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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r9}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r9, r3}}, 0x3000) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r9}}, 0x83d) close_range(r0, 0xffffffffffffffff, 0x0) 06:44:44 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000000c0)="19c3b4d0b0cb3bfc8e562ad9f4b99b7bfc89fdf3023d09ba7ccfbca55607990c35d62f7e7fdc30c6c4c0ff15fb3be7afe6d8521a7067ac6bbe79b44a98dae682c7383cab21d78ad60998c9408bfcc0009cebcb814466085cf86db0ee6fb59acf075612f8bc6d689302c6bf1fba9fde26e5c64105e22ebcecfbc3fcfb3d49ee614c349accbd1f6c6fdc73cd0f9bf66ce30e40a1d1e7849a0f7017c219a76c3177bf5616eff1190151fe96341ca1232b3897785205af12f32273722beb48f4eed43576040e4afdf90967683593957b68b32fda4db7def367649449085969ee65dca22ec359c1200a", 0xe7) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:44:44 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) times(&(0x7f0000000180)) 06:44:44 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) uname(&(0x7f0000000140)=""/132) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x2, 0x11) clone3(&(0x7f0000005880)={0x7b804900, 0x0, &(0x7f0000000280), 0x0, {0x3d}, 0x0, 0x0, &(0x7f0000000100)=""/10, 0x0, 0x0, {r3}}, 0x58) 06:44:44 executing program 3: r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x5a, 0x1000}]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@val={0x0, 0x88a2}, @void, @ipv4=@generic={{0xf, 0x4, 0x3, 0x5, 0x65, 0x66, 0x0, 0x3f, 0x2f, 0x0, @empty, @broadcast, {[@ssrr={0x89, 0x13, 0x4a, [@remote, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x12}]}, @generic={0x88, 0x3, 'S'}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xb, "10f27ee4533bc28e9f"}, @end, @noop, @end]}}, "8f273880cf38a1f7cd18b2fb1bad34ccc33a4af9b17b30f186d465317ccc8a9330b5e45d7f59716b4b"}}, 0x69) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0xff) fcntl$setstatus(r0, 0x4, 0x6800) sendfile(r0, r2, 0x0, 0xfdef) 06:44:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) shutdown(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000180), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@rand_addr=0x64010101, @in=@empty, 0x4e20, 0x2, 0x4e22, 0x1ff, 0xa, 0x80, 0x80, 0x74, 0x0, r2}, {0x4, 0x3, 0x80, 0x1000000, 0x8, 0x4, 0x7, 0x2}, {0x7, 0x10000, 0x5753, 0xb73}, 0x1ff, 0x6e6bc0, 0x2, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x4, 0x0, 0x7, 0x80, 0x8, 0x1ff}}, 0xe8) 06:44:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) times(&(0x7f0000000180)) 06:44:53 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:44:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 06:44:53 executing program 3: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3fc, r1, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x36}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x177, 0x80, [@fast_bss_trans={0x37, 0x12f, {0xf4, 0x8, "48c96ba93df9f8ff81f5f47aae2639d9", "9882ea2ede034eb72124628df55b4fbdb01bffa313052f5de80b92a6dc7fb227", "7a698841ba169d2784d11161c08c1f89d759a6551f8b78b0fef27497bc1e0e4f", [{0x4, 0x1d, "aaeffb54434291f03687b425869f8bb1f118a1b1b077e38bef6c885243"}, {0x2, 0x23, "87be5a009dd005ba5904d5adc973b2a77c3ef232d6e4c306ebe98a7e89cded63d5838a"}, {0x3, 0x9, "943e1c5b0ff80c2d82"}, {0x2, 0xf, "70c46eececdcaa11d83ae932f3fddf"}, {0x1, 0x26, "f7ea336155335680593960297e35b122ffc38b47bde5740e8378d74355d39557a5f14d017465"}, {0x4, 0x24, "dd074052077a48ce35235b4c954266cdbf51430f2eae678663d59f75322f798cd9b49c53"}, {0x4, 0x16, "6b4fbeafb484f301e197cccff171a3b068f9a8a1d794"}, {0x4, 0x15, "6820ecc017578fdb17baa27aa54d7d271f2a9e5ca3"}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xb9, 0x2}}, @mesh_chsw={0x76, 0x6, {0x20, 0x81, 0x11}}, @ibss={0x6, 0x2}, @dsss={0x3, 0x1, 0xa9}, @preq={0x82, 0x2b, @ext={{0x0, 0x1}, 0x7, 0x8, 0x68, @device_a, 0x4, @device_a, 0x81, 0x81, 0x1, [{{0x1, 0x0, 0x1}, @device_b, 0x4}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x17f, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x20}, @broadcast, @device_a, @random="1195f00cd62a", {0x5, 0x3}}, @ver_80211n={0x0, 0x40, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x5, @random=0xfff, 0x2282, @void, @val, @val={0x3, 0x1, 0x84}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0xb3, 0x6}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x1f, 0x68, 0x40}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x8}}, @val={0x76, 0x6, {0x0, 0x80, 0x5, 0x343e}}, [{0xdd, 0x2b, "1f5ccbf097328c1ceaee82d84be746ef8dca41c14fe548747c16da5dad648a26daaae54f71cefaf3961366"}, {0xdd, 0x4f, "22f4dc737bd20784e91512916d58e4f73fb0954331e88a20b4fc677e328435d61014fac7c49537894649b360874c2359064a983ecf03686eb9bb800e1dc02eccfc7b68d2a1d20339f9ae48b52f3acb"}, {0xdd, 0xa7, "399944f1cb16b23b99773ac1c37bfb5c64135c4ae37b37587d2ee8f874cc799fbd3e880fe810fb5583dd4c927a5ed9de1e2c6fa95bfaba430c97830e01a9af1a1b12ae3717a978a1a8d5f273c47662afba277d40eba67d033ac9480e9630115116542885451d77dfa9259d0b3b0dbf8f8b9280984b2fae4ee8a35da54c7aa3c375da82f26694eb913d4896caf86634df2f473782f5d04f78c6d2ff240c2d961ce57884b9302aac"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xe2, 0x80, [@link_id={0x65, 0x12, {@random="e58779b795df"}}, @random={0xe0, 0x69, "50a53b901595f2d166280a6efa4d6683d3f7d50c0efd6f3e5b60f5ee69df6c9805701c2a30122eba0f2d7b8e21caaa4621641b99bfedff2862c96e0fccbca474991a88ffd5e3b4b26bf8366549cc50cf4e228ce36baa48c44f601d935121dd88b325ed45d94f0973c9"}, @erp={0x2a, 0x1}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x6a, 0x88, 0x2}}, @measure_req={0x26, 0x54, {0x40, 0x9, 0x9, "d66c90ca5a6298cc8975db7471055077694311781581fd8140ccadc4df0b4f1faeeacf6c39bf0003c4e71bcdc086eac90eefb15d4fee2a5b7812db980eaac255732f01d212b32fdbf2c8cc9ff3793444eb"}}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x200240c0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="94", 0x1, 0xff}, {0x0, 0x0, 0x78fe}, {&(0x7f00000001c0)="f0", 0x1}], 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x800) 06:44:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000000c0)="19c3b4d0b0cb3bfc8e562ad9f4b99b7bfc89fdf3023d09ba7ccfbca55607990c35d62f7e7fdc30c6c4c0ff15fb3be7afe6d8521a7067ac6bbe79b44a98dae682c7383cab21d78ad60998c9408bfcc0009cebcb814466085cf86db0ee6fb59acf075612f8bc6d689302c6bf1fba9fde26e5c64105e22ebcecfbc3fcfb3d49ee614c349accbd1f6c6fdc73cd0f9bf66ce30e40a1d1e7849a0f7017c219a76c3177bf5616eff1190151fe96341ca1232b3897785205af12f32273722beb48f4eed43576040e4afdf90967683593957b68b32fda4db7def367649449085969ee65dca22ec359c1200a", 0xe7) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:44:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="4240523c0559", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) 06:44:53 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x8, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) uname(&(0x7f0000000140)=""/132) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x2, 0x11) clone3(&(0x7f0000005880)={0x7b804900, 0x0, &(0x7f0000000280), 0x0, {0x3d}, 0x0, 0x0, &(0x7f0000000100)=""/10, 0x0, 0x0, {r3}}, 0x58) 06:44:53 executing program 7: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000000)=0xfffffffa, 0x4) 06:44:53 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 06:44:53 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000000c0)="19c3b4d0b0cb3bfc8e562ad9f4b99b7bfc89fdf3023d09ba7ccfbca55607990c35d62f7e7fdc30c6c4c0ff15fb3be7afe6d8521a7067ac6bbe79b44a98dae682c7383cab21d78ad60998c9408bfcc0009cebcb814466085cf86db0ee6fb59acf075612f8bc6d689302c6bf1fba9fde26e5c64105e22ebcecfbc3fcfb3d49ee614c349accbd1f6c6fdc73cd0f9bf66ce30e40a1d1e7849a0f7017c219a76c3177bf5616eff1190151fe96341ca1232b3897785205af12f32273722beb48f4eed43576040e4afdf90967683593957b68b32fda4db7def367649449085969ee65dca22ec359c1200a", 0xe7) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 260.645762] loop3: detected capacity change from 0 to 120 06:44:53 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x51) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) r2 = dup3(r0, r1, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x19, 0x2d, 0x8}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(r0, r3, 0x0, 0xa0103) r4 = fsopen(&(0x7f00000000c0)='exfat\x00', 0x1) fsetxattr$security_evm(r4, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x3, 0x2, 0x12, 0x3f, 0xa8, "f2c4f9162fb11c495d680f78aae1d8dce94bbbe152ee9552e30167c54bb8e0f8acb8ba25f5ced59f79922153e207f3491017cbd9f52734e3e578b86c271328d102061234e4fb41adff5056d0f88e77fb320fb7893bd0f35fa3742576d55b6d584aafe46cb23b509fd115db3252101446b905a9ae16ca6c1a709d8d6d15fbaea1d1ffb8bb8c526b4e4f3f98c8dcbb1480b47833b37561b0940c62a776b6e17a35e15718cb4a991766"}, 0xb1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:44:53 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) times(&(0x7f0000000180)) 06:44:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000000c0)="19c3b4d0b0cb3bfc8e562ad9f4b99b7bfc89fdf3023d09ba7ccfbca55607990c35d62f7e7fdc30c6c4c0ff15fb3be7afe6d8521a7067ac6bbe79b44a98dae682c7383cab21d78ad60998c9408bfcc0009cebcb814466085cf86db0ee6fb59acf075612f8bc6d689302c6bf1fba9fde26e5c64105e22ebcecfbc3fcfb3d49ee614c349accbd1f6c6fdc73cd0f9bf66ce30e40a1d1e7849a0f7017c219a76c3177bf5616eff1190151fe96341ca1232b3897785205af12f32273722beb48f4eed43576040e4afdf90967683593957b68b32fda4db7def367649449085969ee65dca22ec359c1200a", 0xe7) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:44:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 06:44:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001480)={0x20000000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x15}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000001400)=""/105, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x40, 0x81, 0x16, 0xbe, 0x0, 0xffffffff, 0x1040, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x12628, 0x0, 0x8d0, 0x1, 0x2f9e, 0x1, 0xff, 0x0, 0x1, 0x0, 0x4e81}, r0, 0xc, 0xffffffffffffffff, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414aa000000000000000000000000ac1e00010000000000000000002b58531cc253858bb1d03fc20a3373cb0000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500fc0100"/180], 0xfc}}, 0x0) 06:44:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x7, 0x27, 0x7, 0x0, 0x8, 0x100, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0xf}, 0x285, 0x5, 0x9, 0x3, 0x89, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff}, 0x0, 0x6, r0, 0x3) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x80, 0x2500, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4020, 0x2, 0x400, 0x3, 0x80, 0x6, 0x3, 0x0, 0xe7, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r1, 0x3) close(r1) 06:44:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) times(&(0x7f0000000180)) [ 260.912160] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. [ 260.932003] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.7'. 06:45:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x7, 0x27, 0x7, 0x0, 0x8, 0x100, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0xf}, 0x285, 0x5, 0x9, 0x3, 0x89, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x0, 0x7fff}, 0x0, 0x6, r0, 0x3) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x80, 0x2500, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4020, 0x2, 0x400, 0x3, 0x80, 0x6, 0x3, 0x0, 0xe7, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r1, 0x3) close(r1) 06:45:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000000c0)="19c3b4d0b0cb3bfc8e562ad9f4b99b7bfc89fdf3023d09ba7ccfbca55607990c35d62f7e7fdc30c6c4c0ff15fb3be7afe6d8521a7067ac6bbe79b44a98dae682c7383cab21d78ad60998c9408bfcc0009cebcb814466085cf86db0ee6fb59acf075612f8bc6d689302c6bf1fba9fde26e5c64105e22ebcecfbc3fcfb3d49ee614c349accbd1f6c6fdc73cd0f9bf66ce30e40a1d1e7849a0f7017c219a76c3177bf5616eff1190151fe96341ca1232b3897785205af12f32273722beb48f4eed43576040e4afdf90967683593957b68b32fda4db7def367649449085969ee65dca22ec359c1200a", 0xe7) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:45:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x1e, {0x0, @tcp_ip4_spec={@rand_addr, @loopback}, @esp_ip4_spec={@multicast1, @local}}}}) 06:45:03 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:03 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x8000000) syz_io_uring_complete(r1) 06:45:03 executing program 7: mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1) 06:45:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) times(&(0x7f0000000180)) 06:45:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 270.392582] audit: type=1326 audit(1762843503.693:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4604 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x0 06:45:03 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:03 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00') r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x3080) preadv(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/164, 0xa4}, {&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/180, 0xb4}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/205, 0xcd}], 0xa, 0x7, 0xcc) pread64(r0, &(0x7f0000001200)=""/135, 0xfffffdef, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x503080, 0x124) pidfd_getfd(r2, r0, 0x0) 06:45:03 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 06:45:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:03 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000840)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="643845ef30ec"}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @loopback}, 0xb, r7}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000db0de326ed27afb86edb7ecf520ef9cfd37f54a2e063e68ca6fc4752e3d7621fc832422dc99b3a31ff8550196236f0c43270a31428150311c0dbb03979fa45a280", @ANYRESHEX=r7, @ANYRESHEX]) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x393881, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)="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", 0xfffffeaf}]) 06:45:03 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0xa40024, &(0x7f0000000040)=ANY=[]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x2000) mknodat$loop(r0, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1) 06:45:03 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000840)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="643845ef30ec"}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @loopback}, 0xb, r7}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000db0de326ed27afb86edb7ecf520ef9cfd37f54a2e063e68ca6fc4752e3d7621fc832422dc99b3a31ff8550196236f0c43270a31428150311c0dbb03979fa45a280", @ANYRESHEX=r7, @ANYRESHEX]) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x393881, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)="c9a30aee2491bc1544648f8ebed193a188d62123d10418479b60e3255228771943f1263ac7a1a6fdb8670a0b554ee2a242029ac9cb89efc94eb37529b0e7a1009757f74f24e84a0b29aaa02d98acd5f1657b90cb6b56ff35653b78cc8c2171c4cb6a0526584c4418d08ec721ad52d3a843d9ee7b08212bb21a3689353b391f03935abca9118fd36b6dd36b56b236d95cfef1257cd371106a3ec8dbb8fb7c2d2053cde003671fd45da47a62ed33e50fd7389fceaabe0d8d46eb84e0d7866c83740270d9c214760397feab0b286bebbbca90f66d79e05cd565691ab5df757c5b16d01c4d5440fe15214e8b7cc91cd270f71a56e3d966b8c6e70814d03c91ebc8ad04e0640a096ce2b17d3962fcfe0a7038c31f271ddbeec82bd94643da1b9995bc9d193a4ca5d4253fbed6b5ab196ce9f0db26f3148a28abc26344f1618d14546273b7e2598455479b0dd87b6d82e99f1f71b5040d165da4b375b1d8426f29afecb7d75fb0fa902fe3a69c694a8c2dc7ad4e33368df829279405f695d95e729660f02a46d2baad5ca601a8bfa67d73d0e52647ab4f5a4818e48ac6ee62c826ac6039617d53962493820c1e4a292e4d24f3b9558d06103f275f34db11b5e63303b3a4421335241a40b0362a3af98605a766d25d001be3b1356ebeb2a0416056bb627ad05011e7bf102df9f34f2470dc0430667a9d93d2477035482da457457524cc", 0xfffffeaf}]) 06:45:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) times(&(0x7f0000000180)) 06:45:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001040)="f14cb85ea960f45b05ce46f14d853db85aaea7c76e577439db8fbc6254f4612bb2f1e4a159625e26a447ecefef7ae25e07b6932c6185bd0245569bcf36dd9896c9001d400e4a74310d5c84b290bc6eebd33a41ba78b1feb16f909823994a51bcdaea45bad5eb59a6eaa3f2f5080f2256423b6b0e7974e2a2b7a07798e777c7c952b1c45d0742d90fb1ae9a3e66acf4d4171c62538a5b7bba67c3a232a0b44def95bb7b52cbcea8689d48db36c60fdbaa5cacd6887611821319cc1dec4f6f784114b65cff282692570e0caf415d1367cd275dbd993dd990833dfa67943e3a63a377fb7cffaf0faa844be1ac2783254e76a641f7767a1d5050d9023e4f6f2e24bc36ddcf1b8d02eba863ec1edfffe5c124a2c3c3e18c7a2603556db415ebcf3d80657d8ff784100792198407fb435ab7b5080a579a41784ebe0965094db8b3257fd080f0c314070fae496cdb3d7dfb1ccfadf2cb84a97e503667954de703fde8b83d0c878b33fcbfb23c40a5bc6078358563282089500fecab24b7166fcb3c724e9ba6a32d379219683d0a5f6caacf76219f2ec0e0381b58bc5a0feca33f36270b3f4378b0d50c75b9df776253b818d02da2887e156ad477cc0609d24004a71a285d172fc23b78dd0a39bfb8f43f6afef738083bcbd9f1d7d7f2c709ff976abde5b83ddc71d01487d6bd8bb753b103760917388ba82f4a71cd3dc528f0f0646151d2bfd3dfa30345b3c993ddb071686489cbec4e05791a9851579f78830b4508f2dc74f56a7fedc4c5a9d4ca409acbb9328a9fd314ba15fee3b8410338e53342a42e9923c6ae0f6788add479cf9f39302c89578fa0b923f57259ae4365929a480e1b665074e49ed95605ae869a6c40b54366e4d4f6e3a7369b42f9a3fab1c1a3e87647c97aebae3591f211a706e9ae9a7a052ed205b2f5955fbed9da964943653f21bc6fce2bac4c6518dec27c5fad21fa4680fef062d4bde549779bfc9d09d4aa18e8435400c47b6270f8fedb5026fd5d63c826a9361e1b94abb1579f6c073451a9fc66420db30189858c066fab8b3fd4011b9167cd4ccfee9a60be5707fef20cc5928b5677d7b20f1619fceeffcc0ebefda9484af026175f7fe67f2d20e9a9784027eb772b0b72a65e06e1d59773122f4f9a0d32440f7001c01169087bfe6e302d079e8323659a49c46468875e33aae9e525109ee4ff5f408bec23e8fec3f6670a58721da3a4cc585f788d434b53bfead1de47dcef0ba22fc4b9c3726aaac11bc0f6dc5806eb3a501f49f4e7546877abf2cee10bf33a6d3ef6fc5e5fb90f2e6afaf5f2e60cc2a3dfcc9a16579266121331ed40194c7ce3b4fb65c6c57948655f07ce0c31ed2187fa26ef34fb75d38f37d339729363ed6f9f198767ca17c374980307f55d3b5086589e0b1d026ee228d37f69dd9e5d656f5b98712f46a5d3977e177acb67734205ae66fdb3766fd72b959444a8f52beea4b818e85900961af56cd52c6b83c2cd30511e37dbbf971ee1e1817bf2c46803e3646e670678405458cb6d2c0bde47cbe62e8d77641a0bf1078569b9afcecd9533d80fed5459ebc0847da9b904b4a129b228d4689c9450624cc253595eec373bf523f8d7fc998854469b5ec748c7c9b3d14c048efa5e3d23dc4bba930a966e04cef2922382da1b960ca5451695901a5ac31a1370cbfd99ea3bb7c28a96ab0a0134fd8d10ffa9f1da752d79816225b826d2e862810032052f8bcc44dcc4f0d923bccaf3c9e9e5bd18bb067f9db35e42987f62b0c08d5178b23d79c7d50ca853d1b0443178a16745d4214a8fef38084baacb883a5aee8ff4c7ceddff166b2d3c31274e2601fa51804382437ed798a9baa75014b117c3aa2693775834fbd5a2a2dd62dc0276d647c6cc6f8adee8bdff77698c68f175d6b2047f2959e6fe93d92a16ba808e4bce6b18fefdcd18f41026a680a449f10bdc5426f97e8226f103f4dab988310f5495bd7efadb8ce93ed089f8aae2542ad9ac930c9b8495366cfa8cd739b5915d6e97755cab54095359162efc084e9356faaae00ec57ff2ca56b4798f7a9a4e073759cac09051461035a7394fd65a93761b534bfdb0c5460bc15e51305a5696a226f36bdcc64a4bc22034cadb1474dc14e8b03d4e34c4aed461a9a698afd7765e0e204760a61d386fb9bc186af6b07cde48d034cd58e75237d00885842e5fc6ee001f68d75a27d6ab0c48584fc32b4d3d5bfc6f250f7b567df06bfb972a466a9c19e2db6d9a2c7b5f2a5911f3283501e81f784429ef9feff4bb861b65e7c524d921bc7c859bfd41d4b265061b2fc5217e42c13e4344949211c1ea3b154a39bd324b0b726f1b6654af9275c5c20b0aa768ea132ddb60dc5c07dc02398cdb0e51bb3052ece86466f1c2424b4158bd674208c189a2676431bdc30228e4c32fe05d80ab5495a0934329abce0a56a242a26fb7a3cca92c0d52a4a06e22de7445fa536a72b5dc9f434c230e5489270501a75b249c84318eb81205decdb7a3cfa90606ff96c2cbd45bda0ac469f1c4005bcaebe62a0bb9319c5ee0c20564c61a9ff43e8cdef2c10e438561d49af5c1ac5716c147ef32249763266bb26ffc217c0c8e1e172641ba88e116faf3304ead94168cf72a296a5a8eab14f4506cd3ace2a36d677a8a87be194a392fde2cc4d1c53070ff7fc8b0b0435378fd573fe0a137437eeb2278944281c5881269a96aa4e3665fead5f5f53106e6739a50853517a324e70c1d3f31d9f94beaba44c5db7aa3194400c792e3566c11be4df0551b7558133ef68ed72ca2a165314ab2d329ce646879d2685cff7a8f1f15691aaec3e50f2b73b2c34d614ba4079a3be371f81b885799252c1606c17723d9829008e06061bb9304cabc12e0dde3c2655ef5fbb4ac1d3c5c01aa76d091544da46078e3813e9baad12240f4cc4983e36f15693eb49c75326b5ae02aef72d38a912332eb261c03eeb9e83b5a0febe2aee98ce63ad836f0e8a206c7648fef4d8feb5b9dd7e75d6c8deb064a70cb01abe383ad0d843ea393204cb04abe5516009d71ffe7b1490024f75eff9f30880b6a2924099f982f656391bb471fe8ba51fc1b0502d5a501ce29d1fb04b7d163cc3361d3c5aa962840d926cf2c96845bc8993adf76cbe04162683e1e21830e68f26a539300565c37a51e34bd3950156fe635f7430b9c0f3f199e25ab1d73ce6f95f574c4fc8f7485f019d3dc9cd67a3dab8064a217e6aa84f697a854567e03ef26de159bc4db4a391ec9fd9cc5535e79450ea0866886d9bfe48c7bbc0855401763d47df8736bce85c3e10a6175eee921d99b2783dd3847b3f997c89cde0fbcca33bef798e5ac5af128c35e13556c6ce9c8fde78db6438a09813cf7e838c99339eac95753554c61d843275774161204a268608ba58812d39fdd98d1ac2ba20ccc989c62710bf4a95ea117e63e4d32c3c8eb31d6db9306c1153bf482a8e288da709b68f70f35518339185b21fb256f115f0ee127b23f995679ccae40a159b4559da602c8190b3b9da671d268bde6d23452bc6a67aad2e0f7947a240a5735ce9297356f4761ec7640f2a67989faa113a5d5550990c44932a717aad826f01bceb07488963ba967f3604e9e3b9770e639d57000e52c05f0df51a34c5cc08c73f2f500de7659525991553e275d5fe41907cfcf36783e98a73651ddb13693cdaed6398e2974d70bf4d553d00a92bcf4b3e4d034ee0d4188a1c60cbcacbbc728cf674d49cc8a624582b2f83627be99f892af9a258e386db8cb38cea073edf97ab40bde4d254bcfa10ec7c670140f032c8c55927ea0222e85a4f71ac5618fd0ce7aa842afaa9a1b62c2cddef706249689704717c9bd2a5352ac0d38e0a5a6472746963a130bf164d5bfc4d7fa0decfaf0eb18096b9e4373c701bd859dca6831685c165b3fbde58e714a6b0f5df70bdf51771e88e49450744a3692770f1c77748db173777208b7dd566ee05ae7f1d1a853879f29790dc375b2744834c3b6dc59b9f3f5a1c7da53782c5b4d17f6c1811af9dc8961dc35d6ba65ee69d16edc4c097c57e87665c5aa3d3b281cbc41f7841330a42913e50f8d16eff19e5a4a68b3e71273b7d3f71303a80663ebff2a85aa578d7c2ee192586d11cacc5c71dcc2a37ba14ed2c6fefa0c30e0249abe91817e4f6e689e2cb8e94dceacda567ac007dcace13b4920c53d98ba1331ffe84288bfa2253be7910aac9127d2a64cd75f34fd0ccf5204810292157da89f0de57b08fd1a5d394b39a3739797ede79363b592de992592f7e5a10800b57fbbaa1b26b4b1a77e9a20df467194c122770b804b5179b4c2d9518e234c8b5faa9bb9cb906a3e729afcc3d385532f6a1defc559279531720207dc3dcf7bd5dd81ed11eea6951f9a3f8b28475d3241fe4b0c53e1911accd850c76e21974b7d37a7db2f5b77e76547aa90fdbdcc6e556f866dcf34661a1d752ffe559d9c7b4a367ee252edf985ff23ce4b4927d4dc400999e6b48e4c874536cb7f712ebf09b2bf6a5c219a9939228794a91da2fd7739a4d81775776fc8154cfd45a22c562cc159c3822d268553c3d15fc60c7e0ed37f205bd93ebb94fd50e8718d88315e950fd7aa849e82ff1ecdf69f7eec290f3a00ce49e06dad59690277ce6918985fee4239a5b4ae0378c5950b257b257686c436865a76d66f7cb584802227ddd089e18cf684f055038670e802240af11a4c4d9fde0bb7d49a7136b265b93037d7de77b7042ae1c7bf661390225d1a1048db13ef9cde3e73afb90fc687f756e6670543c1b248b61cb1d99dfa1d506e4f52b5e7bfc76e39523e78ee5cf2f91d0770c5844bacde66c8b72538c271fcce27ceab5ff0fdabc61715a3d5deb817c4ec100128556c65e7fdab50cda13f1254e14d6496c317aed32d9077e5439fdf7c208367a8b474ccf4d3b76ff4db45f02758873ce343b04a62dd778e383ad545169a0391127b858447d969403e55dd649f6e1b89cba6daa406f67b45a2996e447145eb241b6be1f3e39fff2fd7b870e06d96d182acbdef13fc2e6e0a547177466f9beab31e7e4ab7595e19f83c58aabb09b9e77c1b085e9dd1c8b437847cb755288cf4ad62cb487d189d50a36f500f9f0469da4a760fa4ecbd457d5145acb6b55500b251dbc96f58895a99646bb7452117352dd89905e42a543768035251bdf7a1fd739f414669632804e2a9b661f7efbdf08dc3f5ef689ba3c0ef4d56aac578d80cf74a803c72ebbcb5beaac36f1e443f0c4a434327a079b9c88fc61da6f20681757899e2cd6af2dd2fa478dc2ded2fdc3aedf1bd183ae29b283ad18d690b4346c5f403861ac2939c4fd7fc8e5c09218e3e6ee0d21b156c39d625f08675205cd6ce2e253b8b1137c6a08fb567292e18611443625dc043f8685b0fc74424b6b6839aecfe430680724123b3c1ce26d13d52eea9be333fda24f614f3164925c938443a177d8cf3b2e33c53c7d2057a1c3542529b2ead311529ebc6f6b9a5e61f78b89dc8c88db0b5589ac0bd42e650d232dacc8676876223e52ef9d74fe8ebd96cffe7bf0e659089d47f57bed8eb5576c8e9bc49c13f20522138c276185b1c1a272694cf057bfa194a63622703dd7908df8921e70a3a1d1bb05e6c6fcd714a66742aa7118e04f66f57966aa12cc13bf66056d42b5f58a93ca4441ca893d5cf260b374c00713d69f6a1aa534d7394fe66da6a147054f384c589aab2f3acdb4774cd0e9f3f97353e81fc69e527f392c587753e2432c4e95239e564571775f80608aa38e47bec16d28c38", 