat+0x19f/0x3d0 [ 139.052216] ? __pfx_do_mkdirat+0x10/0x10 [ 139.052236] __x64_sys_mkdir+0xf3/0x140 [ 139.052256] do_syscall_64+0xbf/0x360 [ 139.052268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.052280] RIP: 0033:0x7fdae3f92b07 [ 139.052290] Code: 1f 40 00 48 8b 05 89 f3 0c 00 64 c7 00 5f 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 59 f3 0c 00 f7 d8 64 89 01 48 [ 139.052301] RSP: 002b:00007ffcfb8ec978 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 139.052312] RAX: ffffffffffffffda RBX: 0000556c951b9680 RCX: 00007fdae3f92b07 [ 139.052320] RDX: 00007ffcfb8ec810 RSI: 00000000000001ed RDI: 0000556c95251070 [ 139.052327] RBP: 00007fdae4383351 R08: 0000000000000001 R09: 0000000000000000 [ 139.052334] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 139.052340] R13: 0000556c951b9680 R14: 0000000000000000 R15: 0000556c951e8cd0 [ 139.052360] [ 139.053152] kmemleak: Kernel memory leak detector disabled [ 139.053156] kmemleak: Object (percpu) 0x607f1a631540 (size 960): [ 139.053164] kmemleak: comm "systemd", pid 1, jiffies 4294706154 [ 139.053170] kmemleak: min_count = 1 [ 139.053174] kmemleak: count = 1 [ 139.053177] kmemleak: flags = 0x21 [ 139.053181] kmemleak: checksum = 0 [ 139.053184] kmemleak: backtrace: [ 139.053188] pcpu_alloc_noprof+0x87a/0x1170 [ 139.053203] mem_cgroup_css_alloc+0x5c9/0x15e0 [ 139.053214] cgroup_apply_control_enable+0x446/0x9f0 [ 139.053225] cgroup_mkdir+0x86e/0x1110 [ 139.053237] kernfs_iop_mkdir+0x111/0x190 [ 139.053251] vfs_mkdir+0x59a/0x8d0 [ 139.053265] do_mkdirat+0x19f/0x3d0 [ 139.053275] __x64_sys_mkdir+0xf3/0x140 [ 139.053285] do_syscall_64+0xbf/0x360 [ 139.053293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.095944] kmemleak: Automatic memory scanning thread ended [ 139.111715] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.112310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.112853] Bluetooth: hci2: Opcode 0x0c1a failed: -4 03:33:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000c00), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) [ 139.120015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.122535] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.124014] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 139.133909] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 139.134738] Bluetooth: hci7: Opcode 0x0c1a failed: -4 03:33:20 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r1 = fork() ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = getpid() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000000)={r4, r0}) getpriority(0x1, r3) r5 = fork() ptrace(0x10, r5) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) pidfd_open(r6, 0x0) ptrace$setsig(0x4203, r5, 0xbe13, &(0x7f0000000100)={0xc, 0x0, 0x2}) ptrace$setregs(0xf, r5, 0x3, &(0x7f0000000180)="89c8a8e7673e954ade969f0d89412d396a1847e2c8532bec") perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0x8, 0x5, 0x44, 0x0, 0xffffffffffffffe1, 0x400, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x7ff}, 0x12000, 0x4, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0x5}, r5, 0xe, r0, 0x9) ptrace$setsig(0x4203, r1, 0xf738, &(0x7f0000000100)={0x1d, 0x100, 0x1}) 03:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r1 = fork() ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = getpid() r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r2, &(0x7f0000000000)={r4, r0}) getpriority(0x1, r3) r5 = fork() ptrace(0x10, r5) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) pidfd_open(r6, 0x0) ptrace$setsig(0x4203, r5, 0xbe13, &(0x7f0000000100)={0xc, 0x0, 0x2}) ptrace$setregs(0xf, r5, 0x3, &(0x7f0000000180)="89c8a8e7673e954ade969f0d89412d396a1847e2c8532bec") perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfc, 0x8, 0x5, 0x44, 0x0, 0xffffffffffffffe1, 0x400, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x7ff}, 0x12000, 0x4, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0x5}, r5, 0xe, r0, 0x9) ptrace$setsig(0x4203, r1, 0xf738, &(0x7f0000000100)={0x1d, 0x100, 0x1}) [ 139.601337] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 139.603298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 139.605284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.611882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 