0x8e5}], 0x1) 06:45:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:13 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="615b7c5262c6f3b630c9d4bccefb1f65", 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 06:45:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:13 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) io_setup(0x200, &(0x7f00000000c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004600)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000180)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000840)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r4, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="643845ef30ec"}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @loopback}, 0xb, r7}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000db0de326ed27afb86edb7ecf520ef9cfd37f54a2e063e68ca6fc4752e3d7621fc832422dc99b3a31ff8550196236f0c43270a31428150311c0dbb03979fa45a280", @ANYRESHEX=r7, @ANYRESHEX]) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x393881, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000480)="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", 0xfffffeaf}]) [ 279.818116] audit: type=1326 audit(1762843513.119:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4651 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x0 06:45:13 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x3, 0x224200) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x0, 0x5, 0x8000}}) 06:45:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fork() r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3, 0x6, 0xdf, 0x7, 0x0, 0x8, 0x40082, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x6d, 0x1}, 0x5090a, 0x3, 0x8001, 0x2, 0x0, 0x10001, 0xd7, 0x0, 0x0, 0x0, 0x2}, r2, 0x2, 0xffffffffffffffff, 0x0) tkill(r2, 0x31) r4 = perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x7f, 0xf0, 0x98, 0xf8, 0x0, 0x2, 0x10, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x3, 0x9}, 0x600, 0x100000001, 0x8, 0x3, 0x9, 0xfffffc01, 0x81, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0xffffffffffffffff, r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ffffff7f000000002e2f66696c650433"]) fallocate(r5, 0x55, 0x80, 0xf8) r6 = syz_open_dev$hidraw(&(0x7f0000000140), 0x1cf9e0a5, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x12) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000480)="c5952f834154b89f9cf58ecb030f106c0e2022e2d9e505d52e754f933babf33b32e22a4a28fbbdb2f793a6da0363577bf9627f1b167a73a30d733c3e30ec67483d33fd85f0c81d96ea8ec0e709a6327191ffc5e135c307add62d16dc2e10b89aa2561809844621edbbae6d7373772804d66f85178520102d025072dc24526c112a689fd0ad7456f7b9bb07339df70511c86ab386515e487f3938e425c02d0fffab59cc1a3ea60929328fc8065d91b2d8e9991eaa787725b93152efd152a433b339f62535f215f80ff3f2411e64bd751477f4fd9d4dd10299697e78bd39ed", 0xde, 0x80000001, 0x0, 0x1, r8}]) getsockopt(r9, 0x1, 0x4, 0x0, &(0x7f0000000080)) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r10, 0x1, 0x4, 0x0, &(0x7f0000000080)) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = epoll_create1(0x80000) ppoll(&(0x7f0000000340)=[{r1, 0x14}, {r6, 0x88}, {r7, 0x4000}, {r8, 0x2004}, {r9, 0x123}, {r4, 0x1}, {r10, 0x120}, {r11}, {r12, 0x4003}, {r0, 0x521a}], 0xa, &(0x7f00000003c0), &(0x7f0000000400)={[0x6]}, 0x8) 06:45:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000001040)="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", 0x8e5}], 0x1) 06:45:23 executing program 6: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 06:45:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) times(&(0x7f0000000180)) 06:45:23 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:45:23 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x4) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_batadv\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75a74b77}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/184, 0x7ffff000}, {&(0x7f0000000140)=""/178, 0xb2}], 0x2, &(0x7f0000000380)=[{0x0}, {0x0}, {0xfffffffffffffffc, 0x2}, {&(0x7f00000039c0)=""/4095, 0xfff}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x200000000000000}], 0x9, 0x0) 06:45:23 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r0 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="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", 0xfa, 0x10000000000, &(0x7f0000000140)={0x0, 0x989680}) r1 = dup2(r0, r0) mq_notify(r1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1cb3e5000032000000ff0200000000000000000000000000014c426e93d9a4ed4300000000551d895ee49bf84c4734a9111b00afaf63c749980ae5ff3ff115097fd415ece4bec0ec8b5ac6901c88987f09e63b600c00"/101, @ANYRES32=r1, @ANYRESHEX=r1], 0x28}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000003c0)={0x4, 0xfffffffffffffffd, 0x800, 0x6, 0xc0000000, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x2, [@rand_addr]}, 0x14) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000180), &(0x7f0000000340), 0x2, 0x2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) mq_timedsend(r4, &(0x7f0000000400)="914af8d5bfd889fd1670d1a922d61a638ec89f9608b5208a9e298b3784c0d940b7d632cd2112c99b919f4743d6c3438af2205066905adc26a7a4029cb7fd66c01e683b21dd466ec68ca14c16fe1685acbe57567a14987e2f6cf114cba2021fd668a9948393a6f2a0e36fe05ae9a8ac558c90e11ad5fb53ff21777da0f72f4b3a305e0328676400", 0x87, 0x0, &(0x7f00000004c0)={0x0, 0x989680}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clone3(&(0x7f0000000240)={0x61020100, &(0x7f00000056c0), 0x0, 0x0, {}, &(0x7f00000001c0)=""/96, 0x54, 0x0, &(0x7f0000000000), 0x3}, 0x58) 06:45:23 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002080)='Hc', 0x2}], 0x1}}, {{&(0x7f0000000000), 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1030abe3199a3cb8ec000000e4ffffff"], 0x10}}], 0x2, 0x0) 06:45:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007e40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000007f40)={&(0x7f0000007e00), 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xff\xff'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4890}, 0x40000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x41001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x7, 0x0, 0x0, 0x9, 0xfffffff7, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) r2 = mq_open(&(0x7f00000001c0)='{#:E,,\x00\x9e\\\xe5\x9a\x86{w\x1f1\xfcN\x85U_0\x96\x13\xab\x12\b\x00\x00\x00\xfe\xc6\xf3\xf9\x05\x8deeU?5\x19\x88\xef;:\xb2#\x1b\\\x98.\x04+\xa3\xc4:\xdbj\xfb\x0f\xf1\xe0y\xe8+9\xa6#\x1e\xf0P\x8c#h\xbb\f\x0e\x18\x87\xc4\n\x92zK/\xe2\x10M8\x9a\xf0\x02\xab,\xb5\xc5\x81\x99\x00'/124, 0x41, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}}, 0x0) r7 = dup2(r2, r2) mq_timedsend(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) [ 290.205148] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 290.244684] audit: type=1326 audit(1762843523.545:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4691 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x0 06:45:23 executing program 6: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 06:45:23 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "ec10eee31466aea8e6b4b009c8a329898f34854ab43d8c2bcf773f295da15fa458da89d536dbaa0dfd5e6f1bc0cc6fa868807fa016a872f48c729964e7cf118e", 0x38}, 0x48, 0xfffffffffffffffa) r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "80aa9b68281687a981c6ac0610efda28263613edaf4fa6e22b95aa45e587e40c4d36a219d56eadb9e66f91730fde647440660964a7a262661c16a42d9caef7aa", 0x1b}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0x0, 0xee00) keyctl$unlink(0x9, r0, r1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) 06:45:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:23 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30]}}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x301480, 0x84) faccessat2(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x300) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 06:45:23 executing program 6: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 06:45:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef0100010000009f09c75f000000000000000001000000000000000b0000008000000038000000c20201006b04", 0x66, 0x400}, {&(0x7f00000100c0)="01000000000000000000000000000000000000000401", 0x16, 0x560}], 0x0, &(0x7f0000010f60)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) openat(r2, &(0x7f0000000040)='./mnt\x00', 0x2100, 0xa) 06:45:23 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x4, 0xa41, 0x9, 0x5}) close(r0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f00000000c0)={'macvlan1\x00', {0x2, 0x0, @multicast2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000100)=""/243, &(0x7f0000000200)=0xf3) unlink(&(0x7f0000000340)='./file0\x00') [ 290.698991] loop4: detected capacity change from 0 to 5 [ 290.722925] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 290.757093] loop4: detected capacity change from 0 to 5 [ 290.760536] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 291.080763] syz-executor.2 (4701) used greatest stack depth: 23176 bytes left 06:45:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:45:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:33 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:45:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000002940)) pread64(r0, &(0x7f0000000080)=""/157, 0x9d, 0x6) 06:45:33 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766e76d6e3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) recvmmsg$unix(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 06:45:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:45:33 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000002505a1a4400001020301090244000101000000090400000002060000052406000005240000000d240f01000000000000001201090581032000066af7090582020000000000090503020000000000c47af13f3aa6b71ccdab6d1fa98e73eacdad9cc0c931eeeab494f98467eae2a019da7bb2ea15d09c6922c0754837bcc2161e9dd87f666223f0cba7c2228a70dd27f6c3349a720d624d26e6054e7b028ec2bcfdaabb21719f2ea2337c0078d189c87b5f07971ae5399fd313c44e4e52600c7b76cd99a08d732afba40d6cf7a90f25c30d6470273d7a"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 06:45:33 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x77cb) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x68, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x83b376d6b5e8769d}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x801}, 0x0) dup2(r2, r2) [ 300.063043] 9p: Bad value for 'wfdno' [ 300.082898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.095518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.103485] 9pnet_fd: Insufficient options for proto=fd [ 300.140914] 9pnet_fd: Insufficient options for proto=fd 06:45:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:45:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) (fail_nth: 1) 06:45:33 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x80, 0x0, 0x5, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) write(r1, &(0x7f0000005cc0)="6d91879015fe0289d4576982dc9055398f0d097a281a283b1866d6e1a08c098b867bb7d59ab9f849e0ae96d6611431b978f46f9a00a51466bbb5c81d4581cc27621a44b6071faad85a7715e957c361f4e93dd6271d2fbbcf3b54dda0dcb1f726cca6b9418674e811543425dc50e7d97d3cf580e659a1c497d0fb734174c4b73a4f4034", 0x83) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x5, 0x8, 0x7ff, 0x0, 0x9, 0x7f, 0x5}, 0xc) r2 = dup2(r0, r0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) [ 300.258546] FAULT_INJECTION: forcing a failure. [ 300.258546] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 300.260671] CPU: 1 UID: 0 PID: 4769 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 300.260700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 300.260712] Call Trace: [ 300.260720] [ 300.260728] dump_stack_lvl+0xfa/0x120 [ 300.260790] should_fail_ex+0x4d7/0x5e0 [ 300.260816] _copy_to_user+0x32/0xd0 [ 300.260847] simple_read_from_buffer+0xe0/0x180 [ 300.260882] proc_fail_nth_read+0x18a/0x240 [ 300.260908] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.260934] ? security_file_permission+0x22/0x90 [ 300.260962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.260987] vfs_read+0x1eb/0xc70 [ 300.261013] ? __pfx_vfs_read+0x10/0x10 [ 300.261034] ? lock_release+0xc8/0x290 [ 300.261071] ? __fget_files+0x20d/0x3b0 [ 300.261116] ksys_read+0x121/0x240 [ 300.261135] ? __pfx_ksys_read+0x10/0x10 [ 300.261156] ? __secure_computing+0x18d/0x290 [ 300.261190] do_syscall_64+0xbf/0x430 [ 300.261214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.261236] RIP: 0033:0x7f2ca89a369c [ 300.261253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 300.261274] RSP: 002b:00007f2ca5f66170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.261295] RAX: ffffffffffffffda RBX: 000000001999998d RCX: 00007f2ca89a369c [ 300.261309] RDX: 000000000000000f RSI: 00007f2ca5f661e0 RDI: 0000000000000003 [ 300.261322] RBP: 00007f2ca5f661d0 R08: 0000000000000000 R09: 0000000000000000 [ 300.261335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.261348] R13: 00007ffd8b6267ef R14: 00007f2ca5f66300 R15: 0000000000022000 [ 300.261384] sendmmsg$inet6(r2, &(0x7f0000005b40)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="b62fa0654d95ee84d708c6267126d48474529272fb50edcfaac80fad66d533b0f9aaaa6ef0819f20fe50f00f65b0f8d442dccf5126b265af3716e56cdb45c901e7f2553e6d5465fa1aa4e3fdb48bcbe3e42a7cc1828f60b68f8b5939839e5b943765092425bdc409b6f637fc624f130caa4004447404097b197658769ce52fa2e560a420b80bc73b242ccc1b1da6b436825d9300c8c7fd4dc59abbfe4ac12c2f232e5f0291485eaf15f73be1dcb6797bf15734581a09f404e31b36c3db0fe1a98d24d0095a885160227eb75db021b0e765317040cd796146661610c84c6af8f287fd700deba66caf2dae822c5de9d79671650b40b6b8", 0xf6}], 0x1, &(0x7f00000002c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xd33}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x29, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x81}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x87, 0x3, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x8, [0x100000000]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}}}], 0x70}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xffffff01, @private0, 0x1206f762}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000380)="180aa31c1dc6edc12b98424d24dc76b4a61106f7daf4d6a8d0e3389117d28fabb8160d640ce4969f5132a427e4e56365c123ad022dc74977e0b3a341308868335477074b7caadd9de75ef3c00eea94e68cb968d387226a5c61e388523c16d650b0947517076f46d3a6eac2e28de4d21fbc9270ee2e80af6b7acca145d525e433ae0503a98e5cb6d7c101cded96a1002b32558776875c4bf67cbea21ca6cca1c3f1f9aecce417db45f98eaf33cd65ca6a56", 0xb1}], 0x1, &(0x7f0000000480)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @tclass={{0x14, 0x29, 0x43, 0xff800}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000000}}, @dstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x68}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)}, {&(0x7f0000000540)="952751c363eedbed59ca3bf63bf60d12ca400e610d70ecd5dd053bceb742bb0a9aa29e528772b8f6938ef24d6033a61c12d4962e0a783f7cc9f0a13a3f539d94923bf4873ec35378dc2b8aee81533ed3ba3038d1e09cc77bbd5de026736fa259578d931d7a4a2efef3cc2eae3ccd1e20f8a72aa30c17522c92175f8f081aa8e08221c47a2040c53c062f1b5acf668508451646cdcd87acf7c42a131a87d7eb5fc7eb09fd4977322f561dd0650f109b84ac0c104a1000ca22aa5ec4df136bc1ca95eae4679ae7309f48a2b77f79567f4feb7b55e198fed2d564455f08327a52a9b827d249e6a11a12a21b9efdfbadb6764b1e0b95be", 0xf5}, {&(0x7f0000000640)="1bd57fd550861f1bc8f3adda11fa2b360d67a5b188f43f399c02d67e72e61b39d63061ad5b4737c4cb10eec59e22a8ab70aa3f8c91c6831e560f062247dc63965bc4a96c5900bd099cb8d6f45982c6f638e899e5871ae326ffb4d3e6", 0x5c}, {&(0x7f00000006c0)="8fa851f5439d4c884becc608dd910acd8eb7a023d67a19da861f50371918d3ba8dfa89fcc1ef0b4a05324fa9dcbc17bb6e49580421ba", 0x36}, {&(0x7f0000000700)="055e9779203247bd16fb05c42ab39e162017a6f185e3941103a9c1b36bb97c1244ad4f6ebe6c25345c1d674845c2b3dcb53574449e8807159e543b62c7715e82d87f7fcaf3545004276a0d13e05cded28c0151a6912d74e9ddd48c33af1d3d34369cfaf1057811084022cb0a78c74efb4b70023f43c448cbea788b579652530db169f4d80c6682a2bd6ab29c2e47975be068a49a6f6b94e71dee0ca7a6eaf66a9131db581bd5b5e2a1e1811c39ad8950c9c94f93e6f2d6882ecae4be4ba64f506f10b3c157422535a962741d17d610794d507737d5e30f8f5ae448313aaa5f538bfb28154d7ddfab94f26fda1935247428bda3be8cd1", 0xf6}, {&(0x7f0000000800)}, {&(0x7f0000000840)="f496285dd9c97db355fb93845feb9344755735ef32f9e5d63c74ab23e8a1ea87176986584758e9868e4d5f526ee4cf34220e13d4a0d8cacab9ed6b18018bcba31664e3ab84e0d9815bf0b4992dfee4437c7052e0a39dfaa00bb9915733", 0x5d}, {&(0x7f00000008c0)="79666523e8d3ce1f2d3e243914f0ef130a9a7c05204099446937a867261188da1a134cfb085cba13400de7f329ae589fc2571de8f796d08fbf3d06ca4474ea2cf2ae9782d635493c984240f92d7df73e21f993ae92637ac1f936e758fe3fdf7dc9ef23d56fd45f0ed8074ef25dada035456ac117441cebc5bc8278339c4f13fd11570fac7b24cfe91df01de6c0bb91a478716e2a6379c0c638f5295056d47e00a09d547b832edfea9af0672513c558305eb29fc415b0bdd6351cf1cb6df9d01a5e587e34a305e0eef873035375dee587d3a0b4731f4f357a905cdc16f2", 0xdd}], 0x8, &(0x7f0000000a40)=[@dstopts_2292={{0x70, 0x29, 0x4, {0xf5ebbd943a65f3a3, 0xa, '\x00', [@pad1, @ra={0x5, 0x2, 0x81}, @jumbo={0xc2, 0x4, 0xf0000000}, @calipso={0x7, 0x48, {0x1, 0x10, 0xea, 0x7ff, [0x45cc, 0x133, 0x1000000, 0x1, 0x4, 0x800, 0x3, 0x7]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts_2292={{0x11c8, 0x29, 0x4, {0x1d, 0x235, '\x00', [@pad1, @generic={0x2, 0xc4, "e30f412e355288cb89d080238328dcdb6a0d2c1eceb9b0a65b5f2dc94b8d557f3a0b3e277bc94a574418eb6f467214a2d221d2386ae90536879877738138f5f72b3e24369d4eec4244a8b2ef141fbe3f55b2d83bd4cc62388e6fdc005b3fd2dc9beed8ca31d7f0b8ae2aee1d44d3c2c5dc717896f0f784a4d6ad020fd5c97114185b519b2de216e8f06fd1cc851b3db5d207025e37bd101f3133f33f6e486583f770077009616bd47f7270bcf0c8967eb468c39652795b4052d7be43df77e112902c9bbe"}, @generic={0x2, 0x1000, "99522511538e7e755f493dc01f591671c5de241653a26215bd0db10ac668e05b4d987d3a69451ca66d9050307032807874e20afffc4a4fe151842ca88c8f64017e9362186c7d74667572fa2f0231eff469f7524809198f46410ebdcdbb40d8644e0ae5d1beb7e272643903a4646b9113f3cb018554b0b914fce6c289c78da4816f0952c7b435320969aa877bdff0db2a89255e5c578196ab05b8cc0b8331211e6f63d600cc128246d70a1054b9a7d2005df2a3e19acd2a63d644902cc90f98c5462cc08e2e96918eedeb41df273f001b4df054055aa6efedc219c96188909f5d57b92f0f9d7921c05d4587620c71d4eef4ebcfb2306e1c8dd65babaab9f3f19cd4f49d4e162e82f709b7b9a0d5ee744e6c9f321309c692d2eb3e2ec494c00d899115149ea7af7e79084fc7fb59c3fc1380258a60d9ddc082496bdc0bdfd19d9773a29fa09812a94dd484a5ca8d65f6bc40b9aa7debbef41cb9ae7aeabf1baf7530f8bca74bcc68b82817b3189a42ee9817beb93e824c23e7f7f193d142325b9345716b5a209cd43f5c61f7e19ae8689aeae76a16aac476613ebb335204b070ffaeb10239c764aeb47abf687267e35feb69fcb8553ad751aac2a1546899d1934146cf0646b4bba063cebf49c6b462870b467f21b8ba6cbac72c3cd88323cff2f0306caf935a0c7e2bc28f7b01f0f86da0b9968c0baa8b52ebf235353f11365ff132c8ad958fa2e7b27ecde04f8167f501719d66b16771801e25ebcda29144c040d488dce8e611c9f009a94e4df5c7b34df8d97a979617b7ef826aba9c7bcc34b90348bb081541a056d4c3c71d5db68fe076eb83b131c4ae683659fb3ac0a72e900f65cbfd0b6a345466f66f9a44d58d7453550f0f49aee126c5d92279817b9e3b3194f922839ff3917747220404c3abd0764f7067a4707d25c4880a8471ffe9e62e4d00d6941f2aebd339ea3684f4a4d9f600f90b5256aaefc2388c24b33f47aef54fcd770d1c4ab5e4c646b9d32ae5870c47555af76ecf9c4a9049115459e3f7149846d6edec752472b3b7b773fffa7b168fc90615f0b884e38e9aff331116dc038f96581e2dd229f60389efe7e337bde4d6aa4863ba06bdf70ffaa95e192c3c2d322b9448f8006d0a66caf5e291600d31298d378ed5fe8b09d30bd7de95250a0727e91711b7d815350accc70d4fba29a5d3faec7732cf77b27f6d80104f5263d413399ae0b4bbb71ff0f9d02935f69a2f4179d4c49e3c1f9294ba035a525f1e8a68f4b7bfc827ea758dd57c3d7d8f1e61bcf4d20043213cfc545301d5a15a1e7215f0087a4ebd51aa695397e968bc29a0d8caec94893be49a4d24aa513469d5d2b2a845d8bb0fd30675502766a1d85e6daf8d50c3300341a7789888eb2ebe2af878a275f7cbad2cfe4172e3f9bdf3cede7eaff19a644eb4dfa606bc67e4fea92d18c8906bc3a433434c0101e292fc80d8bce5d0306fd894ca4a6b22c17a257d8deb1d5e03031dd47d40d6ae0be62573bb4feae60103c02caae2eaeec5d582917ae0bde7430d00c11a85d4fbcf4b35dfa1933393a363a3ca4a6a4adefe6d41edf15269898e5ee44d4592cfeee70651c4013bc5a00c60d2e0a3ed928b15e976cb220c2a5fe58d8f46c8e0e2b0cb0da057f804008ace76b8aa5430295048713793661cc40a14a19af6ffc371b1b86582d109f6c721cd29b6f4aba5a4133f18f8cb8f6bd5d656c8dda2db09e86880dea9bd2ae1c2f1f3bae2d4ac29efd1a204dd0af266d211efb6c27b89ca7c9d4b97ff357a69e047e674f171b508c5e4e3e2a3211bdf554311c55021edcadc8bb00cbdf4aa27241be715b3676bd070b4402a40f2cfa634f2ed7a25bd5b10043e4da60132c5e24614ccd3a06765c6512a08efdd3a0c0225d8d3772732e062995eedbf50992143e7d2d8fc91e44fb585070ce527396e37eb51c1758d99cdd35932c2352a25c49b9acc43951cdb5c3f3b2e0714437ef62dcf0e980dcedc476ee3751c76f6a8f4b043b835e4199819d3b7c145f018a77ee11c1142a78cedb421f736a0039add6661093c3ce3184c766d4482010ac957e44391a8d588e1d6e4a576cd4936b3270c08409a7492e76f37960d42bbdffd33251e9881ba1aa4586182a52d4f32233ec6e739d25511f3bfcfdccc513fa6b6724b6a725b95a4c69bdb08a0af4c9f0c44fae5cbe9cc4da9ea6f11742dbf1ae28fa7526cfdd7f6e8baddbbf7d7561988ada15df6f723f0bbcd35f399f06d0cd1faab68583de07aff9ea8d7aa4ae8fcbdbcb9bbf4bf3c212b07d9e71e0142eb697eb1e9d452967c2fd53150b6679a086600f654081bc09a0a57e439f61aace7b2b710e1fa9ed06169991c33ee47142d87fecde013d012593978be315ca84a9f087088b19887c636a5341eedce860c7bd0ba3bb275bf75e672d658fffff5a3e1f18c2fd0ea989a21305dde465b2c8852ceca92aae39e08a76984c377308bb6bf01d5333668252703d8b04f1946d8505b37f53825a967f872c4f8888ad3ee9e87c5895b8bf14d74ef08f382418e84b7c177bf68138c3f844b9872417f1cdfc7446a9bafd0bc21b2a9ef84f4577af40c69d70c716a435fb7bacb95e3cd8d9adc33237b14736ee6aee56c4597b190e4876d414c638baf3eb2d1ecb5a76ebb8d2d8c1dd89b0eff05848c4218d1b572cf0effe013a6d605bb684ae49ba5a105f791dafb35a62a47f596e5576568e97843c1ae19789a56f6c77170c8ce5f6d5df636f2679301f3b8e647398c19da588f4a689b3829b470847083581af5e9a3f5da6c34b43ff127033735027f40aab131c12bce07b528ca9d2e2db7fd8d9d1a746340ccd1c5f762b97cabd684b0f2a7ec4d02ad68f58677ef9d0a409cf28307db8cc96902b6d75437ec0f8460791a80c173f139642cea64c72d308c3c7e60c7c38f8f80195c03fabb61c765217c17b74c65157a6c77a4ef6a31b49a19261a019935d4099cfd2b0aebfe7a5c122c1888fadcccff72e9624e46c4f8a2a43b226303cf8b3ddf8db6d6e644e2786dc7bd471d082d3ad018be66f7cb522e77b22a46e332eaf08f886513d3ddb25104c1579d785b111a889c939d216be652b28d5901d9e64f92a8c4e0f293d642710f71a60ab846f2f4ae204ff5b2f50873416500f95ad136d119ea1388c31aedb32d4b46a00b8fe3d235aa93fa43c4d1405a6479a0ccdda9de85179722696d8f965019c08b618990c8ca9fa50b32cbd5e44f43e24f4f36ec0a1ef0a71efeb6d3b075bbdf518ee70799233d684c14acd2815bb87819766555e3c694fcd5fc624f61e91ac5bcf34ce25e4aac07e698c40931eae5f44743032517509fae0d1591348d4a684061daea900bffd523d571e4713f549ab7eb7699649289cd74549bbab40095277cb0e7ba9102fd47a042156b907aebae47d926e54c98d67fe87a88aa7541b26b09a53bef9bc2fd01f2a9738b977de7e88fe438558f34959d100284d05052974a3ee9e6605391de0c508f3046a82e26b6e06298e6d210cc4a2e4efb37824b8c121b73c868d116e4c0c019442b65d24ed3ed4c979d6ade08dbd5daf0d9aa29a5c24df2e48d8cc3561f6e8deadbdd5865b0871e82987bf85ccc925ef27a0462fe299b7299b7d12534d2612b8e810eeea65e5fd52cfa1cbcd815656b844aaf52c20669a9dba1335c98ee5e99042a194cef873439203318b323420ec062449a8ee2dd8ce09445b18d0dd6169eaa20d2d17fcd701beda35393c1d7295ac18169d1b86e1a795f68d3c8be74323c82cc47f07ff6ef4040773aab5e00425ba4ddd1b2f70266943e3c5fb80f7b6f52ab3c448f67cd6da3da0ff938bf290bdea7ede7a9aaff7089c10554011ef8eb57c67c72f58eb9ad41b9719e321e95e237d413bf15f6e4fdfd6ac520a2288bb0261a4d65f9fdb659fea6b359619f4ad394f6f77c6993a57166a7a8b8f37b9b79f746d72b5db6ffc426d834203588371202642c4cedca0cba4064758c2a18abc24554faed46c7ff22f643d088eb0f475b24467c353c3aecfe6a6410cd51676c0fa82f568a0ab73ca63687847fb9742f11c70794c16965b01396c3b0fce352c94e418b3828e9d1c52ddc168150cf7eb4f414547ed0478d5f1ffe02f53d77d12a243e079403c589318891deb44b995cba492e9ed12e310a44b3e28d23d5855865e6da1fae0ebc98ec4aa9986453b058be8885e4e0ca8ef8a72e478e6b1af90de3ff7dc2182d3c4462ebe7232597ddcf934c87127a7d081d0b6a95fc4b739b7abfd8f8a3648eaac43ebd24e3b65df722110539d0908f1865075b94ee4275576291f3461f8d756351238aa9bb37dd4e908c9dfdc79629c3a7f5e9aa872bc5fe42d8c743480c5b73a3aa6e52273786597447fabd7cd6467a59e273eb5e15e76dabd0619f4fab4e841028389608cfefd52d3c47ff81d97f30cd042e8ac31347d6d9e3bdfca2e5ec261aedcf952e3ea958b0e52840bc909a27136d37c793e8a785a2dfe08396636d76a6ec344cf81fb1168c3695a888b7e6c5cbf3da63321211e488bb544e58b71d1db83f7ed316a6d6f9c86725491eba3cf19925ccdfef49f161876f5d32a5b6b2495c68c31bebe1fedcd0373ec0fe2ceae5ab5fdc4a4ff6ee555101cfcf53596afcfe0c4bab0c36f7d29bbc1a7cd5741786ac2ad2fc60436f6c729163b176151ff7e5d2aa36a3e87b35806d6f9b3307372063c2ac4baf0f38fb467be46479398cb87c5437a31c255ee49424109b5607225258a1a8d81748d9afe4256d140be2d04330b2e0199eb87686b77e655797cc15e22a818ee03fc0c26b71a6338dd6ad36362f912b07bfe348cf0debe52128efd2b732d42d340bbb69c103722a7c3baad6622635637b971cd4b6ccfd042600cc9fa763a457995cc67018839cdec5fe12c19e01722962e7b1cb851499835be2192183cecbd54284128929c216a9b18247a40db6c601e3603f1970157c84b1b176fe40a87b66c5112859cf06f476455501f1731733f0bbff9b8f4a109b2f6da0828a7541b1efd8cee2bc4f3882973a2be430af72f7d46a60b4f3c72bfa17479140a3179f141938a1bee188187feb32b460437b824eaacf7146ed078e9303f6def741aac3e7ea33ee90c1d8a36c1db300e4b2e79015c58b8f753ffbc0ea5e3ea49bfa364a8c46cf5c130fd917abc585e50c306705b42b49171c0e52f70fa4fb240070dd2b183cb33385e28aa7d42e2e2d84637661a127556b9114dd08fd30a65381242f449a20c2907e8a7f872d9d54d24e50afcf9c3b5f684b9b9e55ca9c609e7e438ea230fced752f88a468d1952640cf403b709d6104802d6a3a0eeb5665411d6fb77bed8d95cb07c4bb50f5ff1b151eeca42cddc75fe5c23fe5069c9cfefd3cc7bc67f29722cd107f170665e98825bda043b4c084057ea5db84b65eccb6f567d5cad53ed6c3b352157a37882dbcfe4489ff7f6230041aa09bb2c05640ea5e9e46eeda5f99fac65f9c3f085e62575049f340b70f92f66ae6625d95bee9f227176a5e12631125ceffe2b18d239cd453c492e008f5c2e9b7d74890478747f98c1c2c942ab200da59501855cedc731e34b1b9ec3263bb58d9916977afb770853650d7bb170a7a3f9d4440f90276123c8924c455e125b3be7a070442feed853420e7317a315e7d7a1f2ab70d458858720dd5b47220ce37bcd0befe95904ef3be16138673109ed16cc0e9ee6ead38679210177f96edde6825b2a0be91b8541cffe7b5c650498477242556dbc281e5619b11bedac82e90547fd4999593b189"}, @pad1, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim, @generic={0x1, 0xc2, "2bf6bb3adf32fc84327be628412d7370a2a6369c96ec50125e22ca1a989555aaadda38cb03d9dbbe35f1a6e761d926359be02cf814d658c7dc56e6cd72dac2c60daca46b2d15f7db32f4222e64a89860610f32b9fb5ad098afe2d48272204758a7e8d1d25215765b7cd41c96aae89b6a0de3cc6b7069e83768d1dc9609b4dc4001e460b4b7d7835a0fe227f40fd289e11ceec3726a40514f362f5ca895972e7dae1ce9847c737db3e08b5c826a41b349a66abe7c20437a89e81438f33dfed5c7f76c"}]}}}, @dstopts_2292={{0x1038, 0x29, 0x4, {0x2, 0x203, '\x00', [@generic={0xae, 0x1000, "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"}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5c8}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r5}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x101}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x22e0}}, {{&(0x7f0000002d40)={0xa, 0x4e22, 0xc0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7c589428}, 0x1c, &(0x7f00000041c0)=[{&(0x7f0000002d80)="aa48c670e36440bc6bed95a24e5788b207cd034c704d01da086b6dd5157fa31d8a84850cae3174bf5a1be75c452da494e30d84ffc4fa4026f71f2a6c800961e8b503b88d3fdfa474faf9fe199d8fda72b5b209b8504de08bd5270ed5c860c0052863fa4b9d7bf910ac455b4c219bb5b78999b77e2dc8d0dc8777e2d7c0f3d0ad2c1be839abb9dac07c022dde20636b50f0b8f9f78904a95491ef178497411e006eb6ce0b2ad8d5b7a23853d16070498adbfbfd98cd6d1b6e4d29f9255b5b65e6b19d31650d77f15900e154916bbe881baf", 0xd1}, {&(0x7f0000002e80)="4fc83d488c21622fd1dbefdb81389886a86ed8ea5a875e7c6a8bdeb2a381674277c88994c46868cc412dbe69c6f54e08d862e3cd76bc8ae52a4b79226543668d13cc", 0x42}, {&(0x7f0000002f00)="122eb0bf53bad6eed9804fc46114d5ec206009d11ebb30ad668ebb25c3e382c46937311b5c96ef832879568eb02bfb773bcd9fcc0fa8ff8dc46934c4f5c939d080564e98dd2268a05e03a1034eddd132a8014d23626e557f478070650e07dd5c0d77d4e13bbc6b93beddf37f8aef16db8ad10c0539b151c22352246e5bc5e2ebd14601e22640de8ae04b3ea8c8a640ced96992452b31d9befc474cffa146f5f51e5c553d65f74c8533619d66d457bcb88694c1937b2d15d64ed58e9259bdcd1be6052e385e4b971ed0c5", 0xca}, {&(0x7f0000003000)="7b4091800d37b39e01c6e12bcf60d6e39b3cb5b5de0926634789795ef0ccb023c7fb495f469f71241000cf19b469ab7de50794c996018437659eab2f2926b9757a1476e0b7c11d11e1928a7573946170639abf971aa2458ffd03b3f759588131c9998dcc80dbdda0bae64b97be9932a74f4ed6464300ece4e1524853344d9805b234266522a4a6218f2935a3ab74", 0x8e}, {&(0x7f00000030c0)="e53da07e17cdc77ff8da04542fa2dacd61f8436abc0186d09f7918bea2eec0b1e73606f65116662167", 0x29}, {&(0x7f0000003100)="910413d0bfdbe9eae491bc99f69194989c8c88537c67dcae32f206315a3db847e4c8f9b1f33a506a7ef1f31c80e53cb18f6537b0de339a5d55b463285a31bf8780476d1939d048c52591a3af3c4f18c84f1952e20c30a805a578d19e6f7cb037fa38ac9b3e7509873e7970ed228476f7bd39cc9214254385a2fad70ac29e007ec1e19cd7e5e9e85b01c00d5215f2fc7178eef6bd0636d80f899d0ced62cb22fc1b033a5bbe211e13852e2341a1841b3ad1", 0xb1}, {&(0x7f00000031c0)="8d02f598c2099c0981dc9aa096fc1675c60a612c6d4b65074796afe14819c4d97d475416e2f860f77e02b6f36fd502da15069eaa4f3688f72c5e68bf79f2855d92cb30758518987554c7f36e4c5319bb282203a5c361be66af2bbdaf7587ce4ca040313783c2b325395594369ceb695a8625692ad294615cb0a1bd28adf3cfd60d00b1254cbaae5fb03ec3303119554e8c6905a7628e66b5eb7e83e3f6db0d4f040b174aa74cd2823a1c9b567018c093b1e6993b4bd1a9aa5d6bc4fc369b7fa1915cd25fc4a471bc7356e5135d9291884a9bb904181d28ede111738f111b9e6af2ccee1693600ca471e6b7111a076a364f874410c2279ed3cf8e9a82d2ff9f771073ff2739e875adbbff75e7ebf4e80610ed48940ae71a9dd89a91034b13e11d098fa162b0a5b004b376c0d59abd93d9505dff1633f4d9f381f3754b54e0399d9aac2141efde348cab24b8c141abbb1fea5e4c0c5225d37ec0eb858ca0f3a267916f660391a74311ae035f0a477a3a03720563d6dea452dc5add000824a1144f9826a380f79a135936b5f5edca88c031cf516a6e26d38a4dd9c8fc651ef1ca3d85926057bdc9b0cd09662f15e809abcd2aeef6fbdb64e5c913ceb537e3f96c3cfa8d95cb2d510204e815b3a9c4304d72dbe1c75050b8c1f1a2b0087579954370bce5f90fb97c46831ea098f3d77e35d73a3b9114a7371049f489ae072b6dea7766f78ce98893c60e507fc595bb7e9addec1afb3ea1aad6983131f63321b787fd2b5372eb8fe1f2dc3bd91953e4e7ebc706f1eaa323bdf7c6f6afe739c4917b9a10296c88b440e13cbea4ef904e8f3bf7beb9c0a66f1320d511c75f89e24b714921e0f70e15ef2e545b5b8c1b89b7686972f29bd44ef7af8aa75de5a7240c53b84ac71b46cf3e9cd0de11d06fde277c295536d0f2b6809140b89f756fe050e553fc00c6f086bf48de14cc3649b838acf360883723b97b2f5ff8c715a49db6554c0d5c2579bd8f891e1ea80452224d54f26163b867608fadb3a5a53d619c93075a738d07140bfe17713065e1398ecfe4d0d9c28c5c9d1f313201a2848fcfe4ce3ae3518539607aba4a658fe01f1feb009b5d0032d7ba323e237a157bfb303a202b3abe79c0e313664aee174554c5b23fd199e5578a08b7cfd3edae682a6e8251dd93f5087e042f6268adaec002402ec7ca2254392fb05313b0ca5927c28fee064c6bbee1f98ee4c0dbd586af4a7ecb5281366a7501f52f8c07efec5ed72f6ad472f814554c79fffc620168337f65b8e6a3154ade4f3aa9311ec3545c254f18c416d67677bfd1ea0d3d657061b61a9b70d0b2480c19155a3d09ca9a58d73c5ba03e63c68cc9cbfd8cde6257d25d1fd8b9c8517033041e0f6be4fb1eb129f4369ced1805e4b00174e9e4689b9308ea5dc5d7acdefb2ee7954cf0392dcb002a590c69623a194a254eed3b9830b76c997bb1f828d94d619d4543ce191bc7c3198b27fb29f3cc6029bc3626382ebe402c7dadfb0d020fca78a40408faf68cbeea0923fcb792f410074f3aee7486a23fa9a45a8c19250aafb5157856f15cb5eb6f2aa62ec2af3ec1c37661642f8feee3412accf26666fd83a4647cf20cccb9d00205c97dd5a85504e3e80bc7e0083f42bf1b32db63e3b8790a71c6f312e9a1f711e052f6cc82d3928f1be5f0c2b3e4abb48b0f83d0961ce6d3f1c01e05c4fa44028ce592b0a956210843af996556b6e18fa5c41331ff9bdac17b88343c48fff66a7390048f6db60243badf4af6cc8e90517060f224e8f89b3193b4a183de0a7359cfb0c1d772ce82ed307461bc70768438d74d6cf19a5dd3c555ade502aed55522efc7be554e520bf0276461761e6de9106e7d895fe25a2df0d770dbcc75905ad434d8218914171ac98f16356edc2f1b8eced9fcbe43ee923039813c90f816722477de3dde9e5e6a2a6f60dee5d27bd5d76fc6042ff586f8f30299dc79ab8b1e1e615607b1e026e0960aae6a0a51217f8341d762622c335ebcb2bbf9764933aec511f8c5d06b61bda86cd973a1d3ebe226d9ab754a05b283e5a3ccaf49ea757499bad77b42b190abcb93cc95a5b40f7810540e1bfc26ab4c51954a9e85c32ee64c6318bd27874b15dabdde899c6fc864ae5117a54e6ebcf0ac74d8a39e52f2dea8168737699ca8c9853ed11a12e595240ec9a06309e38ce4dc2b3a3ffb1548b3dfd815b0337e6429d05233103dd40cf52ddcb7192f8852701a5b0c608028486220ad5b968f43925ca1d9bbd9775f7e7ab8990b84008443ffb0158050633adc59759a383c37d78d14e01d741a6c4865afeed57007162cfffcb06d3d79faac959560ff6aeff7fc56b0b52a28d10a38ebb79ccc5c6409c1aa9f859b13a96196100b89a63d8ef5563d3aaef7a0307f1988dd521f9d11ebda1b17d221c2cbcf57bf5a0dcc076d2488c775f94707fc3f37ceb79f65ad3ee13f3434104886d9615f84117dd9d2e3c4522a8e345d5c2ba7c506ed017e3f7ca1e0005586a0b0f0723e67d9440147e42822004b0c91659b5682fea669b79a57cd86827bba455dd6de0d2997b1f45b500c600595278bc49f96b2f7d759a4eb47afce5925a458876f583dcb7768bde04786e68b952bfaa5022c0fb899d281a0807f87dec4f0557b3fb781d2d74a685ae2f7cf06303025763dc1d9be1431c2062ad794aa53698d0377c9429d889eb694c5556937ef2315cfb4986896a603de89cad1522946872505f5479a93c0eb75ede67921dc732f9cd0828590b29eda63a3fbd1e4e86d732f333128958bad55305d7cb04945468732ffa79d4b2d96cad3d03762ab81bb77922381a7ca56ec18f56d5f1e0820cb3fbeb3902a82df0853553c3410f7b0e741f056d374da73cbfefa4410e8039da9c1601452c35d208db2f07692eadaa6e6eed941ae86ccf798614133dc095e314e0f87db038aee8539ecbf0f5877b7ad562a722a4a63c498433b716113cefbe333e382e224df20a179c87f632fb542d7370a039e44551fed60b05ab8091c28506402c16f8e254ca6e1a1eacb64c584b3e35b6a647252098d9eec46733aa83bbd7ba59d9e414bd637ca6455cfc44ea8da524b2f7550dce0cab7535f75180d64aeca1f43ff7d54c5144b59f7f9ed6abc208d88afec33bc61ea283913a0dad35ff8c88ae84aa0798e457982c53774a8b046f6b4c4abf95433e08e9535c3c733b85b37e5a0642eb99382f3b875597621c8a7a666526814273b8e68af90e3328b4d325edee220d6ecfcb8c5eb9c0c2fea041a6fca832ce4aa82b82d5aba5d9a1bb1509f2ef6d581e6548396fe0f7f141b3e93419695603c620fff0313bea2d4aaa146e2b3879dd10f69b29ac27aed03f3cf506ad49472546246f9e67a10638b51b68ee4c96f9ff4c753c556184ab2868f9fa40ba960984e9b4fe457d5fd3bd8c4ca19da6f1f0afb244ae1e642d88d2308016162d32d0df77e174e9f87449d55aad93d054cf131a25f957a9c39f3dff49fec289f209a83b6ff279d5fb4b3d9f1bc71ec50b2ffedad0d7b751beb403d776f7eb262568e5f14e21616e32f178b8ddddfa06a0b83794461ebd9e46c1eff95195dffe35ceb95abc84c546e68a55bd298fd3cd64236d4eda4d9da69cc538cb51674baa68e1113496c78aa0df64918bd79304aa2a1c92bca2fd71882012bf1c0459d6cc73252777d4b3c409c8c6b6f9d1d3c09d20049258bbf4217525850f3b2cc5a8888d2095a11ac8235b194068ad506907812cae9e636b283d4acd6f1a34d66f79d7cbd0b1e25c1beec27984b26bbe5c1edb3938563223c2088d017e556b2907121434d99696dbfbd8e1d58a4eb5c1fec3544e4b651ec171f90161feb74529882114809ea3587c14cf52af6f2fdfb1cf0502b619028a803a5083f497f189f756f5547bb17713fb79b1962625f7ae5b32df95800f5cfabea19e17a39ffdcda35b831eb9a80d456252ba32d44e1370cf9c8281e275b68ea71dd97ad656293c68eb88ac4862e6a914f8e02137c6c2d60140f3d458fd9b18dd7b1f12cd32ebdc06dbf26fe674dc380fd1065aeb7c4f32579a1d4526897803011ce30f811e5e29166c5e26f25685d4dc74eabc7e33b827f00ffb9676bf3e0460e6448214da13675d921004296f7cd90b86bb12f66348bbeffb697cc72928c04794555ea37176042fa78038449f3c2c6323b239c8fb9ba0054d753d4caea6b79d77258509845a7de2b6f5709d8570ab43211060b278377c6082666dab8a8dffdda87a30e74a8788d9ac0fcfa8bf9dec3f7e7fdde3d8558dc6a8e4ac467c512968a99815c3af08283e7158fcd860dec4dc239b968bfd65586b473be7eddcb2333eb9fc8dc2124d6d6f8226848b9aa1267120f3c4b613f5350377b083dc373dc770cc5aaed54bae49ddec77293d3eeed94a3ee9421445fbb9ba00d293282e091256cd7f5d1cdb7590d837884313dfe43497d653c989e6db87a8fa29c24a6f9560226a1b8771a70f198f3bba547797f3d4cbeb8713e6a655eafa623c3a10cc1c1fc67d1edb25a57f5d15c6c7eca1eea10d741b9e1e155a7b57e7e034a03ce6f7f82084a8e7cec836c865bdd6026de24fc17fb0d23ed57221bae6fa38221f2bf8dbd3707bddcfdcad1ddbea6a323e5d6cda1bbc6af3b5a9a645d4e88748f7fee1c1be480b815c49337e84e8bd1985ed133d15418b6da01254ca16f1c5a7483d7fa036d5350d9543429ed08c5bcc7691353e480e1cabfce1e20f2c7494dc9d8e153150d1a4f86cb79dec9c08cc2c35435b3931326270c4cce9f98cad8207288a299d8ad8569ce212039f054d1f9c3b25636b6510f053ab304c453d6ab97ac8ca5e8b4271512a2fa3233473219672253108ba59129b534e448d006a7300034212b0c15fdb0e5446c2826cb6ecc222aeed042bf0dcc80a5774e7d6e7230bee7619f1a21a671b2f3c738381b4361736f6c2bbc46d0b31171b76f026d851544cb1abe6b0b7b442e708e8d98f5cf6fe61818c04f4628e93623118889d194557216b672da47e611b1e653bbdd5ed5520cbd8341b54e57081d48cf7e948bc0a25f9c83c94a0b43ac694e20a9047811c62632cb8e8c2d15735f775ccbfa31146ea0746f49102d6c24ef3e6847acbbb3c343d9c3b7a54bfd0bf98c0b245649570b512a8966cb3d2d948262fdcf5187ad5aa6a68074f05c1167ed29a576a7ed64124fd68fd68a21561aec265e8adbbc763ef350569f0dfac4646174e14e826ac23b572b962f88976a3b1609eec8e5afce19c4d4230ebfb00392d22aa428c4c6d998fea40a80f5ae96039e4e5dd15b00e7f661fbe5a4e99887e209516080b2c7bedf851969c22ee3e8882b2ce1a907f6282b5dbd4a570a2ac3ed8299d6ec3d3e199211f2dadabdb718169b917b0659e53d13209000c6491c01c8f2078e08395b622055da2d02c3bd99e5840acb3b04ef6920c93dc17fe045186699c0713b57731c93e819f2594cc434d2505c412ea9b8d8b892864b3deaccf41b604ad9cca5fa432752c3c8dfd38accb520bd20420ca4d429a3affbbc382056e36f84884971c1a307ce2a7e7a785db06140425dce63b0b320d9b9eae2ba0a0220d9bb457e7ca206c408cc32aab51a1513ea2dedc01743f785ffab604ac39bbd924862d88e61b088ee8c4d77bde76d356c61f34add181898d25cb1fa403747be9c3d5252212531ab7ea2eea1ce5910ad9984048393c7e5e12501d82af468bf0c9ebd1074b2afaf2728607ee8576c08dba932efc2fcb8ac0b3bbc00c21c99ca8498bc13dff974cb", 0x1000}], 0x7, &(0x7f0000004240)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0xabe69d1b272f1b28, 0x0, '\x00', [@ra={0x5, 0x2, 0x5d}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x0, 0xf, '\x00', [@pad1, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x50, {0x0, 0x12, 0xe8, 0xdd, [0x2, 0x1, 0x3, 0x4124, 0x4, 0x1, 0x9, 0x6, 0x3]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0xd0}}, {{&(0x7f0000004340)={0xa, 0x4e20, 0x80000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, &(0x7f0000004480)=[{&(0x7f0000004380)="a78ed00fd99d0d58ff78", 0xa}, {&(0x7f00000043c0)="4902fa10272ff25f4102f1393065499dcb83d7f5b2260f9ff65144096f4e49af88112c88f03040f4453229150e0a2e950cc2671af8d423960669f1cb7d2ae7a9eb8784628e61aac39bdc2ede9b709fcff98dafc91d750e0e665306fe892038519808b38cd3fb22a8abd95a617dc9ecfd838ca707709aaed3d61786c3924409dfc680b8cb30cd23e619e43afa5cc276f7e02719b3", 0x94}], 0x2, &(0x7f00000044c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x58}}, {{&(0x7f0000004540)={0xa, 0x4e24, 0x2, @mcast2, 0x5df}, 0x1c, &(0x7f0000005980)=[{&(0x7f0000004580)="522fdbce0f42428599d0ac90bc3e128d9ba22b12d8c83bc71016f3ca2b40a437ed107286a5588be0e26680a4cb8400de1671e32cf205cfdb61216c1a", 0x3c}, {&(0x7f00000045c0)="d830b1dadf87edc604428f3c390ea8ec", 0x10}, {&(0x7f0000004600)="0c66ab5762c26846ccbf395ee9de98f1f8aa45494cded49fc47c8fa3ebb916d85914863bc4ca5a1565f3d4cda27f9d03a193ce428f64af3b65081a59d0e45f786b01a443cadf31603bfc276b49f50f20e3b2e2cb4e4a654485803a3a0ae96c5539744173153dddfba11eb4309e5b64a0bbda07b8ff89cc0a75393a096ca5db656599af812a6009579c88ae02d76f095d1b1aededf4d9d0daad4beb9430ecf915e0548da80e33f87bfba3aacd37538674f4b7a375617d5047", 0xb8}, {&(0x7f00000046c0)="dc0ac5384db10beaf732cf39558bec57e1bbcf632a6432fc215cac7268526d99d4caa9e5d8f46eb330b41527ba8ecfaefcaae3e0c372bd6e927a7c46578251e5ccf51f22fff9d2050cbea4aa444341f0392339ce3d8e11e3da82f4ab66350874072a30135e1770f00dc5199e", 0x6c}, {&(0x7f0000004740)="09512573845072121f2ec995d933b3734bd445c1d2324da38ede69be570e7d68fa5489362dfd44efd99af5f0eed0568c4031da973ebea8f5de6bbc7f8a5a89b7aa504814180161fbdb5b6cea6173010b0f80adc8430e8c435e694661348fa6516718a5dc45aa5ff348789f9f6f17beef8ead8cf8a85af623cd79c1f0fc788686a54d11fad9f6986cfc9518a9e1cb52132a6e5f7c5d663b756f6fa52fa1376141166638cd3c302ed9249d6704663e71c5dee5c416125223ea67c9547a4a49a137ee5ea57f0b510e2f750b7ffe220967a35af64762d8d54a4e53684a05c643caea8f9608474efdcd09144892587457d50080", 0xf1}, {&(0x7f0000004840)="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", 0x1000}, {&(0x7f0000005840)="07637d62321f29cf8222ea37bab026586528dbf1824fe2c043fbfb6a5116da98efbe1213b36935d468c6b407a3355a53ab7fcf8b3a96f9168e1599852e6a2ee8", 0x40}, {&(0x7f0000005880)="ac0d4b7401a06b19e2516a709223625dc4d348aa7e535af04a81a94e73ac93b6", 0x20}, {&(0x7f00000058c0)="c73806be24b1054efacc52417d5f8c157976d788d815ee04f64b077df57a946bcc8108fbf46679a954d5cfe86f45804da0ef3d992a2ec0", 0x37}, {&(0x7f0000005900)="0ba43a644bf1c2135b0b23e82b839e33ef5b7fff99191d7167ed188e545aba5cbcac3eb727f8c191657951a0e9076b8dfab337055da0e0fbac55e506ab1732d1e324440ea0ab6fcbb3352df15793ded07d3c166a03", 0x55}], 0xa, &(0x7f0000005a40)=[@hopopts={{0x58, 0x29, 0x36, {0x11, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x40, 0xa1, [0xffffffffffff7fff, 0x40, 0x80000000]}}]}}}, @flowinfo={{0x14}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x52, 0x7, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x40, 0x5, [0x40, 0x7fff, 0xdcb, 0x9, 0x2]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x6}]}}}, @tclass={{0x14, 0x29, 0x43, 0x401}}], 0xe0}}], 0x6, 0x8004) 06:45:33 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0}}], 0x1, 0x20000850) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r1, 0x0}]) 06:45:33 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 300.344668] 9p: Bad value for 'wfdno' 06:45:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getpid() r1 = pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 300.517171] 9p: Bad value for 'wfdno' [ 300.638930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.641789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:45:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:45:42 