139.612454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 139.614763] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 139.621031] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 139.621605] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 139.928947] BUG: Bad rss-counter state mm:0000000090b8f905 type:MM_FILEPAGES val:2 Comm:dhclient-script Pid:4970 [ 139.930267] BUG: Bad rss-counter state mm:0000000090b8f905 type:MM_SWAPENTS val:2 Comm:dhclient-script Pid:4970 [ 139.965816] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#1] SMP KASAN NOPTI [ 139.966710] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 139.967299] CPU: 0 UID: 0 PID: 4909 Comm: apt-helper Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.968197] Tainted: [W]=WARN [ 139.968441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.969084] RIP: 0010:perf_tp_event+0x175/0xe70 [ 139.969466] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 139.970843] RSP: 0018:ffff88801e657200 EFLAGS: 00010012 [ 139.971241] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 139.971764] RDX: ffff8880471f1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 139.972290] RBP: ffff88801e657470 R08: ffff88806ce31340 R09: ffffe8ffffc0e670 [ 139.972812] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 139.973339] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 139.973861] FS: 00007f74edd3f800(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 139.974450] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.974878] CR2: 00007fe9c9fe0e88 CR3: 000000001fcc2000 CR4: 0000000000350ef0 [ 139.975403] Call Trace: [ 139.975598] [ 139.975774] ? __pfx_perf_tp_event+0x10/0x10 [ 139.976110] ? stack_depot_save_flags+0x2c/0xa20 [ 139.976468] ? kasan_save_stack+0x34/0x50 [ 139.976782] ? kasan_save_stack+0x24/0x50 [ 139.977097] ? kasan_save_track+0x14/0x30 [ 139.977412] ? __kasan_slab_alloc+0x59/0x70 [ 139.977734] ? kmem_cache_alloc_noprof+0x205/0x690 [ 139.978099] ? ptlock_alloc+0x21/0x70 [ 139.978384] ? pte_alloc_one+0x86/0x360 [ 139.978686] ? __pte_alloc+0x6c/0x360 [ 139.978975] ? copy_page_range+0x313f/0x5140 [ 139.979309] ? dup_mmap+0xd2f/0x1d10 [ 139.979592] ? copy_process+0x3ad5/0x73c0 [ 139.979906] ? kernel_clone+0xea/0x7f0 [ 139.980197] ? __do_sys_clone+0xce/0x120 [ 139.980503] ? do_syscall_64+0xbf/0x360 [ 139.980803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.981207] ? perf_trace_lock_acquire+0xc9/0x700 [ 139.981588] ? __lock_acquire+0xc65/0x1b70 [ 139.981907] ? perf_trace_run_bpf_submit+0xef/0x180 [ 139.982282] ? __lock_acquire+0x694/0x1b70 [ 139.982598] perf_trace_run_bpf_submit+0xef/0x180 [ 139.982963] perf_trace_preemptirq_template+0x259/0x430 [ 139.983370] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 139.983808] ? find_held_lock+0x2b/0x80 [ 139.984110] ? __lruvec_stat_mod_folio+0x1e9/0x460 [ 139.984484] ? lock_release+0xc8/0x290 [ 139.984779] ? pte_alloc_one+0x2bd/0x360 [ 139.985093] trace_irq_enable.constprop.0+0xa6/0x100 [ 139.985470] trace_hardirqs_on+0x26/0x40 [ 139.985775] pte_alloc_one+0x2bd/0x360 [ 139.986073] __pte_alloc+0x6c/0x360 [ 139.986351] ? __pfx___pte_alloc+0x10/0x10 [ 139.986669] ? copy_page_range+0x2d68/0x5140 [ 139.987004] ? lock_is_held_type+0x9e/0x120 [ 139.987333] copy_page_range+0x313f/0x5140 [ 139.987664] ? __pfx_copy_page_range+0x10/0x10 [ 139.988011] ? mas_destroy+0x5ce/0x9c0 [ 139.988307] ? lock_acquire+0x15e/0x2f0 [ 139.988606] ? dup_mmap+0xc95/0x1d10 [ 139.988893] ? lock_release+0xc8/0x290 [ 139.989191] ? down_write+0x119/0x1f0 [ 139.989478] ? up_write+0x195/0x520 [ 139.989755] ? lock_is_held_type+0x9e/0x120 [ 139.990080] dup_mmap+0xd2f/0x1d10 [ 139.990357] ? __pfx_dup_mmap+0x10/0x10 [ 139.990663] ? lock_is_held_type+0x9e/0x120 [ 139.990990] copy_process+0x3ad5/0x73c0 [ 139.991288] ? __fput+0x67b/0xb50 [ 139.991555] ? fput_close_sync+0x10f/0x240 [ 139.991873] ? __x64_sys_close+0x8f/0x120 [ 139.992192] ? __pfx_copy_process+0x10/0x10 [ 139.992513] ? __lock_acquire+0xc65/0x1b70 [ 139.992833] ? perf_trace_lock_acquire+0xc9/0x700 [ 139.993201] kernel_clone+0xea/0x7f0 [ 139.993486] ? __pfx_kernel_clone+0x10/0x10 [ 139.993806] ? sock_do_ioctl+0x195/0x240 [ 139.994111] ? __pfx_sock_do_ioctl+0x10/0x10 [ 139.994439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.994825] ? do_vfs_ioctl+0x125/0x1470 [ 