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32323330373039383000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e8f7d2e8feeb4bf889ba053b02420ff8010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000000680)="00000002000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000004300000000000000d6991f3e64a473f44eb46a0b79cacb9a496001ec5f76bd1b5bda8661f334397642a03bccf2c2c2dd2a131b28f86c514bb7dcc03cd202c1fea6b3dc9a9378590525e7a9cb4e96412e542154ccc55b8e35b398fefd090dda9bae07bca0fa13e78536602b425a37c09209a8eb3ccf", 0xad, 0x540}, {&(0x7f0000010300)="02000000030000000400000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f00000005c0)="ed41000000080000daf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011600)="20000000641e8ebf641e8ebf00000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011700)="8081000000601020daf4655fdaf4655fdaf4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000daf4655f00"/160, 0xa0, 0x2600}, {&(0x7f0000011800)="c041000000380000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000020000000", 0x40, 0x9}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f000000000000000000000000000002ea00"/64, 0x40, 0x2a80}, {&(0x7f0000011a00)="ed4100003c000000dbf4655fdbf4655fdbf4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000904a5ec200000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011b00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000046b58a6000000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011c00)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3232333037303938302f66696c65302f66696c65300000000000000000000000000000000000000000000029d1c2e100000000000000000000000000000000000000000000000020000000641e8ebf641e8ebf641e8ebfdbf4655f641e8ebf0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011d00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011f00)="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", 0x100, 0x3000}, {&(0x7f0000012000)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012100)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x10000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000000600)="000000000008000000000000000000000000314a6a89221bf809e71415ad456107db3e4d3c660c8af79e68d221902b195b60d63743d0cce744171ac72d371e69b703be9e6ed412d58be00671ee5142996b1836", 0x53, 0x13000}, {&(0x7f0000012800)="504d4d00504d4dffdbf4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033320075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x28000}], 0x0, &(0x7f0000012e00)=ANY=[@ANYBLOB="80"]) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r3 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x1, &(0x7f0000000140)=[{&(0x7f0000000480)="68dd79246d01625b3b470ca9155e4dd67d27134bd501375bbb110e79406fd69dff8900bb4cf9f372c4793e95b6dffa5addae6496cf4037dde87c5c645c163c8889606c45d7dffcaa3ef75da681181ce3e74bba89130257de628b36fba8d95c17dcd68cb3e640723f693971d82169739ab950ffe8bfafb9670b5e804043235f360adb24ccb27e08e91c9c7c7879b184750f7302acab9294493a10e78300da6b5e19831cca9c8ad8d30166a2181b48edd4735dafed7a5d43195ed2d80be63871720d233e9ebd2f2258e192d22e6827ced954fcd8f7ae6c2c0ec3581184a6a9b22b73532fbc74", 0xe5, 0xafa}], 0x1108008, &(0x7f0000000180)={[{@huge_within_size}, {@huge_never}, {@huge_never}, {@huge_always}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@huge_never}], [{@uid_lt}, {@hash}]}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r6 = dup2(r5, r4) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x80000, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r7}}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'uid<'}}, {@uid_lt={'uid<', r1}}, {@seclabel}]}}) creat(&(0x7f0000000040)='./file0\x00', 0x18) umount2(&(0x7f0000000580)='./file0\x00', 0x4) 06:45:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:45:42 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fstat(r0, &(0x7f0000003180)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x5602, 0x0) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) 06:45:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x40) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x3, 0x0, 0xa1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x134, 0xff, 0x1000, 0x4}) 06:45:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000), 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:42 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') pread64(r0, &(0x7f00000001c0)=""/159, 0x9f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) lseek(r1, 0x1, 0x2) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000080)={'\x00', 0x4, 0x2, 0x9}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x200, 0x4, 0x2, 0x6, 0x80000000, 0x4, 0x2, 0x0, 0xfff, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0', [{0x20, 'wlan1\x00'}, {0x20, '-*(:)/'}, {0x20, ')&$#/:'}, {0x20, ':^#'}, {0x20, '\x00'}], 0xa, "339250d49029b5d1a3553ab21cda03ea33d6e829f559e8589e3b5889e64b1702995f5f7356af0848e3b0529f1dbdf260d76226ea452da1c4a357313eb50cf59ec275829e6f9636b874a2b11bb182bfa7f2c2ab02370b5bad47717b8ce6aced9ccbdf9a2d96a96c3cf23ea3b5603a714eeddab95c06c13a01b29243a3858fe2735477048b66d6960dcc0327e519b9cc6e0772b3444c8d67f271994b138d1b37ea59735dcc921795784870fea1835093538936fde6e7bf0b46a44b98ca25a1f9efaad2df4afd7b5db012c7e34d779256533e8364d894f3361c9ac331dc89659c80e5"}, 0x107) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r5, &(0x7f0000000fc0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000050) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r4, @ANYBLOB="010000e7e1ff0000000000aaed00000002e3a6cc6217", @ANYBLOB="63ffcc540045606e73b99d94f767c81b2e89a0e8fa363372a6111f0faa5e97c6aa143f3585e07eb462e392f7267b890ce7e516c95b01275cbe63b4b4d75c33edc20834f6fa22ee2ba03be79742102deb911ee1f6ba83c1fdc88d456d3fbd6a27f9493a6261ad81c4f5ccb79789e2f99b18699edd4278ed04d479e467e4e670c52326bc505037d5ea66c97712fb168680cb868584dc166a59c8af2887046c0c188249367deb5d548155d652bdfc469db77601dea0915cae411a67f0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8d4}, 0x8010) syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') 06:45:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:42 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xa, &(0x7f0000000100)=[{0x0, 0x66, 0x9, 0xfffffff9}, {0x3, 0x7a, 0x9, 0x3ff}, {0x100, 0x1, 0x4, 0x8}, {0x2, 0x6, 0xc1, 0x100}, {0x2, 0xd9, 0x1, 0x30000000}, {0x8, 0xa, 0x6, 0x1}, {0x7, 0x5, 0x7, 0x1000}, {0x78f, 0x5, 0x0, 0x6}, {0x4, 0x0, 0xff, 0xffff}, {0x0, 0x2, 0x0, 0x1f}]}) times(0x0) 06:45:42 executing program 3: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) r5 = geteuid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@fscache}, {@access_user}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_fscache}, {@uname={'uname', 0x3d, 'user.incfs.metadata\x00'}}, {@access_uid={'access', 0x3d, r7}}, {@cache_fscache}, {@mmap}], [{@dont_appraise}]}}) 06:45:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000), 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) [ 309.679641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4823 comm=syz-executor.4 06:45:42 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000ab904ec1d3055a163e47ad181e559cc2b7c25870b4a79e843965e5c257b07dbaf5e9fcf10903", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file1\x00']) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000240)={0x1, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e22, @empty}}}, 0x108) r4 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x1000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='\'%-}\x00') open_by_handle_at(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1600000002000100ff"], 0x0) 06:45:43 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) times(&(0x7f0000000000)) 06:45:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:43 executing program 4: ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000000)) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) 06:45:43 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000), 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 309.990516] EXT4-fs warning (device sda): ext4_dirblock_csum_verify:375: inode #2046: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 309.993212] EXT4-fs error (device sda): __ext4_find_entry:1624: inode #2046: comm syz-executor.0: checksumming directory block 0 [ 310.040289] EXT4-fs warning (device sda): ext4_dirblock_csum_verify:375: inode #2046: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 310.042751] EXT4-fs error (device sda): __ext4_find_entry:1624: inode #2046: comm syz-executor.0: checksumming directory block 0 [ 310.279473] syz-executor.2 (4804) used greatest stack depth: 22952 bytes left 06:45:54 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x145c02, 0x0) ioctl$CDROMEJECT_SW(r0, 0x5326, 0x0) ftruncate(r0, 0x7) 06:45:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x80000000, 0x4) sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000000c0)) 06:45:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:45:54 executing program 1: splice(0xffffffffffffffff, &(0x7f0000000080)=0xc, 0xffffffffffffffff, &(0x7f0000000100)=0x6, 0x4, 0x9) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x101, 0x1f, 0x3, 0x5}, {0x2, 0x8f, 0xca, 0x4}, {0x7ff, 0x5, 0x2}, {0x3ff, 0x20, 0x81, 0x8}, {0xffff, 0x0, 0x6, 0x3c}, {0x800, 0x6, 0x2, 0x1}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, &(0x7f0000000240)}) r2 = fcntl$dupfd(r0, 0x406, r1) times(&(0x7f0000000240)) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x1, 0x81, 0x11}, {0x8001, 0x8, 0x44, 0x9}, {0xe000, 0x4, 0x0, 0x35}, {0x5, 0x8, 0x1f}, {0x7ff, 0x2, 0x6, 0x5}]}, 0x10) fcntl$setsig(r1, 0xa, 0x32) 06:45:54 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x101, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x0, 0x0, 0x10000, 0x0, 0x0, "9eca256306963dfce56414d7943339a8adc0df"}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) read(r1, &(0x7f0000000100)=""/136, 0x88) 06:45:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:45:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000000fc0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x2, 0x2, 0x0, {0x8, 0x4, 0x0, 0x40, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x800, 0x4, 0x1}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x3, {0x3, 0xff7f, 0x9, 0x4}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000000fc0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="e1e7605f8bb1"}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_KEYS={0x34, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "25b5cd2f685085baf49115db"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "664f3cbee5107deeab758c98a2"}]}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r4, 0xbce, 0x9, 0xf60}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @initial, {0x9, 0x4}}, @ver_80211n={0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x1, 0x0, @default, @void, @void}, 0x22) 06:45:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:45:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 321.168546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:45:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) times(0x0) 06:45:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2271, 0x0) dup(r0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x46, 0x8, 0x0, "396d81a674c10526a6fcd604dbbf7b5d9e1641a86ea8d1778d7a29987a59309ead446c16bc129060a2c6060b608def022546f3b6ad4bf6f2e53c8f1e895ee26986b43cccf428"}) 06:45:54 executing program 7: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0xfa, 0x9, 0x4, 0x8, @dev={0xfe, 0x80, '\x00', 0x25}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0x9b89, 0x20}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r10, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x104, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x400c001}, 0x81) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r11, 0x5, 0xfffffffc, 0x4, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 06:45:54 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@updsa={0x3b4, 0x1a, 0x400, 0x70bd27, 0x25dfdbfc, {{@in6=@remote, @in=@local, 0x4e23, 0x6, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x2b, 0x0, 0xffffffffffffffff}, {@in6=@private1, 0x4d4, 0xff}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x7f, 0x0, 0x2, 0xf9f, 0x4, 0x4, 0x8001, 0x81}, {0x6, 0x1, 0x2, 0x2}, {0x7fff, 0x5, 0x4}, 0x70bd29, 0x0, 0xa, 0x4, 0x4, 0x6}, [@policy={0xac, 0x7, {{@in=@broadcast, @in=@loopback, 0x4e22, 0xda, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x87, r8, r4}, {0x4, 0x800, 0x1, 0x7, 0x3, 0xfffffffffffff801, 0x7, 0x3f}, {0x1, 0x8000, 0x8, 0xffffffffffffffff}, 0x3361, 0x0, 0x0, 0x1, 0x7}}, @sa={0xe4, 0x6, {{@in=@multicast2, @in=@loopback, 0x4e22, 0x6, 0x4e24, 0x2, 0xa, 0x20, 0x0, 0xc, 0x0, r5}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x6c}, @in6=@mcast2, {0x8c65, 0x7f, 0xfffffffffffffffa, 0x3ff, 0xa0, 0x100, 0x8001, 0x41f7}, {0x4, 0x100, 0x10001, 0x6ab}, {0x8, 0xffffffc1, 0x2}, 0x70bd2d, 0x3504, 0xa, 0x4, 0x8, 0x4}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0xa}}, @algo_auth={0xef, 0x1, {{'sha256-ssse3\x00'}, 0x538, "9e570a85ff8bb0ba9fd868d78290aa61efef8005d8b77318200d540e99ae0a6b7587b46218819fb85daaa7322fea9ada76a3d9a425410c030ee41542ca9d97ee727b512cf1de91681db991f62315cd834b16d83d868215d9a27443a2a171c4481d87f6c3a9b5627394afa9be1e734a5e67e600006ee6c427b01adf8dd66a76d4137447d431abb9cae5732bb6786d462f5839f4d56a0282e11d3e2f3dd269a9c68f5e98d27a0829"}}, @lastused={0xc, 0xf, 0xffffffffffff5704}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}, {@in6=@private2, 0x4d6}, @in=@loopback, {0x0, 0x0, 0x0, 0x40000000}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x4) 06:45:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 321.300576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 06:45:54 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 321.403509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.191560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.197504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.237188] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 322.240893] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 322.350958] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 322.460940] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 322.565037] wlan1: authentication with 08:02:11:00:00:00 timed out 06:46:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0) 06:46:04 executing program 4: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, r0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r1) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, @fixed}, 0x8) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000080)={{}, {}, 0x0, 0xb}) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x20, 0x40, 0x1, 0xac, 0x0, 0xd99, 0x15400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x2000, 0x2, 0xfcd, 0x1, 0x0, 0xffffffff, 0x5, 0x0, 0x7fffffff, 0x0, 0x40}, 0x0, 0x6, r2, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r4, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) sendfile(r4, r5, 0x0, 0xfdef) 06:46:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f00000009c0)={0x0, 0x0, @status={[0x8, 0x4, 0x8000, 0x8, 0x68, 0xffff]}, [0x8001, 0x9, 0x5, 0x0, 0x9b8e, 0x100000001, 0x1, 0x2, 0x0, 0xe24, 0x4, 0x4b, 0x3, 0x5, 0x40c5b639, 0xeea1, 0x5, 0x8, 0x800, 0xa82, 0x1, 0x180000000000, 0x3, 0x9, 0xffff, 0xff, 0x80, 0x121d, 0x0, 0x265c, 0x8, 0x4, 0x10001, 0x7, 0xc1e, 0xffffffffffffffff, 0x6, 0x7, 0x1, 0xfffffffffffffffd, 0xfffffffffffffff8, 0xffffffffffffff01, 0xfffffffffffffffe, 0x8bcf, 0x0, 0x4beffa56, 0x1, 0x10000, 0x0, 0x81, 0x9, 0x9, 0x9, 0x1, 0xfff, 0x100, 0x3, 0x100000000, 0x1, 0xfff, 0x2, 0xfff, 0x100, 0x7]}) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x4, 0xfffffffffffffffe, 0x10001, 0x3}) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') 06:46:04 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(0xffffffffffffffff, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:04 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x82}, 0x0, 0x9, 0xffffffffffffffff, 0x0) 06:46:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000fc0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x54, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @void, @void, @void}}]]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60004184}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0xb44, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0x7}, {0x2, 0x9}, {0x6, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x5, 0x1}, {0x6, 0x2}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x9}, {0x2, 0x3}, {0x7, 0x2}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x16, 0x4, 0xc, 0x24, 0x36, 0x16, 0x18, 0x36, 0x30]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x3}, {0x5, 0xa}, {0x5}, {0x6, 0x6}, {0x6}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x8}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x25, 0x2, 0x1000, 0x2, 0x8, 0x6b]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1}, {0x5, 0x1}, {}, {0x4, 0x4}, {0x1}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x6}, {0x4, 0x5}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x4}, {0x5, 0x1}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x5}, {0x3}, {0x3, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x3, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x1, 0x4}, {0x6, 0x1}, {0x0, 0x4}, {0x2, 0x9}, {0x6, 0x9}, {0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x0, 0x4}, {0x0, 0x6}, {0x2}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x9}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x1}, {0x7, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x0, 0x1138, 0x4, 0x7, 0x62, 0x20]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0xb0a, 0x8, 0x101, 0xd0d, 0xa101, 0xe5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x1c, 0x6, 0xff, 0x1, 0x1000, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x40, 0x7, 0x7, 0x9, 0x8001, 0x5598, 0x7]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x20e0, 0x8722, 0x1000, 0x9, 0x4, 0xfff8, 0x401]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x4}, {0x2, 0xa}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x4, 0x2}, {0x1, 0x3}, {0x0, 0x8}, {0x2, 0x7}, {0x3, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x0, 0x8}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x1, 0x4}, {0x4}, {0x3, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x8}]}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x6c, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x0, 0x4, 0x8, 0x3f, 0x6, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x1, 0x6, 0x81, 0x0, 0x3a, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x2, 0x5, 0x2, 0x5, 0x239, 0x7, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x4, 0x3, 0x16, 0x2, 0x60, 0x6c, 0xb, 0x3, 0x48, 0x30, 0x16, 0x9, 0x30, 0x9]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0xa}, {0x2, 0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0x3}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x5, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x6}, {0x2, 0x3}, {}, {0x4, 0x8}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x5}, {0x1, 0xa}, {0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x2, 0x8}, {0x6, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x2, 0x1}, {0x4, 0x7}, {0x5, 0x5}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x0, 0x7}, {0x2, 0x6}, {0x5}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x5, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x5}, {0x7, 0x5}, {0x6}, {0x7, 0x4}, {0x2, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0x3}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x8}, {0x2, 0x8}, {0x0, 0x5}, {0x7, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x9}, {0x6}, {0x3, 0x5}, {0x6, 0x2}, {0x4, 0x7}, {0x7, 0x4}, {0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0x2}, {0x5, 0xa}, {0x3, 0x1}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x0, 0x5}]}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xa9bc, 0xfcce, 0x81, 0x0, 0x8001, 0x0, 0x8000]}}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x4}, {0x5, 0x8}, {0x3, 0x5}, {0x1, 0xa}, {0x6, 0x6}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0x6}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x5}, {0x2, 0x5}, {0x7, 0x2}, {0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x8}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0x2}, {0x4, 0x1}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x7}, {0x5}, {0x3, 0x5}, {0x3, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x1, 0x4, 0x0, 0x3ff, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x4, 0x8, 0x4, 0x2, 0x3, 0x2448]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x30, 0x2, 0x14, 0x24, 0xb, 0x1b, 0x36, 0x9, 0x6, 0xb, 0xc, 0x24, 0x18, 0x24, 0x9, 0x60, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x5, 0x9, 0x2, 0x200, 0x8bf2, 0x5]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x7}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x3, 0x9}, {0x0, 0x8}, {0x2, 0xa}, {}, {0x5, 0x7}, {0x1}, {0x2, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0xa}, {}, {0x2, 0x7}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x2, 0x4}, {0x4, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x4, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x7}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x1a}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x6, 0x8}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xb, 0x9, 0x3, 0x0, 0x16, 0x30, 0x6, 0x18, 0x6, 0x9, 0x9, 0x12, 0x60, 0x6, 0x60, 0x4, 0x1, 0xb, 0xb, 0x9, 0xc, 0xb, 0xc, 0x1, 0xc, 0x6c, 0x9]}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x40, 0x5, 0x1f, 0x2, 0x6, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x6}, {0x5, 0x2}, {0x2, 0x6}, {0x5, 0x2}, {0x5, 0xa}, {0x7, 0x6}, {0x3, 0x7}, {0x2}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0xa}, {0x4}, {0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x24]}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x2, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x1}, {0x2, 0x4}, {0x2, 0x9}, {0x5, 0x7}, {0x3, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x6}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0xa}, {0x5, 0x6}, {0x2, 0x1}, {0x6}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x3}, {}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0xa}, {0x6, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x7}, {0x4, 0x9}, {0x5, 0x8}, {0x4, 0x6}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x5, 0x4}, {0x2, 0x9}, {0x2, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x7}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x3}, {0x3, 0x9}, {0x5, 0x5}, {0x4, 0x5}, {0x2, 0xa}, {0x1}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x2}, {0x5, 0x5}, {0x2, 0xa}, {0x5, 0x8}, {0x7, 0x7}, {0x5, 0x8}, {0x3}, {0x6, 0x1}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x8}, {0x0, 0x9}, {0x2, 0x4}, {0x5, 0x4}, {0x0, 0x6}, {0x1}, {0x0, 0x3}, {0x1}, {0x1}, {0x7, 0x4}, {0x4, 0x9}, {0x2, 0x8}, {0x3, 0x7}, {0x6, 0x8}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x1}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x8}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x81, 0x3f, 0x1f, 0x5, 0x4, 0x7c3e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0x0, 0x63ea, 0x1, 0xb3, 0x8001, 0xf834]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x3, 0xfffe, 0xb13a, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1, 0x4, 0x6, 0x60, 0x6, 0x3, 0x1b, 0x6c, 0x3, 0x5, 0xc, 0x60, 0x9, 0x48, 0x4, 0x4, 0x60, 0x48, 0xb, 0x48, 0xeac0cf7165772a6f, 0x6c, 0xb, 0xebcb0c7d0f7ff936, 0x5, 0x9, 0x24, 0x6c, 0x1]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x6}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0x9}, {0x4, 0x4}, {0x3, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x7}, {0x0, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0x4, 0x60, 0xc, 0x30, 0xb, 0x16, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x780, 0x1, 0x400, 0xa8ed, 0x2e, 0x3, 0xa0c3, 0x4]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x7}, {0x7, 0x9}, {0x6, 0x6}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0xffab, 0x9, 0xa346, 0x9, 0x9, 0x7692]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x24, 0x12, 0x6, 0x0, 0x1, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecce, 0x27, 0x6, 0x8, 0x40, 0x1ff, 0x6e, 0x8]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0xa}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x9}, {0x4}, {0x7, 0xa}, {0x3, 0x7}, {0x6, 0x8}, {0x4, 0xa}, {0x5, 0x4}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x2}, {0x2, 0x3}, {0x4, 0x6}, {0x6, 0x8}, {0x3, 0x7}, {0x0, 0x4}, {0x3}, {0x3, 0xa}, {0x1, 0x8}, {0x3, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x3}, {}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x7}, {0x7, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x2}, {0x7, 0x1}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x15}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x59b1, 0x0, 0x1, 0x9, 0x7ff, 0x5abc, 0x7]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x378, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x43ca, 0x20, 0xab, 0x5, 0xfc9, 0x15d]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0xd4d8, 0x9, 0x625a, 0x101, 0xff, 0xcd]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0xc, 0x0, 0x3, 0x1b, 0x1, 0x5, 0x5, 0x2, 0x30, 0x1b, 0x18, 0x24, 0x2]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0xb, 0x2, 0x16, 0x9, 0x1, 0xc, 0x6c, 0x4, 0x2, 0x60, 0xc, 0x30, 0x4, 0xb, 0x1, 0x16, 0x36, 0x24, 0x11, 0x2, 0x4, 0x0, 0x54, 0x60, 0x16, 0x6c, 0x9, 0x4e, 0x24]}]}, @NL80211_BAND_5GHZ={0xf8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf001, 0x7, 0x0, 0x6, 0x7, 0x7, 0x50]}}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x7}, {0x4, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {0x2}, {0x3, 0x7}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x3, 0x5}, {0x4, 0x3}, {0x6}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x2}, {0x6, 0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x5}, {0x1, 0x3}, {0x1}, {0x5, 0x1}, {0x5, 0x6}, {0x2, 0x4}, {0x6, 0x7}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x4}, {0x1, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0xa}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x3}, {0x4, 0x9}, {}, {0x5, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3f, 0x36, 0x1, 0xc, 0xc, 0x48, 0x30, 0x16, 0x12, 0x60, 0x3, 0x16, 0x24, 0x6, 0x18, 0x60, 0x12, 0x9, 0x12, 0x5, 0x36, 0x24, 0x6c, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xe7, 0x0, 0x101, 0x2, 0x2, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x66, 0x1, 0x0, 0xce, 0x5, 0x7ff, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x6}, {0x0, 0xa}, {0x7, 0x4}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x4}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x4}, {0x1, 0x7}, {0x7, 0xa}, {0x3, 0x7}, {}, {0x7, 0x1}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x7, 0x8}, {0x5, 0x3}, {0x2}, {0x0, 0x8}, {0x5, 0xa}, {0x4, 0x4}, {0x2, 0x7}, {0x4, 0x9}, {0x4, 0x1}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x6, 0x4}, {}, {0x1, 0x9}, {0x5, 0x1}, {0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x3}, {0x4, 0x8}, {0x6, 0x7}, {0x6, 0x4}, {0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x4}, {0x0, 0x3}, {0x4, 0x3}, {0x6, 0x4}, {0x4, 0x2}, {0x1}, {0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1fe, 0xb82, 0x75, 0x2, 0x200, 0x2, 0x1, 0x4f]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x4, 0x3, 0x48, 0x2, 0x9, 0xc, 0x6, 0xb]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x8}, {0x6, 0x2}, {0x0, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0xa}, {}, {0x4}, {0x2, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4}, {0x6, 0x8}, {}, {0x6, 0x4}, {0x5, 0xa}, {0x4, 0x8}, {0x2, 0x3}, {0x1, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x6}, {0x3, 0x8}, {0x6, 0x4}, {0x5, 0x6}, {0x7, 0x8}, {0x1}, {0x6, 0x6}, {0x7, 0x8}, {0x2}, {0x4}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0x2}, {0x4}, {0x6, 0x4}, {0x7, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {0x1, 0x5}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3, 0x3, 0x2, 0x6, 0x2, 0x1, 0x2]}}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x8}, {0x1, 0xa}]}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x12, 0x9, 0x30, 0x42, 0x30, 0x4, 0x0, 0x36, 0x12, 0x12, 0xc, 0x1, 0x5, 0x1, 0x1b, 0x16, 0x30, 0x5, 0x1, 0x4, 0x6a, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0x2}, {0x1, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x1}, {0x2, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x6}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x3, 0x5}, {0x1}, {0x1, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x3}, {0x5, 0x9}, {0x7, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x5}, {0x6}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x2, 0x9}, {0x7, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x36, 0x16, 0x1b, 0x32, 0xb, 0x16, 0x6, 0x9, 0x1b, 0x2, 0x60, 0x1, 0x36, 0xc]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x60, 0x48, 0x48, 0x18, 0x5, 0x60, 0x5, 0x1b, 0x4, 0x1, 0x5, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x4, 0x6}, {0x0, 0x4}, {0x0, 0xa}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x8}, {0x3, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x2}, {0x1, 0x9}, {0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x7}, {0x4, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x2}, {0x6, 0x9}, {0x4, 0x9}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x7, 0x1}, {0x7}, {0x2, 0x6}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x2}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x6, 0x4}, {0x5, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x5, 0x7}, {0x2, 0x5}, {0x3, 0x7}, {0x7, 0x6}, {0x0, 0x2}, {0x5, 0x1}, {0x0, 0x5}, {0x4, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0x3}, {0x2, 0x3}, {0x4}, {0x5, 0x6}, {0x1, 0x5}, {0x5, 0x8}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x0, 0x0, 0xfff, 0x3ff, 0x7fff, 0x400, 0x6]}}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x7, 0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x3}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x1}, {0x7, 0x8}, {0x7, 0x1}, {0x6, 0x4}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x4}, {0x5, 0x2}, {0x6, 0xa}, {0x7, 0x8}, {0x5, 0x8}, {0x0, 0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0xa}, {0x4}, {0x1, 0x1}, {0x4, 0x2}, {0x0, 0x3}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x5}, {0x3, 0x8}, {0x6, 0xa}, {0x3, 0x7}, {0x5}, {0x7, 0x5}, {0x3}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0x8}, {}, {0x0, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x230, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x36, 0x12, 0x2, 0x24, 0x36, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x6, 0x4, 0x8001, 0x6c2, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1b, 0x6c, 0x4, 0x1b, 0x30, 0x2, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x5, 0xc1fb, 0x0, 0x2, 0x8001, 0x1000]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x9}, {0x4, 0xa}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x9}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {}, {0x2, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x2, 0xa}, {0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x0, 0x8}, {0x5, 0x3}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x16e3, 0x2, 0x7, 0x1000, 0x6, 0x0, 0xd7]}}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x1, 0x5}, {}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x6}, {0x5, 0x4}, {0x4, 0x1}, {0x4, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x8}, {0x7, 0x8}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x4}, {0x3, 0x9}, {0x0, 0x5}, {0x1, 0x1}, {0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x8}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0xa}, {0x2, 0x3}, {0x1, 0x7}, {0x1}, {0x3, 0x7}, {0x7, 0x7}, {0x5}, {0x2}, {0x3, 0x4}, {0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0x9}, {0x4, 0x2}, {0x0, 0x8}, {0x1}, {0x1, 0x6}, {0x4}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x1}, {0x3, 0x9}, {0x6, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x2, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x4, 0xa}, {0x3, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0xb}, {0x1, 0x8}, {0x7, 0x6}, {0x5, 0x4}, {0x0, 0x5}, {0x7, 0x4}, {0x4}, {0x2, 0x8}, {0x7, 0x6}, {0x5, 0x9}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x4, 0x1, 0x1, 0xc, 0x49, 0x2, 0x60, 0x6, 0x1b, 0x3, 0x43, 0x12, 0x18, 0x60, 0x12, 0x4, 0x18, 0x3, 0x18, 0x1b, 0x12, 0x24, 0x60, 0x1b]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x4, 0xa}, {0x4, 0x4}, {0x5, 0x9}, {0x2}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x2, 0x5}, {0x0, 0x2}, {0x2, 0x8}, {0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x1, 0x5}, {0x2, 0x7}, {0x7, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x7}]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x5}, {}, {0x0, 0x6}, {0x2, 0x6}, {0x2}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x9}, {0x2, 0x4}, {0x2, 0x4}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x6}, {0x4, 0x2}, {0x1, 0x5}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x6, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0x3}, {0x4, 0x1}, {0x4}, {0x3}, {0x4, 0x8}, {0x0, 0x7}, {0x4, 0x7}, {0x2, 0xa}, {0x5, 0x4}, {0x0, 0x3}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x5}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x4}, {0x4, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x7}, {0x7, 0xa}, {0x3, 0x9}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0x7}, {0x5, 0x4}, {}, {0x6, 0x6}, {0x7, 0xa}, {0x6, 0x8}, {0x2, 0x4}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x2, 0x2}, {0x6, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x2, 0x1}, {0x6, 0xa}, {0x3, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xff, 0xd9a, 0x0, 0x9, 0x3f, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x8, 0x0, 0x1, 0xbe70, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x8, 0x3ff, 0x35c6, 0x8001, 0x7ba, 0x2]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5be, 0x0, 0xffff, 0x7f, 0xffd8, 0x81, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x36, 0x30, 0x6c, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0xb44}, 0x1, 0x0, 0x0, 0x400c000}, 0x40) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x8, 0x0, 0x0, 0x0, 0x0) 06:46:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x6, 0x9d, 0x0, 0x7ffefffd}, {0x8000, 0x0, 0x0, 0x1}, {0x3, 0x0, 0xff, 0xffffffff}, {0x2, 0x8e, 0x0, 0x1ff}]}) times(0x0) 06:46:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000100)) times(&(0x7f0000000080)) times(&(0x7f0000000000)) 06:46:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0) 06:46:05 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(0xffffffffffffffff, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:05 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:05 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x8, 0x70bd26, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x4891, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) write(r2, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) sendfile(r2, r5, 0x0, 0xfdef) 06:46:05 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xc0000000}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44015, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="de9fc15bad7c3d4d9601"]) [ 332.086233] loop7: detected capacity change from 0 to 544 06:46:05 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, @redirect={0x5, 0x0, 0x0, @multicast1, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast, {[@timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 332.096117] ext4: Unknown parameter 'ÞŸÁ[­|' [ 332.175218] sit: non-ECT from 172.30.0.4 with TOS=0x2 [ 332.184408] sit: non-ECT from 172.30.0.4 with TOS=0x2 06:46:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(0xffffffffffffffff, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0) 06:46:13 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r0, 0x5728, 0x80000}) times(0x0) 06:46:13 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x80045200, &(0x7f0000002300)=ANY=[]) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0xfff) 06:46:13 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000013c0)={0xa, 0x0, 0xfffffad2, @mcast1, 0x3}, 0x1c) pipe(&(0x7f0000000080)) 06:46:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:13 executing program 3: r0 = fork() prlimit64(r0, 0xe, 0x0, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r1, 0x6, &(0x7f0000000040)={0x4b4, 0x5850}, 0x0) wait4(r0, &(0x7f0000000080), 0x8, &(0x7f0000000180)) 06:46:13 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xc0000000}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x44015, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="de9fc15bad7c3d4d9601"]) 06:46:14 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x71, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c00315ebdd62ade32933893ca337b44001a4d13c2da8dd209a9bee1a4108c1ad0ac93470618c8c3c969ef113a8d32a5e45b9afff70dc336740db836343edcff2a489f7e6b0707ae40fcd7ff46eb909010320b062473d1f69d9ffe91e6d31198185c666a9fae71fc5e939e2d72364db2d1d9a14aa41ceae03622d6f556c9"]) 06:46:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:14 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x64, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x3ff, 0x8, 0x40, 0xdd0}, {0x0, 0xf5, 0xfd, 0x6}, {0x81, 0x3, 0x73, 0xffffffff}]}) times(0x0) [ 340.800125] loop7: detected capacity change from 0 to 544 [ 340.816610] ext4: Unknown parameter 'ÞŸÁ[­|' 06:46:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:14 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:24 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x1000, @empty=0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'syzkaller1\x00', {0xffffffff}, 0x4}) r2 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, 0x208, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)='veth0_to_team\x00', 0x20, 0x2, 0x181}) 06:46:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x1) sendto(r0, &(0x7f0000000100)="b480f01a44e3b812721b8c903cfc4fa992a4f66b87b91672403d194d8325752fc868c4d8dc69a22d77b6a7ebc44e1f370818a3f13dce08bffdd8f080cb96068cb4e3cb11ca4faade581f0ccf81c34c0b7e9938ee2e45d7ee7a7596309f0c5784db2ae4e63a7752df375d09044847b305c5d3e4a1067a69a1d781ea0c670a052ccc0c67b48c21c76054a755c0bd0d103bab681c7a80592b137d993c779ea65c84e2048d760dc4aa3469354f81de82efbe9f258e23d328e72379a8be2d112886015eddb2822a33006226dace83eb6c4e4c56b409cca7", 0xd5, 0x1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x50, @local}, 0x0, 0x3, 0x4, 0x3}}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:46:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 06:46:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:24 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xe8, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xc116}, @NL80211_ATTR_IE={0xc2, 0x2a, [@random_vendor={0xdd, 0xa8, "6ab4c58b31ef20c214fd695619a23f261d69c43b555f528b88f3e17a1abb4a0ac6e5f9ea30c9cb9e1ae3dd6f5c3bc109013f5d9557e38c3f25a3808c61cdf7471b5a0596c4a2d9476278249fcd263ffbd634cfe9f50fdaf857928e6630403ecd8358960e2b7c02e109689e33fee971111054819a4ad75560c8b1b98e1e5b2f7fefa965159f6f39eab7a7c95e0f0d4751067bb73439a6d0de773260766809ebad7057ebfd3fdd6bb0"}, @link_id={0x65, 0x12, {@random="05d4142e3316", @device_b, @device_b}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0xc000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x0) r2 = dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) r4 = eventfd(0xff) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080)=0x1, 0x0, 0x4) write(r4, &(0x7f0000000440)="5b133b4ae995b54cb90716151b4270a63e42093282c88a35aee17ab3e2aa92f96875dc58694e7efcf76739d71bde1c62d04ca111dac1349aeeaabdac1f869e0138589e0aeb32457978a5fadf3f4f404e4d2a3476cdbe5c246b40d6b8e27e13a697abf7ffeb037b0f701081d40c9eed73f9e78207c57e138052f923bd54f662252189cefa1e16658e3e5a7af7a989a5de4bf0ace978eefeea3fe047773f9632e472d6534712361585d84a99fb6e174be578204e782f44ce235e00523c", 0xbc) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 06:46:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0xba6a, 0x12000) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="36b8287daa3bc1e793cfa55fea339ef092a24f5a52b4b05f9d0e267e9e5b093c5ffa129ead883a756e7193918755b325849f3ecd749f0a2313478423b10dacf49c227a0f9c3edefcf4120826056e63cafe2d54ab31950e7e980c76d0a7f3ca35d45112fcec5939e67b34ec5bacac8c2b", 0x70}, {&(0x7f0000000080)="a6f8b4a37d9a3ce432df0fafa87ef6dbdfd9b5c095796af12e8cd1c166c012988ab4ee58847f20e9921c3e23c360f5db2e54cf10e039ecd8316c2a3d172027508f929aa8906b", 0x46}, {&(0x7f0000000100)="c9e30b1ef0e8bfca2dfcf3a41d3be11bd95c2ae60d4b963efb25dd16ef6ce89b8c7ff23af99e2fcf", 0x28}, {&(0x7f0000000140)="8a53b65d6c3ce8b48c6c4ee3c7d0634f46ffcbfbb9462d76779c9a84b2fa1ebb791a9186daa9cb7b0b76b3627d8f9e0abd3e", 0x32}, {&(0x7f0000000180)="678d8f22f515b20be1aef21c0ad18a3dc8fb7271738fa8e0ab55af92c4b99d1e260615611886dc18ef5684cb870848becef0e215da92793240cb8d77b566ff2c03aa83033be2745494d412b168815e321c53f8698a7c117a60544263a87d96e71d3beb28d0a45292b87bc8ed03b390c7a0d0acf1a301ffb1da63ffed1304bb3ac449d584a19b708f8b7c767b8c6c524750f36801f5f42d6ef8884b55e0533aebf447b81021cae63234a226c36118e6fe2ee2abcee759d7d104ba2e988978d6e112e71f615b1b04cc723901dc41370b67069487a1", 0xd4}], 0x5, 0xe) lseek(r0, 0x0, 0x0) 06:46:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000a15000/0x1000)=nil, 0x1000, 0x4001, &(0x7f0000000000)=0x1, 0x6, 0x0) mbind(&(0x7f0000a08000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="defff8ffffff"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/25, 0x19}], 0x9}}], 0x1, 0x0, 0x0) [ 350.805105] 9p: Bad value for 'rfdno' 06:46:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 06:46:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:46:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x15) 06:46:24 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x200000000000004d, &(0x7f0000000180)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x800, r1, &(0x7f0000000040)="9de02dd7058dc65527dbe8bff5216e1d499d4610147017f416c805bb3befcbb336ee46d2d480aa63d5cd589123886bcecec81a14589348c7b778032ab0effa16c9b6c99b6a8e9f8d1ed5c84ea2d4c5a1d82e8426bf35da5ad554b3f6849700f4334eecb3c6b7e258445f723006f4dd29b424a362a68d8021beb83b01b8e3c594d225100f4dadfbe42f31f1735147c3a8732f7b8826c9", 0x96, 0x3, 0x0, 0x0, r0}]) 06:46:24 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x3, 0xffffffffffffffff, 0x4}) times(0x0) [ 350.971034] 9p: Bad value for 'rfdno' 06:46:24 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x1000, @empty=0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'syzkaller1\x00', {0xffffffff}, 0x4}) r2 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, 0x208, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)='veth0_to_team\x00', 0x20, 0x2, 0x181}) 06:46:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) 06:46:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:24 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) [ 351.087506] 9p: Bad value for 'rfdno' 06:46:24 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xc0, 0xa, 0x4, 0xb1, 0x0, 0x7f, 0x10400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1318, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x8080, 0x8001, 0xffff, 0x6, 0x3ff, 0x7, 0x838, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r0, 0x8) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0xffffffffffffff01, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x18000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 06:46:24 