139.995134] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 139.995459] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 139.995889] ? lock_release+0x41/0x290 [ 139.996183] __do_sys_clone+0xce/0x120 [ 139.996477] ? __pfx___do_sys_clone+0x10/0x10 [ 139.996812] ? sock_ioctl+0x1dd/0x630 [ 139.997113] ? selinux_file_ioctl+0xb9/0x280 [ 139.997453] ? __pfx_sock_ioctl+0x10/0x10 [ 139.997765] do_syscall_64+0xbf/0x360 [ 139.998050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.998432] RIP: 0033:0x7f74ee3324bb [ 139.998710] Code: ed 0f 85 f8 00 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 91 00 00 00 41 89 c5 85 c0 0f 85 9e 00 00 [ 140.000031] RSP: 002b:00007fffe05e0d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 140.000590] RAX: ffffffffffffffda RBX: 00007fffe05e0e00 RCX: 00007f74ee3324bb [ 140.001114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 140.001635] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f74edd3f800 [ 140.002153] R10: 00007f74edd3fad0 R11: 0000000000000246 R12: 0000000000000000 [ 140.002673] R13: 000055c2bfdcb4c7 R14: 000055c2bfdce0b0 R15: 000055c2bfdce020 [ 140.003198] [ 140.003375] Modules linked in: [ 140.003619] ---[ end trace 0000000000000000 ]--- [ 140.003965] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.004315] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.005638] RSP: 0018:ffff88801e657200 EFLAGS: 00010012 [ 140.006029] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 140.006550] RDX: ffff8880471f1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 140.007071] RBP: ffff88801e657470 R08: ffff88806ce31340 R09: ffffe8ffffc0e670 [ 140.007591] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 140.008111] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 140.008632] FS: 00007f74edd3f800(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.009225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.009652] CR2: 00007fe9c9fe0e88 CR3: 000000001fcc2000 CR4: 0000000000350ef0 [ 140.010179] note: apt-helper[4909] exited with irqs disabled [ 140.010646] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000032: 0000 [#2] SMP KASAN NOPTI [ 140.011465] KASAN: null-ptr-deref in range [0x0000000000000190-0x0000000000000197] [ 140.012021] CPU: 0 UID: 0 PID: 4909 Comm: apt-helper Tainted: G D W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 140.012872] Tainted: [D]=DIE, [W]=WARN [ 140.013165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.013767] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.014122] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.015451] RSP: 0018:ffff88806ce08b80 EFLAGS: 00010012 [ 140.015848] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 140.016370] RDX: ffff8880471f1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 140.016893] RBP: ffff88806ce08df0 R08: ffff88806ce313e8 R09: ffffe8ffffc0e670 [ 140.017421] R10: 0000000000000000 R11: ffff88801ac6c098 R12: dffffc0000000000 [ 140.017943] R13: 0000000000000014 R14: ffff88806ce313e8 R15: dffffc0000000000 [ 140.018468] FS: 00007f74edd3f800(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.019058] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.019487] CR2: 00007fe9c9fe0e88 CR3: 000000001fcc2000 CR4: 0000000000350ef0 [ 140.020012] Call Trace: [ 140.020207] [ 140.020376] ? css_rstat_updated+0x1b8/0x4d0 [ 140.020716] ? __pfx_perf_tp_event+0x10/0x10 [ 140.021052] ? trace_pelt_se_tp+0xdf/0x130 [ 140.021378] ? perf_trace_lock_acquire+0xc9/0x700 [ 140.021741] ? lock_acquire+0xc5/0x2f0 [ 140.022036] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 140.022428] ? perf_trace_lock_acquire+0xc9/0x700 [ 140.022790] ? run_posix_cpu_timers+0x160/0x7d0 [ 140.023140] ? __raise_softirq_irqoff+0x5f/0x90 [ 140.023489] ? __pfx_run_posix_cpu_timers+0x10/0x10 [ 140.023862] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 140.024254] ? do_raw_spin_lock+0x123/0x260 [ 140.024582] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 140.024936] ? perf_trace_run_bpf_submit+0xef/0x180 [ 140.025317] ? lock_acquire+0xc5/0x2f0 [ 140.025611] perf_trace_run_bpf_submit+0xef/0x180 [ 140.025981] perf_trace_preemptirq_template+0x259/0x430 [ 140.026384] ? read_tsc+0x9/0x20 [ 140.026650] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 140.027091] ? clockevents_program_event+0x135/0x360 [ 140.027474] ? tick_program_event+0xac/0x140 [ 140.027805] ? handle_softirqs+0x16e/0x770 [ 140.028130] trace_irq_enable.constprop.0+0xa6/0x100 [ 140.028508] trace_hardirqs_on+0x26/0x40 [ 140.028811] handle_softirqs+0x16e/0x770 [ 140.029133] __irq_exit_rcu+0xc4/0x100 [ 140.029434] irq_exit_rcu+0x9/0x20 [ 140.029701] sysvec_apic_timer_interrupt+0x70/0x80 [ 140.030074] [ 140.030246] [ 140.030418] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.030807] RIP: 0010:make_task_dead+0xa2/0x3b0 [ 140.031159] Code: 38 00 85 db 0f 84 21 01 00 00 e8 d9 96 38 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 27 92 38 00 48 85 db 0f 84 17 01 00 00 b9 96 38 00 31 ff 65 8b 1d 60 df 48 06 81 e3 ff ff ff 7f 89 de [ 140.032489] RSP: 0018:ffff88801e657f28 EFLAGS: 00000246 [ 140.032898] RAX: 0000000000000001 RBX: ffff8880471f1b80 RCX: ffffffff817c2b86 [ 140.033553] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff813b5234 [ 140.034312] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000000000000 [ 140.034833] R10: ffffffff8643ac57 R11: 0000000000000001 R12: ffff8880471f1b80 [ 140.035356] R13: 0000000000000000 R14: dffffc0000000032 R15: 0000000000000000 [ 140.035880] ? trace_irq_enable.constprop.0+0x26/0x100 [ 140.036319] ? make_task_dead+0x214/0x3b0 [ 140.036633] ? make_task_dead+0x214/0x3b0 [ 140.036945] ? do_syscall_64+0xbf/0x360 [ 140.037249] rewind_stack_and_make_dead+0x16/0x20 [ 140.037613] RIP: 0033:0x7f74ee3324bb [ 140.037897] Code: ed 0f 85 f8 00 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 91 00 00 00 41 89 c5 85 c0 0f 85 9e 00 00 [ 140.039340] RSP: 002b:00007fffe05e0d70 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 140.039942] RAX: ffffffffffffffda RBX: 00007fffe05e0e00 RCX: 00007f74ee3324bb [ 140.040513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 140.041087] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f74edd3f800 [ 140.041659] R10: 00007f74edd3fad0 R11: 0000000000000246 R12: 0000000000000000 [ 140.042221] R13: 000055c2bfdcb4c7 R14: 000055c2bfdce0b0 R15: 000055c2bfdce020 [ 140.042787] [ 140.042976] Modules linked in: [ 140.043237] ---[ end trace 0000000000000000 ]--- [ 140.043599] RIP: 0010:perf_tp_event+0x175/0xe70 [ 140.043959] Code: ff df 48 89 85 a8 fd ff ff 48 c1 e8 03 4c 01 e0 48 89 85 c8 fd ff ff e8 c9 51 ea ff 48 8d bb f0 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 08 3c 03 0f 8e c5 0b 00 00 44 8b ab f0 01 [ 140.045288] RSP: 0018:ffff88801e657200 EFLAGS: 00010012 [ 140.045680] RAX: 0000000000000032 RBX: ffffffffffffffa1 RCX: 0000000000000002 [ 140.046202] RDX: ffff8880471f1b80 RSI: ffffffff818995b7 RDI: 0000000000000191 [ 140.046731] RBP: ffff88801e657470 R08: ffff88806ce31340 R09: ffffe8ffffc0e670 [ 140.047254] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 140.047777] R13: 0000000000000014 R14: ffff88806ce31340 R15: dffffc0000000000 [ 140.048301] FS: 00007f74edd3f800(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 140.048890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.049328] CR2: 00007fe9c9fe0e88 CR3: 000000001fcc2000 CR4: 0000000000350ef0 [ 140.049855] Kernel panic - not syncing: Fatal exception in interrupt [ 140.050518] Kernel Offset: disabled [ 140.050790] ---[ end Kernel panic - not syncing: Fatal exception in interrupt ]--- VM DIAGNOSIS: 12:51:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff11003233fa7 RCX=ffffffff819dd169 RDX=ffff88800f5f8000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffffff85849260 RSP=ffff88801919fcf0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000042629007 R11=0000000000000001 R12=ffff8880426282b0 R13=ffff88800cfd8dc0 R14=0000000042629007 R15=ffff888042627f98 RIP=ffffffff8173e784 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555896f5400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffccacd48fc CR3=000000004260d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff867d39c2 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888009747920 RSP=ffff888009747808 R8 =ffffffff867d39c6 R9 =0000000000000000 R10=000000000003be53 R11=0000000000004433 R12=ffff888009747928 R13=ffff888009747910 R14=0000000000000004 R15=ffff8880097478c8 RIP=ffffffff81358839 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556c95233000 CR3=0000000046312000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000