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x74}, {0x6}]}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x20800) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) [ 351.233208] audit: type=1326 audit(1762843584.534:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5041 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e7dd2bb19 code=0x0 [ 352.062369] audit: type=1326 audit(1762843585.364:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5041 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e7dd2bb19 code=0x0 06:46:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:46:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:35 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x1000, @empty=0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'syzkaller1\x00', {0xffffffff}, 0x4}) r2 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, 0x208, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)='veth0_to_team\x00', 0x20, 0x2, 0x181}) 06:46:35 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 06:46:35 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000003180)=""/235) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:46:35 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="6c887d1bcc09817e837766b6bd39b2bd9bf0f4", @ANYRES16=r1, @ANYBLOB="00022bbd7000ffdbdf2507000000080004000200000008000c000000000014000500fc02000000000000000000000000000014000500ff01000000000000000000000000000114000500fc02000000000000000000000000000014000500"/110], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x2880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xef, 0x0, 0x7fff0000}]}) times(0x0) 06:46:35 executing program 7: r0 = gettid() r1 = fork() ptrace(0x10, r1) r2 = fork() ptrace(0x10, r2) ptrace$peeksig(0x15, r2, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) process_vm_readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000140)=""/75, 0x4b}], 0x2, &(0x7f0000000200), 0x0, 0x0) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r3 = getpgrp(r0) tgkill(0xffffffffffffffff, r3, 0x2e) rt_tgsigqueueinfo(r0, r1, 0x3d, &(0x7f0000000000)={0x4, 0xd8481a42, 0x30700000}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500003000000000080190780a01010100004500"/52], 0x0) r4 = fork() ptrace(0x10, r4) ptrace$peeksig(0x15, r4, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) tkill(r4, 0x22) 06:46:35 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xc0, 0xa, 0x4, 0xb1, 0x0, 0x7f, 0x10400, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1318, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x8080, 0x8001, 0xffff, 0x6, 0x3ff, 0x7, 0x838, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r0, 0x8) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0xffffffffffffff01, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x18000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 362.023740] 9p: Bad value for 'wfdno' 06:46:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:35 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) [ 362.097027] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.100402] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 362.111368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.112443] Bluetooth: hci2: Opcode 0x0406 failed: -4 06:46:35 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x1000, @empty=0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x3, 'syzkaller1\x00', {0xffffffff}, 0x4}) r2 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r2, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, 0x208, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)='veth0_to_team\x00', 0x20, 0x2, 0x181}) [ 362.117340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.120592] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 362.124866] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 362.128953] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.148070] Bluetooth: hci5: Opcode 0x0c1a failed: -4 06:46:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 362.159218] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 362.171948] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 362.174161] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 362.181738] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 362.185403] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 362.225067] 9p: Bad value for 'wfdno' [ 364.124938] Bluetooth: hci4: command 0x0406 tx timeout [ 364.125455] Bluetooth: hci3: command 0x0406 tx timeout [ 364.125920] Bluetooth: hci2: command 0x0406 tx timeout [ 364.126365] Bluetooth: hci1: command 0x0406 tx timeout [ 364.189167] Bluetooth: hci7: command 0x0406 tx timeout [ 364.189637] Bluetooth: hci6: command 0x0406 tx timeout [ 364.190116] Bluetooth: hci5: command 0x0406 tx timeout [ 366.172998] Bluetooth: hci4: command 0x0406 tx timeout [ 366.173089] Bluetooth: hci1: command 0x0406 tx timeout [ 366.173625] Bluetooth: hci2: command 0x0406 tx timeout [ 366.174649] Bluetooth: hci3: command 0x0406 tx timeout [ 366.237106] Bluetooth: hci5: command 0x0406 tx timeout [ 366.238004] Bluetooth: hci6: command 0x0406 tx timeout [ 366.238420] Bluetooth: hci7: command 0x0406 tx timeout 06:46:44 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r3, 0x4000}, {r5, 0x14a}, {r3, 0x80}, {r2, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = getpid() r8 = pidfd_open(r7, 0x0) copy_file_range(r8, 0x0, r6, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r10 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r9, 0x2, r10, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r9, 0x0, r2, 0x7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r9, 0x1, r0, 0x1000, 0x80000}) 06:46:44 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:46:44 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="4d9de5bf19d29cf82e2460a5f828dc684228fc5617", 0x15}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040814) 06:46:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}}) 06:46:44 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000003180)=""/235) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:46:44 executing program 0: pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffff000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 06:46:44 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) r4 = fork() ptrace(0x10, r4) ptrace$peeksig(0x15, r4, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r5 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xe5, 0x5, 0x5, 0x8, 0x0, 0xfffffffffffff5a3, 0x41, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcde, 0x0, @perf_config_ext={0x1411, 0x7ff}, 0x4, 0x8, 0x20, 0x0, 0x800, 0x2, 0x6, 0x0, 0x6}, r4, 0x80001, r2, 0x3) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)="dc9a2da0e25d70efc55a2dbfd039fd19ea04a98876dc83dcf76d4ad898defc23bd519abdb7ed1dfc904190f550280638d3db392836874eb6b76c05c348e3d2f02dc9b17b7dcb94d4c960df9e843234a4", 0x50}, {&(0x7f0000000800)="9fc5b099c65c958a35db8a45e6205cdaf3995570e68d14ed29d8b4a772a687c814a199630719e16ff1674222f5de410ae191f1110334d54dd6e4b58d338fb6a713369c9d091b5709276beacc00ca52fcb4eb2510caa38c99a5eb4815a590f1e05505828fc7818e7a41c16f165697f94559ac08dafe562b8a4897811e763c20bb6e1e2fb2f9b5c4038a5ec3da3f", 0x8d}, {&(0x7f00000008c0)="24aba218f9719d3d3f15657671d85137c664e824169b523e3a151cba745dcc4ff0908c46bab6bd59d3ead2a37c4f1c590293773fd97ac07bba871f3fda969b18894c66eeb9f83f562bebf74addaa929935481f668f94a6a7df8bed44efa63bb663", 0x61}, {&(0x7f00000001c0)="30e4cb6bf62539022483117de5851ed28f3f082c", 0x14}, {&(0x7f0000000940)="f26ebbe2c07f2b41676099155726f7f2356fb575e4382e2b9e442661bb7635c6ba743e44a3f80b2124c60a7d6291cdc0c726b8eede970181d1590802c64d6c3031a400887f6feb92591dad55a493011789cb2c63eed5512e0bae5f856488f2f052c9dad9f6df740bba9f56c671ffbfe431e716dc034d4ac387c57e965e7603231c0d231b10036267e9a19bcca5a93e872f75ba2a55f63836d0fca2cd23d6e9", 0x9f}], 0x5, &(0x7f0000000dc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x110, 0x1}, 0x0) readv(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 371.517154] audit: type=1400 audit(1762843604.816:20): avc: denied { map } for pid=5099 comm="syz-executor.0" path="pipe:[9908]" dev="pipefs" ino=9908 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 371.563652] loop7: detected capacity change from 0 to 264192 [ 371.580597] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.594537] 9p: Bad value for 'wfdno' [ 371.604363] ieee802154 phy0 wpan0: encryption failed: -22 06:46:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000003c0)='./file1\x00', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="bd", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 06:46:44 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:46:44 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r3, 0x4000}, {r5, 0x14a}, {r3, 0x80}, {r2, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = getpid() r8 = pidfd_open(r7, 0x0) copy_file_range(r8, 0x0, r6, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r10 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r9, 0x2, r10, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r9, 0x0, r2, 0x7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={r9, 0x1, r0, 0x1000, 0x80000}) 06:46:44 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x7, 0x7, 0x3, 0x10000}, {0xaad5, 0x8, 0xff, 0x81}, {0x4, 0xcb, 0x39, 0x3ff}, {0x0, 0x6, 0x9, 0x5}]}) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) pread64(r0, &(0x7f0000000000)=""/155, 0x9b, 0x476d) times(0x0) 06:46:45 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) 06:46:45 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x0, r0}) times(0x0) 06:46:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB='AG']) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998", 0x4b}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {0x0}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787d", 0x3a}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800) sendfile(r0, r2, 0x0, 0xfdef) [ 371.941223] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.280911] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.384943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.385803] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.387331] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.388762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 372.391027] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 372.391858] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 372.393177] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 373.661384] Bluetooth: hci1: command 0x0406 tx timeout [ 374.429906] Bluetooth: hci7: command 0x0406 tx timeout [ 374.429975] Bluetooth: hci6: command 0x0406 tx timeout [ 374.430768] Bluetooth: hci5: command 0x0406 tx timeout [ 374.431903] Bluetooth: hci4: command 0x0406 tx timeout [ 374.432606] Bluetooth: hci3: command 0x0406 tx timeout [ 374.433583] Bluetooth: hci2: command 0x0406 tx timeout 06:46:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 1) 06:46:55 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x101]}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x64f5) r1 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r1, 0x9, 0x4) signalfd(r1, &(0x7f0000000100)={[0x95]}, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x800, 0x80000001, 0x3, 0x8, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x81, 0x40, 0xff, 0x1}, {0x6, 0x7, 0x0, 0x2}]}) times(0x0) 06:46:55 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) r4 = fork() ptrace(0x10, r4) ptrace$peeksig(0x15, r4, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r5 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xe5, 0x5, 0x5, 0x8, 0x0, 0xfffffffffffff5a3, 0x41, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcde, 0x0, @perf_config_ext={0x1411, 0x7ff}, 0x4, 0x8, 0x20, 0x0, 0x800, 0x2, 0x6, 0x0, 0x6}, r4, 0x80001, r2, 0x3) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)="dc9a2da0e25d70efc55a2dbfd039fd19ea04a98876dc83dcf76d4ad898defc23bd519abdb7ed1dfc904190f550280638d3db392836874eb6b76c05c348e3d2f02dc9b17b7dcb94d4c960df9e843234a4", 0x50}, {&(0x7f0000000800)="9fc5b099c65c958a35db8a45e6205cdaf3995570e68d14ed29d8b4a772a687c814a199630719e16ff1674222f5de410ae191f1110334d54dd6e4b58d338fb6a713369c9d091b5709276beacc00ca52fcb4eb2510caa38c99a5eb4815a590f1e05505828fc7818e7a41c16f165697f94559ac08dafe562b8a4897811e763c20bb6e1e2fb2f9b5c4038a5ec3da3f", 0x8d}, {&(0x7f00000008c0)="24aba218f9719d3d3f15657671d85137c664e824169b523e3a151cba745dcc4ff0908c46bab6bd59d3ead2a37c4f1c590293773fd97ac07bba871f3fda969b18894c66eeb9f83f562bebf74addaa929935481f668f94a6a7df8bed44efa63bb663", 0x61}, {&(0x7f00000001c0)="30e4cb6bf62539022483117de5851ed28f3f082c", 0x14}, {&(0x7f0000000940)="f26ebbe2c07f2b41676099155726f7f2356fb575e4382e2b9e442661bb7635c6ba743e44a3f80b2124c60a7d6291cdc0c726b8eede970181d1590802c64d6c3031a400887f6feb92591dad55a493011789cb2c63eed5512e0bae5f856488f2f052c9dad9f6df740bba9f56c671ffbfe431e716dc034d4ac387c57e965e7603231c0d231b10036267e9a19bcca5a93e872f75ba2a55f63836d0fca2cd23d6e9", 0x9f}], 0x5, &(0x7f0000000dc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x110, 0x1}, 0x0) readv(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:46:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB='AG']) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998", 0x4b}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {0x0}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787d", 0x3a}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800) sendfile(r0, r2, 0x0, 0xfdef) 06:46:55 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB='AG']) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998", 0x4b}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {0x0}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787d", 0x3a}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800) sendfile(r0, r2, 0x0, 0xfdef) 06:46:55 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000003180)=""/235) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:46:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:46:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 1) [ 382.193863] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.196303] audit: type=1326 audit(1762843615.498:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5153 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x0 [ 382.199663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.201060] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.204417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.208260] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.220147] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 382.220567] FAULT_INJECTION: forcing a failure. [ 382.220567] name failslab, interval 1, probability 0, space 0, times 1 [ 382.222967] CPU: 1 UID: 0 PID: 5164 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 382.222999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 382.223012] Call Trace: [ 382.223019] [ 382.223027] dump_stack_lvl+0xfa/0x120 [ 382.223070] should_fail_ex+0x4d7/0x5e0 [ 382.223097] should_failslab+0xc2/0x120 [ 382.223121] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 382.223154] ? __alloc_skb+0x2ab/0x370 [ 382.223182] ? kasan_unpoison+0x27/0x60 [ 382.223207] ? __alloc_skb+0x2ab/0x370 [ 382.223231] __alloc_skb+0x2ab/0x370 [ 382.223258] ? __pfx___alloc_skb+0x10/0x10 [ 382.223299] alloc_skb_with_frags+0x8f/0x7c0 [ 382.223334] ? __pfx_perf_trace_lock+0x10/0x10 [ 382.223366] ? __alloc_frozen_pages_noprof+0x296/0x1f10 [ 382.223397] sock_alloc_send_pskb+0x7cb/0x950 [ 382.223425] ? lock_acquire+0x15e/0x2f0 [ 382.223455] ? avc_has_perm_noaudit+0x59/0x3d0 [ 382.223486] ? avc_has_perm_noaudit+0x11b/0x3d0 [ 382.223518] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 382.223545] ? avc_has_perm_noaudit+0x150/0x3d0 [ 382.223577] ? sock_has_perm+0x21c/0x2b0 [ 382.223605] ? __pfx_sock_has_perm+0x10/0x10 [ 382.223638] hci_sock_sendmsg+0x190/0x2270 [ 382.223665] ? perf_trace_lock+0xb5/0x5d0 [ 382.223700] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 382.223734] sock_write_iter+0x57e/0x610 [ 382.223758] ? __pfx_sock_write_iter+0x10/0x10 [ 382.223795] ? security_file_permission+0x22/0x90 [ 382.223835] vfs_write+0xbe9/0x1150 [ 382.223860] ? __pfx_sock_write_iter+0x10/0x10 [ 382.223891] ? __fget_files+0x34/0x3b0 [ 382.223943] ? __pfx_vfs_write+0x10/0x10 [ 382.224000] ksys_write+0x1ef/0x240 [ 382.224021] ? __pfx_ksys_write+0x10/0x10 [ 382.224041] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 382.224081] do_syscall_64+0xbf/0x430 [ 382.224105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.224126] RIP: 0033:0x7f63dfe83b19 [ 382.224143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 382.224165] RSP: 002b:00007f63dd3f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.224186] RAX: ffffffffffffffda RBX: 00007f63dff96f60 RCX: 00007f63dfe83b19 [ 382.224200] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 382.224213] RBP: 00007f63dd3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 382.224225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.224238] R13: 00007fffa737c14f R14: 00007f63dd3f9300 R15: 0000000000022000 [ 382.224269] [ 382.227165] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 382.228559] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.272043] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:46:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 2) 06:46:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 2) 06:46:55 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000003180)=""/235) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:46:55 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 3) [ 382.599254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.603464] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.608729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.613275] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.617018] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 382.619265] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 382.621281] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:46:55 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:46:56 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) r4 = fork() ptrace(0x10, r4) ptrace$peeksig(0x15, r4, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r5 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xe5, 0x5, 0x5, 0x8, 0x0, 0xfffffffffffff5a3, 0x41, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcde, 0x0, @perf_config_ext={0x1411, 0x7ff}, 0x4, 0x8, 0x20, 0x0, 0x800, 0x2, 0x6, 0x0, 0x6}, r4, 0x80001, r2, 0x3) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)="dc9a2da0e25d70efc55a2dbfd039fd19ea04a98876dc83dcf76d4ad898defc23bd519abdb7ed1dfc904190f550280638d3db392836874eb6b76c05c348e3d2f02dc9b17b7dcb94d4c960df9e843234a4", 0x50}, {&(0x7f0000000800)="9fc5b099c65c958a35db8a45e6205cdaf3995570e68d14ed29d8b4a772a687c814a199630719e16ff1674222f5de410ae191f1110334d54dd6e4b58d338fb6a713369c9d091b5709276beacc00ca52fcb4eb2510caa38c99a5eb4815a590f1e05505828fc7818e7a41c16f165697f94559ac08dafe562b8a4897811e763c20bb6e1e2fb2f9b5c4038a5ec3da3f", 0x8d}, {&(0x7f00000008c0)="24aba218f9719d3d3f15657671d85137c664e824169b523e3a151cba745dcc4ff0908c46bab6bd59d3ead2a37c4f1c590293773fd97ac07bba871f3fda969b18894c66eeb9f83f562bebf74addaa929935481f668f94a6a7df8bed44efa63bb663", 0x61}, {&(0x7f00000001c0)="30e4cb6bf62539022483117de5851ed28f3f082c", 0x14}, {&(0x7f0000000940)="f26ebbe2c07f2b41676099155726f7f2356fb575e4382e2b9e442661bb7635c6ba743e44a3f80b2124c60a7d6291cdc0c726b8eede970181d1590802c64d6c3031a400887f6feb92591dad55a493011789cb2c63eed5512e0bae5f856488f2f052c9dad9f6df740bba9f56c671ffbfe431e716dc034d4ac387c57e965e7603231c0d231b10036267e9a19bcca5a93e872f75ba2a55f63836d0fca2cd23d6e9", 0x9f}], 0x5, &(0x7f0000000dc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x110, 0x1}, 0x0) readv(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:46:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 4) [ 382.826449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.835329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.840729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.846095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.847213] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 382.849463] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 382.858649] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:46:56 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) [ 382.985025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 382.986308] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 382.989550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.992261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 382.995263] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 382.998293] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 382.999799] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 383.018365] audit: type=1326 audit(1762843616.319:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5153 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x0 [ 384.988897] Bluetooth: hci2: command 0x0406 tx timeout [ 384.989414] Bluetooth: hci1: command 0x0406 tx timeout [ 385.052936] Bluetooth: hci7: command 0x0406 tx timeout [ 385.053421] Bluetooth: hci6: command 0x0406 tx timeout [ 385.053877] Bluetooth: hci5: command 0x0406 tx timeout [ 385.054320] Bluetooth: hci4: command 0x0406 tx timeout [ 385.054745] Bluetooth: hci3: command 0x0406 tx timeout 06:47:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 5) 06:47:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:06 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file1\x00') r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0xc0000, 0x81) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f8e3", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) r4 = fork() ptrace(0x10, r4) ptrace$peeksig(0x15, r4, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r5 = perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xe5, 0x5, 0x5, 0x8, 0x0, 0xfffffffffffff5a3, 0x41, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcde, 0x0, @perf_config_ext={0x1411, 0x7ff}, 0x4, 0x8, 0x20, 0x0, 0x800, 0x2, 0x6, 0x0, 0x6}, r4, 0x80001, r2, 0x3) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x0) renameat(r3, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000780)="dc9a2da0e25d70efc55a2dbfd039fd19ea04a98876dc83dcf76d4ad898defc23bd519abdb7ed1dfc904190f550280638d3db392836874eb6b76c05c348e3d2f02dc9b17b7dcb94d4c960df9e843234a4", 0x50}, {&(0x7f0000000800)="9fc5b099c65c958a35db8a45e6205cdaf3995570e68d14ed29d8b4a772a687c814a199630719e16ff1674222f5de410ae191f1110334d54dd6e4b58d338fb6a713369c9d091b5709276beacc00ca52fcb4eb2510caa38c99a5eb4815a590f1e05505828fc7818e7a41c16f165697f94559ac08dafe562b8a4897811e763c20bb6e1e2fb2f9b5c4038a5ec3da3f", 0x8d}, {&(0x7f00000008c0)="24aba218f9719d3d3f15657671d85137c664e824169b523e3a151cba745dcc4ff0908c46bab6bd59d3ead2a37c4f1c590293773fd97ac07bba871f3fda969b18894c66eeb9f83f562bebf74addaa929935481f668f94a6a7df8bed44efa63bb663", 0x61}, {&(0x7f00000001c0)="30e4cb6bf62539022483117de5851ed28f3f082c", 0x14}, {&(0x7f0000000940)="f26ebbe2c07f2b41676099155726f7f2356fb575e4382e2b9e442661bb7635c6ba743e44a3f80b2124c60a7d6291cdc0c726b8eede970181d1590802c64d6c3031a400887f6feb92591dad55a493011789cb2c63eed5512e0bae5f856488f2f052c9dad9f6df740bba9f56c671ffbfe431e716dc034d4ac387c57e965e7603231c0d231b10036267e9a19bcca5a93e872f75ba2a55f63836d0fca2cd23d6e9", 0x9f}], 0x5, &(0x7f0000000dc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r5, r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}], 0x110, 0x1}, 0x0) readv(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) clone3(&(0x7f0000005880)={0x7f904900, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:47:06 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:06 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:06 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:47:06 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:47:06 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001480)=ANY=[@ANYBLOB='AG']) pwritev2(r1, &(0x7f0000000700)=[{&(0x7f0000000240)="98f2083f3d05fc46c7ae46f601c70df2bd22c533e2f6e5502476b3334850c3a761dec7ac20c03e8593587314235def5ec02c58110e3b1a85d25b260a4aa6398feef9a5e4ad003adcacd998", 0x4b}, {&(0x7f0000000340)="ce513cbcfe7728da8a12195126b47075bf0e8e6c75c3f20b86980f97a53d9d0fdccba14b203463acb18a67d8ea8eb560ced315cc04702050ec61abd13a3b3dd6953045f34ae20740074de9403942845df3413b4c5f3ccf2d7b195320a5a5fb568ca032f42fdbc20443e6bb57b759b110fa27adf4592dbad95a5985a60d7f0b", 0x7f}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f00000004c0)="8ef48e4e74a59227632575266f9f1ad1ee3e50f506a9d5c1321d06a750cb5a141509439970530e2bdb986513b36cf654cc18565a67b2751784950f9915a0bd73a6", 0x41}, {0x0}, {&(0x7f00000005c0)}, {0x0}, {&(0x7f0000000640)="8e4c0171c8aa07fd4efe95d365409aa1f4fa7577d64be575dc8ca022e4909e70deb020c43b19dc412531a85f32c9507b616d8213e9981472787d", 0x3a}], 0x9, 0x400, 0xb750, 0x75576dce4adb44a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x368]}, 0x8, 0x80800) sendfile(r0, r2, 0x0, 0xfdef) [ 392.864950] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.880713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.881353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.888375] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.894489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.895494] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 392.899852] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 392.903560] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:47:06 executing program 1: times(0x0) times(&(0x7f0000000000)) [ 392.937405] FAULT_INJECTION: forcing a failure. [ 392.937405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.938424] CPU: 0 UID: 0 PID: 5213 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 392.938444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 392.938460] Call Trace: [ 392.938465] [ 392.938470] dump_stack_lvl+0xfa/0x120 [ 392.938498] should_fail_ex+0x4d7/0x5e0 [ 392.938514] _copy_from_iter+0x1dc/0x1660 [ 392.938527] ? lock_acquire+0x15e/0x2f0 [ 392.938546] ? __virt_addr_valid+0x1c6/0x5d0 [ 392.938561] ? find_held_lock+0x2b/0x80 [ 392.938576] ? __pfx__copy_from_iter+0x10/0x10 [ 392.938587] ? lock_release+0xc8/0x290 [ 392.938607] ? __virt_addr_valid+0x100/0x5d0 [ 392.938621] ? __check_object_size+0x579/0x880 [ 392.938643] hci_sock_sendmsg+0x402/0x2270 [ 392.938660] ? perf_trace_lock+0xb5/0x5d0 [ 392.938680] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 392.938700] sock_write_iter+0x57e/0x610 [ 392.938715] ? __pfx_sock_write_iter+0x10/0x10 [ 392.938736] ? security_file_permission+0x22/0x90 [ 392.938756] vfs_write+0xbe9/0x1150 [ 392.938769] ? __pfx_sock_write_iter+0x10/0x10 [ 392.938781] ? __fget_files+0x34/0x3b0 [ 392.938801] ? __pfx_vfs_write+0x10/0x10 [ 392.938830] ksys_write+0x1ef/0x240 [ 392.938841] ? __pfx_ksys_write+0x10/0x10 [ 392.938853] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 392.938876] do_syscall_64+0xbf/0x430 [ 392.938890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.938904] RIP: 0033:0x7f63dfe83b19 [ 392.938914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 392.938927] RSP: 002b:00007f63dd3f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.938939] RAX: ffffffffffffffda RBX: 00007f63dff96f60 RCX: 00007f63dfe83b19 [ 392.938948] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 392.938955] RBP: 00007f63dd3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 392.938963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.938970] R13: 00007fffa737c14f R14: 00007f63dd3f9300 R15: 0000000000022000 [ 392.938987] 06:47:06 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x95, 0x0, 0x7ffefffc}, {0x3, 0x4, 0xf8, 0x200}]}) times(0x0) 06:47:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 6) [ 393.122203] FAULT_INJECTION: forcing a failure. [ 393.122203] name failslab, interval 1, probability 0, space 0, times 0 [ 393.124704] CPU: 1 UID: 0 PID: 5226 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 393.124735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 393.124748] Call Trace: [ 393.124755] [ 393.124764] dump_stack_lvl+0xfa/0x120 [ 393.124807] should_fail_ex+0x4d7/0x5e0 [ 393.124841] should_failslab+0xc2/0x120 [ 393.124866] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 393.124895] ? __mutex_lock+0x166/0x1020 [ 393.124929] ? hci_sock_sendmsg+0xd65/0x2270 [ 393.124954] ? __alloc_skb+0x2ab/0x370 [ 393.124989] ? __alloc_skb+0x2ab/0x370 [ 393.125013] __alloc_skb+0x2ab/0x370 [ 393.125040] ? __pfx___alloc_skb+0x10/0x10 [ 393.125072] ? mark_held_locks+0x49/0x80 [ 393.125111] hci_sock_sendmsg+0x17f5/0x2270 [ 393.125143] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 393.125178] sock_write_iter+0x57e/0x610 [ 393.125201] ? __pfx_sock_write_iter+0x10/0x10 [ 393.125239] ? security_file_permission+0x22/0x90 [ 393.125273] vfs_write+0xbe9/0x1150 [ 393.125295] ? __pfx_sock_write_iter+0x10/0x10 [ 393.125317] ? __fget_files+0x34/0x3b0 [ 393.125350] ? __pfx_vfs_write+0x10/0x10 [ 393.125395] ksys_write+0x1ef/0x240 [ 393.125415] ? __pfx_ksys_write+0x10/0x10 [ 393.125435] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 393.125476] do_syscall_64+0xbf/0x430 [ 393.125500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.125522] RIP: 0033:0x7f63dfe83b19 [ 393.125539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 393.125560] RSP: 002b:00007f63dd3f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 393.125581] RAX: ffffffffffffffda RBX: 00007f63dff96f60 RCX: 00007f63dfe83b19 [ 393.125595] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 393.125608] RBP: 00007f63dd3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.125621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.125634] R13: 00007fffa737c14f R14: 00007f63dd3f9300 R15: 0000000000022000 [ 393.125666] 06:47:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) dup2(r0, r1) r2 = socket(0x9, 0x800, 0xf5a9) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0xffffffffffffffcc, 0x101180) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000100)={0x3, 'macvlan1\x00', {0x101}, 0x6}) times(0x0) 06:47:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 7) 06:47:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x22820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) getsockopt(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) clone3(&(0x7f0000000900)={0x10000000, &(0x7f0000000740)=0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0), {0xf}, &(0x7f0000000800)=""/24, 0x18, &(0x7f0000000840)=""/72, &(0x7f00000008c0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080), 0xc, &(0x7f0000000680)=[{&(0x7f0000000100)={0x224, 0x14, 0x800, 0x70bd29, 0x25dfdbfe, "", [@generic="8dcb17392bb0cfbed89a75436b160ef810106ca111d8b4e07204997fe1a022cd3a47190ad1805c0f41f0c62a48147ead6d4bf1d8ea0692a92629232d1025964f92f617e26b2b20c1f17b254d0b3dc8629fd2cba82ff99a1dda464887c73ef4e5986dc60aa1812024f1e4469c1ec902a9c201df71cd034f3fc2feb437e3298047f5d137a298156ff7531cae388a66720b51adfd14fe1fe4ff9f0cadd5f9cb5b5096f7553a2ccb303b0784b0f72c8f4a4c8cb94a7c4156294e020661", @generic="815ef19ec58b4cd2ea9c6282ace0bd80033f779d85a5adeb9feb3733b91de8e23d15851d5963aac49caf71281e958e3fc8fe58fe26838799d03591d815dbd50c14199d2e8bf452163d7dbdd9b52874f9c8bf5994e1309eb05ce041a94c2795e6d9fa4aea933e222a3499ba461eb1fcd1ce564937fa09f0fb8e4d33fbf9a48309126e491811e5dfd2c04453c5860f49d9837bf93e346e9cf9ec055cfd2505131654340de02df302c1ce4b78972d5bb714f682d25d0cf7dffc4de9d6173b78ab9c556b44a57a63bba0b4bf335cc0507d6fbef94059ed55", @generic="da0073a119920ca33455502203fde4ca4efcc9f381e3992251b4c72ae6c010017ec0989353ea77e25c111fb000f5cd0169ebf927620571ecb82d084f5c400d7919ceb0695b07f371b9567f9141b25a3b52684d7d47860328dda4f6bc2d203f1510a0308236cf5c039da193811178095be16b558044a7cc7424be111fccf00ed42cea01"]}, 0x224}, {&(0x7f0000000340)={0x10, 0x10, 0x400, 0x70bd28, 0x25dfdbfb}, 0x10}, {&(0x7f0000000380)={0x158, 0x1b, 0x400, 0x70bd26, 0x25dfdbfb, "", [@nested={0x148, 0x0, 0x0, 0x1, [@generic="1e6bb8c5a0d241901b210e644479813eccb6a2405011160efbdae130caeb67dd783c0c8fd99d42848d2a49c3b7367e646a4e4adbe85689d17513be51ef583b5980399c755525c0ac575b6f430721f852fd9801a4954450bac0d87fbabe7ad1", @generic="34f3620734b11ded21a45ef0917e03450cc3679f300a8b86b9e18a65aae772af04cc367ce8f4c17afec36754938f61975adb5e15237712e254bfd5fa30e9f9507a1c955128afc619a99056ec10c267a2585ee8cca8ab1a282a66c2839c6c9fdaaa36ae97e1abc731399aa7bfd83139c4e4cb8f573e02e5023fa69bd23ac8cfad4fed0dd03a9456dc225a566b32a49ba89749093cd57bac55eff8f9e76ebce1419ab2f800e0c1d3b39eeda5284115107b4cf96eecf9d677f51c594ed8b8a36800505c876ec213e0c9302b68c4f457d9068a3f8ad341c58d9f9893dbc91b5d372a92", @typed={0x4, 0x64}]}]}, 0x158}, {&(0x7f0000000a80)=ANY=[@ANYBLOB="10000000210000032bbd7000fcdbdf25b1d91781e2a96dcdf4753a812806c1a14761c512278fe6a55c6656a6f7ccf0e2e00562238525ee337549c6a6e48fee4566134695b8c5b7d7a06d9671b335a13dabd834561e50b841a72a2fb9cffb3e07a5a0f1f7b69a592b6c1259fa7e600dd60ed32bcde6b2c7eac82abe9ca2bacf94a64b767a58fa8db1099c473a96e9706fcd405ec4"], 0x10}, {&(0x7f0000000540)={0x14, 0x3d, 0x4, 0x70bd27, 0x25dfdbfb, "", [@generic="40d7967b"]}, 0x14}, {&(0x7f0000000580)={0x3c, 0x2a, 0x4, 0x70bd28, 0x25dfdbfc, "", [@nested={0x20, 0x34, 0x0, 0x1, [@typed={0x4, 0x28}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0x6}, @typed={0x4, 0x3e}, @generic, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0x4, 0x90}, @typed={0x8, 0x14, 0x0, 0x0, @pid}]}, 0x3c}, {&(0x7f00000005c0)=ANY=[@ANYBLOB="90ddffff3b00000429bd7000ffdbdf2577002200829be86af40d45c21f7a2c49dc55ec4851ff7f000000000000440b32decbb40b45f6d00fd42e91a72d1cc7a7f68b52d19be2b1e8243d7ea9ebeed544c7a84c230c0a9735109bc83dbe9b6993ac97aaf965c1389a6e5277d13afc5f6bde2a0084edff6fa8b6750cdb552974cf929af50d58de90000800060001000000"], 0x90}], 0x7, &(0x7f0000000980)=ANY=[@ANYBLOB="100000000000000001000000010000001c000006000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4880}, 0x11) 06:47:06 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:47:06 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 8) [ 393.744048] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.744745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.747659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.749752] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 393.750369] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 393.750989] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 393.753064] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 394.973391] Bluetooth: hci1: command 0x0406 tx timeout [ 395.804958] Bluetooth: hci7: command 0x0406 tx timeout [ 395.805478] Bluetooth: hci6: command 0x0406 tx timeout [ 395.805949] Bluetooth: hci5: command 0x0406 tx timeout [ 395.806393] Bluetooth: hci4: command 0x0406 tx timeout [ 395.806815] Bluetooth: hci3: command 0x0406 tx timeout [ 395.807276] Bluetooth: hci2: command 0x0406 tx timeout 06:47:15 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000540)=""/253, 0xfd}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/95, 0x5f}], 0x9, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/147, 0x93}, {&(0x7f0000000a00)=""/250, 0xfa}, {&(0x7f0000000b00)=""/220, 0xdc}], 0x4, &(0x7f0000000c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/12, 0xc}, {&(0x7f0000001dc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/71, 0x47}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/63, 0x3f}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/117, 0x75}], 0x8, &(0x7f0000003080)}}], 0x3, 0x10000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:15 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000000)='./file0\x00', 0x82) times(0x0) 06:47:15 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:47:15 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 9) 06:47:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366cef82e00080820000200008000f8000020004000000000000000000001e0f7ca90ffd8a17a", 0x2d}, {0x0, 0x0, 0x10003}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESHEX]) 06:47:15 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:47:15 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:47:16 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r3, 0x5, r2, 0x800}) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r1, 0x3, r2}) 06:47:16 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0f000000000000002eaee06969653000"]) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b00200", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25210000000c009900070000002d0000000400ff001b002a007e1503070308021100000101000000ffb0880603000005030000000400ec0004008700d0017d80e5000000a5c54ecfaa8e6d70f3433d1e8c690291cf6dd44e197ae667fc52f04fe6721ce19254809cf41e3818af396224b7acf2c304eed8d234533f6ca245679ac2753c29269878daefecccb3f8ca62ca232527d39b5129289de9bf404033826a755863dfee24d95999a28bb0efc39336e749d59d229663ed5d6a1590a27a81f1c76d8fba374d6a9eff21c1b5ef8b66116dfb8781265fe76f29b12bc75b636d2d87920aae3eb1076127b542108b9d451708ab4be5259a4e5adc7b074a9d7d495ec9fd95133a62215a75d822068045820b8e315e24242e24a223a2de422de04903c0e8bca20d000000e10001006e5edc1d5fe177de9cd1be4f13ef84cf1d4ceb5e40d1764f682325364d08f2177bd5dced66ed35992ab664f5387140560d5f825a9993bfb9005c8f3f46b09d1e17f8a83db64bcdbe9d8e818edb35fdae8b26b67e2035d737a93472327f30aae583214f583f6da9969623471540ba418d21cc8005adaaff38e9f06f3345e0a88b0c8fc544d523c030150067d74ca38a9a19e1d22286869317e76366e544a6c1c84324d901a4fd0b9c59703e5fd683af4ce5263c8c1957ff7e8660aaa1b87b562b497577915396c2421188fec3114f13d326722d0852f1460d7dcc122b640000000a00f500ffffffffffff2d800a00000001010101010100000a00000001010101010100000a000000020202020202000044007d803f000000d3d21bc46b9eff6d09789ddb897af54b4e633e76d0bb03b6739ad40375ff16487d0580d67275bc4e4b240edf3a97091f6ebf7876d347c6579a00000000"], 0x290}, 0x1, 0x0, 0x0, 0x8c4}, 0x44010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) dup2(r1, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) 06:47:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x3, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 10) 06:47:16 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x680, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x1ff]}, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)=""/240, &(0x7f00000000c0)=0xf0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x5333, 0x7}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x0, r5, 0xd3}) times(0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$mouse(&(0x7f0000002440), 0x6, 0x206000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000140)={'veth1_to_bond\x00'}) getsockopt(r7, 0x1, 0x4, 0x0, &(0x7f0000000080)) listen(r7, 0x1ff) [ 402.913293] FAULT_INJECTION: forcing a failure. [ 402.913293] name failslab, interval 1, probability 0, space 0, times 0 [ 402.914873] CPU: 1 UID: 0 PID: 5277 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 402.914906] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 402.914922] Call Trace: [ 402.914929] [ 402.914937] dump_stack_lvl+0xfa/0x120 [ 402.914976] should_fail_ex+0x4d7/0x5e0 [ 402.915001] should_failslab+0xc2/0x120 [ 402.915023] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 402.915052] ? perf_trace_lock+0xb5/0x5d0 [ 402.915080] ? __alloc_skb+0x2ab/0x370 [ 402.915112] ? __alloc_skb+0x2ab/0x370 [ 402.915134] __alloc_skb+0x2ab/0x370 [ 402.915158] ? __pfx___alloc_skb+0x10/0x10 [ 402.915180] ? lock_acquire+0x15e/0x2f0 [ 402.915207] ? hci_dev_get+0x36/0x100 [ 402.915233] ? hci_dev_get+0xd4/0x100 [ 402.915255] ? lock_release+0xc8/0x290 [ 402.915286] mgmt_cmd_status+0x38/0x4d0 [ 402.915311] hci_sock_sendmsg+0x1c1f/0x2270 [ 402.915340] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 402.915372] sock_write_iter+0x57e/0x610 [ 402.915393] ? __pfx_sock_write_iter+0x10/0x10 [ 402.915427] ? security_file_permission+0x22/0x90 [ 402.915458] vfs_write+0xbe9/0x1150 [ 402.915478] ? __pfx_sock_write_iter+0x10/0x10 [ 402.915497] ? __fget_files+0x34/0x3b0 [ 402.915527] ? __pfx_vfs_write+0x10/0x10 [ 402.915567] ksys_write+0x1ef/0x240 [ 402.915585] ? __pfx_ksys_write+0x10/0x10 [ 402.915604] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 402.915640] do_syscall_64+0xbf/0x430 [ 402.915662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.915682] RIP: 0033:0x7f63dfe83b19 [ 402.915697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 402.915716] RSP: 002b:00007f63dd3f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.915735] RAX: ffffffffffffffda RBX: 00007f63dff96f60 RCX: 00007f63dfe83b19 [ 402.915748] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 402.915760] RBP: 00007f63dd3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 402.915771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.915782] R13: 00007fffa737c14f R14: 00007f63dd3f9300 R15: 0000000000022000 [ 402.915811] 06:47:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 11) [ 403.529030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.531576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.534969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.543274] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.546686] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.562848] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 403.566103] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:47:16 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:16 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 06:47:16 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0f000000000000002eaee06969653000"]) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b00200", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25210000000c009900070000002d0000000400ff001b002a007e1503070308021100000101000000ffb0880603000005030000000400ec0004008700d0017d80e5000000a5c54ecfaa8e6d70f3433d1e8c690291cf6dd44e197ae667fc52f04fe6721ce19254809cf41e3818af396224b7acf2c304eed8d234533f6ca245679ac2753c29269878daefecccb3f8ca62ca232527d39b5129289de9bf404033826a755863dfee24d95999a28bb0efc39336e749d59d229663ed5d6a1590a27a81f1c76d8fba374d6a9eff21c1b5ef8b66116dfb8781265fe76f29b12bc75b636d2d87920aae3eb1076127b542108b9d451708ab4be5259a4e5adc7b074a9d7d495ec9fd95133a62215a75d822068045820b8e315e24242e24a223a2de422de04903c0e8bca20d000000e10001006e5edc1d5fe177de9cd1be4f13ef84cf1d4ceb5e40d1764f682325364d08f2177bd5dced66ed35992ab664f5387140560d5f825a9993bfb9005c8f3f46b09d1e17f8a83db64bcdbe9d8e818edb35fdae8b26b67e2035d737a93472327f30aae583214f583f6da9969623471540ba418d21cc8005adaaff38e9f06f3345e0a88b0c8fc544d523c030150067d74ca38a9a19e1d22286869317e76366e544a6c1c84324d901a4fd0b9c59703e5fd683af4ce5263c8c1957ff7e8660aaa1b87b562b497577915396c2421188fec3114f13d326722d0852f1460d7dcc122b640000000a00f500ffffffffffff2d800a00000001010101010100000a00000001010101010100000a000000020202020202000044007d803f000000d3d21bc46b9eff6d09789ddb897af54b4e633e76d0bb03b6739ad40375ff16487d0580d67275bc4e4b240edf3a97091f6ebf7876d347c6579a00000000"], 0x290}, 0x1, 0x0, 0x0, 0x8c4}, 0x44010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000005880)={0x14f804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/1, 0x0}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r2 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000001c0), 0x2, 0x0) dup2(r1, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) 06:47:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 12) 06:47:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:47:16 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) [ 403.671879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.673016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.679897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.680918] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.683951] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.687883] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 403.692233] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 404.603956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.605417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.607272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.610614] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.612452] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 404.613757] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 404.615593] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 405.853077] Bluetooth: hci1: command 0x0406 tx timeout [ 406.620945] Bluetooth: hci7: command 0x0406 tx timeout [ 406.622057] Bluetooth: hci6: command 0x0406 tx timeout [ 406.623076] Bluetooth: hci5: command 0x0406 tx timeout [ 406.624094] Bluetooth: hci4: command 0x0406 tx timeout [ 406.625090] Bluetooth: hci3: command 0x0406 tx timeout [ 406.626106] Bluetooth: hci2: command 0x0406 tx timeout 06:47:26 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:26 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:47:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 13) 06:47:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:26 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000000)) 06:47:26 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x181001, 0x0) ioctl$SNAPSHOT_S2RAM(r4, 0x400c330d) io_setup(0x0, &(0x7f0000000100)=0x0) r6 = openat$incfs(r3, &(0x7f0000000140)='.log\x00', 0x608000, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000400), 0x4, 0x400) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x10180, 0x0) io_submit(r5, 0x3, &(0x7f0000000a80)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x3ff, r6, &(0x7f0000000180)="5c14eac1c0dc7a3b99f73d6df55c1222100b6dcf5ef510bc1956ccd9b6fa16d9c9ef52e8ade6771f742f2d5974cc5cfba2ea492c65f1feb404380e40463308daedbd5286d94bd0f063651a88dffd117e55c274caab9f95314e249bfc28e698c44d4d659305d0a52c632cf97ca8d1db8a4958953ab59bb16848", 0x79, 0x6, 0x0, 0x2}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x8, 0x6, r7, &(0x7f00000008c0)="e0ca8218407fa3d6f6c86f81", 0xc, 0x30000000000, 0x0, 0x0, r8}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0x2, r0, &(0x7f0000000980)="13f4c57cc0e0c44beff23e2cec5383831d5f1bd0e7edb94468505e4ce510af50c3281f12684cad4076c159ae3ffd2a82e806622cd369042147b383b8e3b4683651fd2a330c25646320f446a16fdffb2634e4a5ec11861cf5e7e2de22dc2dd10da5990f3b9d182c26aeb6145dff7733aaf667effbd91bb8eb97cb67d506114231e575fde648e673de0b0091ae1ad5166ca88d59299b9ac148dfc5f35c3f823908d29b174c", 0xa4, 0x8001, 0x0, 0x2}]) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x294001, 0x71) r10 = fsmount(0xffffffffffffffff, 0x1, 0x9) pipe2(&(0x7f0000000800)={0xffffffffffffffff}, 0x4000) io_submit(r2, 0x5, &(0x7f0000000880)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xf6db, r3, &(0x7f0000000280)="c1c2179f2c4bff0dfd8ba7d87bfac63066826e413fdb9fa4fdcdb213704373e9af7301852d89e6440f70fadd4628d3093039042eb49960913ab7739d770ad2462b75102f7720457851991557d5f4a6f0e34cdc569ee5e3850c3cfdd5882473e116ad35f6edac5ce586e1a97cb7836aae5ed08b6c8414ede3ee9342158e78a1be9369917c2510fd2a91b90fd48116b58e23b19ddad1318546dbc089ef4679866452a5730b9e60b64dfc1d0b20a8fdd375f6eb130db568dc7254cf911b55f114f6f0d78eccf648b1e72d536b9444c7c1be", 0xd0, 0x0, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000000500)="89d2a1e354395835863ad6ee719110d832cf29c8bde5db0267644583517bb096249fe2f96a03904ab02af2b67d24ed72e8185630d50e9c0cda7806f8ee2533a333bcc6ab69e88163dfe09065d6c92c161a408936315b9a0639d4900883c94792557cd703191580b7eede3129798d72f8cd4df307d6c9cd6cb5d284ddab2e5d300920ccb700d984d35a273a1bc91dd71f412eb54cd56fa6d0bdef017d39661b28f75288b74baf4adb54773555ab5020c683de67e7ee086e8b58344fce84ebe75433c3", 0xc2, 0xf944, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, r9, &(0x7f0000000600)="633d8c5754e289736e48b9549fac30a95a6c305dc9f4a724a61b19646a6b15bcaffda0c94b89914bceb86410aa62432f75693dae8202c00d72a0ff7eaa75de10f81fd31275d486d5b546aa7ffcdd945f8c7a393c434bc545ed267ec9eaa2715e83a11a5f89874b7a63412acc3fa179bd51293d6add4b653e227b1a64423725023a35ef83db5152453d17627f412424403b454be754595d91fbb7f784e88f8da1c9b0144b2dfa6b1a6b5c02d3c38c4efd63c99f795993eaf8aac09043db29", 0xbe, 0x5}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x800, r1, &(0x7f00000006c0)="8c4a6714bf9aa9f02184e6f88aeb8d80e23cf78ba676bd0a1902161844138e2bc81432d98f0fe499c519626644bb3fad623aba13a46a17d09d827be34fdc31ae60d91f740bc1a634b380e36a23ad9bfb562bbba4cafe77e9906ff38f3bf9c005", 0x60, 0x100, 0x0, 0x2, r10}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000780)="1faef4d88f8039a097e55d88064de3a6d28d1d4b6db13c074e9235a4cb6e565dd53b29576c5ad60e85a9b8fb19283d55bbfc39c58683d61e6eb0c4d2dc97646b971dca1db2d71749c98c0cf490434ed7e79dfaa193afb41581dfd1719075dbf4f3e2c6e7d019acb91a72132734", 0x6d, 0x81, 0x0, 0x1, r11}]) connect$bt_l2cap(r1, &(0x7f0000001b00)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write(r1, &(0x7f00000004c0)='^', 0xfdef) 06:47:26 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r0, 0xffff}) times(0x0) [ 413.473262] random: crng reseeded on system resumption 06:47:26 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 14) 06:47:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 06:47:26 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:26 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) [ 413.630120] FAULT_INJECTION: forcing a failure. [ 413.630120] name failslab, interval 1, probability 0, space 0, times 0 [ 413.632028] CPU: 1 UID: 0 PID: 5337 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 413.632059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 413.632072] Call Trace: [ 413.632079] [ 413.632087] dump_stack_lvl+0xfa/0x120 [ 413.632136] should_fail_ex+0x4d7/0x5e0 [ 413.632158] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 413.632194] should_failslab+0xc2/0x120 [ 413.632219] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 413.632249] ? __create_object+0x59/0x80 [ 413.632278] ? __alloc_skb+0x2ab/0x370 [ 413.632314] ? __alloc_skb+0x2ab/0x370 [ 413.632338] __alloc_skb+0x2ab/0x370 [ 413.632365] ? __pfx___alloc_skb+0x10/0x10 [ 413.632393] ? __alloc_skb+0x1f9/0x370 [ 413.632420] ? __pfx___alloc_skb+0x10/0x10 [ 413.632445] ? lock_acquire+0x15e/0x2f0 [ 413.632478] ? hci_dev_get+0x36/0x100 [ 413.632510] create_monitor_ctrl_event+0x3a/0x470 [ 413.632538] mgmt_cmd_status+0x282/0x4d0 [ 413.632564] hci_sock_sendmsg+0x1c1f/0x2270 [ 413.632597] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 413.632633] sock_write_iter+0x57e/0x610 [ 413.632657] ? __pfx_sock_write_iter+0x10/0x10 [ 413.632695] ? security_file_permission+0x22/0x90 [ 413.632729] vfs_write+0xbe9/0x1150 [ 413.632752] ? __pfx_sock_write_iter+0x10/0x10 [ 413.632773] ? __fget_files+0x34/0x3b0 [ 413.632807] ? __pfx_vfs_write+0x10/0x10 [ 413.632867] ksys_write+0x1ef/0x240 [ 413.632897] ? __pfx_ksys_write+0x10/0x10 [ 413.632929] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 413.632970] do_syscall_64+0xbf/0x430 [ 413.632995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.633018] RIP: 0033:0x7f63dfe83b19 [ 413.633035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 413.633056] RSP: 002b:00007f63dd3f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 413.633078] RAX: ffffffffffffffda RBX: 00007f63dff96f60 RCX: 00007f63dfe83b19 [ 413.633092] RDX: 0000000000000006 RSI: 0000000020000000 RDI: 0000000000000004 [ 413.633105] RBP: 00007f63dd3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 413.633119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.633131] R13: 00007fffa737c14f R14: 00007f63dd3f9300 R15: 0000000000022000 [ 413.633164] 06:47:26 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000500)={0xa, 0x0, 0x0, @local}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:26 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:47:26 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000000)) times(&(0x7f0000000140)) 06:47:27 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) [ 414.301598] cgroup: fork rejected by pids controller in /syz7 06:47:37 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 15) 06:47:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:37 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:37 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:37 executing program 1: times(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x400, 0xc0, 0x6b, 0x1000}, {0x8, 0x40, 0xe8, 0x3ff}, {0x1, 0xd9, 0xea, 0x1000}]}) 06:47:37 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:47:37 executing program 7: connect(0xffffffffffffffff, &(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x0, 0x1, "e070fa0a513520338948765c8ebf4b8edf4917c474914981e8e4ca5ad7e937a8baed730b5de7a479ae064d7b5eb6a3f553308ff0542f6de506bba5eacb96c7", 0x5}, 0x80) r0 = accept4(0xffffffffffffffff, &(0x7f0000001600)=@isdn, &(0x7f0000001680)=0x80, 0x80000) sendmsg$FOU_CMD_GET(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x58, 0x0, 0x84, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) dup2(r2, r1) r3 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0xb) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x7, 0x9, 0x3f, 0x2, 0x0, 0x0, 0x4097, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5cad, 0x1, @perf_bp={&(0x7f0000000080), 0xf}, 0x1000, 0xfa, 0xe08f, 0x0, 0x1ff, 0x7fffffff, 0x7ff, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r1, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x6, 0x6, 0x1, 0x20, 0x0, 0x1, 0x800, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x400, 0x8}, 0x0, 0x4, 0x60000000, 0x3, 0xd5, 0x1000, 0x200, 0x0, 0x5, 0x0, 0x1000}, 0xffffffffffffffff, 0x4, r3, 0x1) 06:47:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) [ 424.170382] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.176625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.181817] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.187431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.193333] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 424.198317] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 424.202656] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 424.226673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.237205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.255409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.261167] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 424.272538] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 424.277269] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 424.286227] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 426.272472] Bluetooth: hci4: command 0x0406 tx timeout [ 426.272873] Bluetooth: hci3: command 0x0406 tx timeout [ 426.273537] Bluetooth: hci2: command 0x0406 tx timeout [ 426.274294] Bluetooth: hci1: command 0x0406 tx timeout [ 426.333030] Bluetooth: hci7: command 0x0406 tx timeout [ 426.333885] Bluetooth: hci6: command 0x0406 tx timeout [ 426.334593] Bluetooth: hci5: command 0x0406 tx timeout 06:47:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:47:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/183, &(0x7f0000000200)=0xb7) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES16=r3], 0x7) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x2, r2, 0x80, 0x80000}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000280)={r5, 0x1, 0x6, @local}, 0x10) socketpair(0x3, 0xa, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONCLEX(r6, 0x5450) times(0x0) 06:47:47 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 16) 06:47:47 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:47 executing program 7: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xfff, 0x8, 0x2, 0x1000, 0x14, "ee9c23b4e60dbaaa"}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) 06:47:47 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:47:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x300, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x700, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:47 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100010000000000ff0f00000000ce36a2bb527c6c8e89000002000000400000000100000000000000050000000000000004001000000000000900"/88]) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f00000027c0)=[{&(0x7f0000000780)="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", 0xe02, 0x1ff}, {&(0x7f0000001780)="12", 0x1}], 0x0, 0x0) 06:47:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 17) 06:47:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x810, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) (fail_nth: 18) 06:47:47 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000001c0)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x5) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0xfffffffb, 0x0, 0x1, 0x0, 0x0, "ef84d3de7469887f5f8dcc322da0fe2f113323", 0x800}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x9, 0xce, 0x9, 0x101, 0x12, "b115a2061c63a412"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDMKTONE(r2, 0x4b30, 0x9) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000200)) ioctl$TCSETSW(r0, 0x541a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d724b9d80cdcbde661c6a666d13d0ea35cc8c0"}) [ 434.132467] FAULT_INJECTION: forcing a failure. [ 434.132467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.133482] CPU: 0 UID: 0 PID: 5527 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 434.133499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 434.133507] Call Trace: [ 434.133511] [ 434.133516] dump_stack_lvl+0xfa/0x120 [ 434.133542] should_fail_ex+0x4d7/0x5e0 [ 434.133558] _copy_to_user+0x32/0xd0 [ 434.133573] simple_read_from_buffer+0xe0/0x180 [ 434.133594] proc_fail_nth_read+0x18a/0x240 [ 434.133609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.133623] ? security_file_permission+0x22/0x90 [ 434.133639] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.133652] vfs_read+0x1eb/0xc70 [ 434.133667] ? __pfx_vfs_read+0x10/0x10 [ 434.133678] ? lock_release+0xc8/0x290 [ 434.133702] ? __fget_files+0x20d/0x3b0 [ 434.133729] ksys_read+0x121/0x240 [ 434.133739] ? __pfx_ksys_read+0x10/0x10 [ 434.133755] do_syscall_64+0xbf/0x430 [ 434.133769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.133782] RIP: 0033:0x7f63dfe3669c [ 434.133792] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 434.133803] RSP: 002b:00007f63dd3f9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.133819] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63dfe3669c [ 434.133827] RDX: 000000000000000f RSI: 00007f63dd3f91e0 RDI: 0000000000000003 [ 434.133834] RBP: 00007f63dd3f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 434.133841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 434.133848] R13: 00007fffa737c14f R14: 00007f63dd3f9300 R15: 0000000000022000 [ 434.133869] [ 434.669909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 434.670619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 434.672569] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.674744] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.677162] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 434.678691] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 434.680753] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 435.869012] Bluetooth: hci1: command 0x0406 tx timeout [ 436.701020] Bluetooth: hci7: command 0x0406 tx timeout [ 436.701064] Bluetooth: hci6: command 0x0406 tx timeout [ 436.702147] Bluetooth: hci5: command 0x0406 tx timeout [ 436.702553] Bluetooth: hci4: command 0x0406 tx timeout [ 436.703531] Bluetooth: hci3: command 0x0406 tx timeout [ 436.703932] Bluetooth: hci2: command 0x0406 tx timeout 06:47:56 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x4f, 0x3f, 0x9, 0x41, 0x1, 0x0, 0x1d, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x675f, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x9740dcf2eef6142e, 0x80020000, 0x106, 0x4, 0x0, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r2}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r2, 0x8}, {r0, 0x1000}, {r0, 0x200}, {r1, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000440)=0x7, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 06:47:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa00, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:47:56 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:56 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:47:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x2, 0x5, 0x0, 0x1}, {0x5, 0xd8}, {0x6479, 0x80, 0x2}, {0x6, 0x24, 0xc1, 0x8000000}]}) r4 = accept4$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80000) ioctl$sock_netdev_private(r4, 0x89fe, &(0x7f0000000280)="dd3a163c379b36929ae5c3f31b4945a5137ed392c2f07feb5b86f99346ecb151791b68d7bb16a37b32ca247cf65a5416ecbb71a8c7ae11226bbd68d3ca8a870d9ac8c2e959218f8175b4135568111b3f7ce65d3765f30d") ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7fff, 0x1, 0x40, 0x401}, {0x6, 0x8f, 0x0, 0x7fff}]}) times(0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x9100, 0x0) dup3(r5, r0, 0x0) 06:47:56 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:47:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:47:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x3) 06:47:56 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) times(0x0) 06:47:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb00, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x5) 06:47:56 executing program 7: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0x18d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4e69, &(0x7f00000001c0)={0x0, 0x0, 0x3f00}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20002000}) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8000, 0x6}}, './file0\x00'}) r4 = signalfd4(r0, &(0x7f00000002c0)={[0xfffffffffffffffa]}, 0x8, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000300)={0x1000000c}) close_range(r0, 0xffffffffffffffff, 0x0) 06:47:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = dup2(r0, r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0xe7}) io_submit(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000000100)="ac16664187e500a58220264b3292f0cd9802d081550fcdd512df12743074b4c7837b7bcf1d14150eca8eefff94d0c71b4428ef92c3a1b6ab97d3c2acca65acad7050827ecc92e59ae727e604eed5e445641a42d0ef30aae0d273843e3c1f2d09446a3f59c04d66d8a5b7591fcc6128946b2d12a1fba0d2e5e2b8bd33413fe98490b37be990226ce0d9b9bd31189dd24ff5766a65de52e2edf47eaa62565eb4e64cbf72ae44e5dfc8becaf43c8833f46bbcd88ed30240735c6f1688e28cef039e94438930af0278b675933b61b752d2c3a342f0c10de007ff3494", 0xda, 0x3, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000200)="1e75508041c1f696d86930af0c9d3cf56a885a1295abd6a4d41ee97a79aa8e45b6014a544f402001d8bd59302efabc8dcc5dedc18316be52e25d716074cf92088a1b4564bf941e593a808e76c2cc155b830b66853a6b9c7ef9c5f555ddb11e0b8e9fda2219f7f0bc7caaaf8372af8ef2cffa5ee4994abcb5bb6139391e665c1efbe7f84114f47f82910a21e161999c3899281d9777409ddcabfd2ce75fa1239bf121a7a80ba56006a68635301d03", 0xae, 0x6, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000480)="53ba8fc447d19f868fa8ba1cc872128b77859552c202230722cdc31039e385c6ee33271e5bea73d9be902b770c7b481b7bd0c21eedbb249eff214478932c576f5fa80f35048a1c39c4840f047f81dfb81158cc28839f0a2fc01c12d4919c18b398c97eb9c093117f49d7109f26a88b42293581ada91c359997d1a9ecb798f784f61d14e23e13c66d3322b8927d0118b657edb4", 0x93, 0x10000000000, 0x0, 0x2, r1}]) times(0x0) times(&(0x7f0000000440)) 06:47:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x178) 06:47:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1008, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:47:57 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x180) [ 444.303128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.304597] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.305991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.307340] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 444.308642] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 444.310107] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 444.311474] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 445.532938] Bluetooth: hci1: command 0x0406 tx timeout [ 446.364950] Bluetooth: hci7: command 0x0406 tx timeout [ 446.366082] Bluetooth: hci6: command 0x0406 tx timeout [ 446.366948] Bluetooth: hci5: command 0x0406 tx timeout [ 446.367732] Bluetooth: hci4: command 0x0406 tx timeout [ 446.368549] Bluetooth: hci3: command 0x0406 tx timeout [ 446.368625] Bluetooth: hci2: command 0x0406 tx timeout 06:48:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:48:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:48:07 executing program 7: r0 = fork() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xeb, 0x0, 0x0, 0x80, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x4000, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r1) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="05000000002e57ce800b202500000000193ded737b1275553b04249500002100000205de1f00000000000c00f600"], 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) 06:48:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1020, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:07 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x404) 06:48:07 executing program 3: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:07 executing program 0: getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:07 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x2, r1, 0x9}) times(0x0) 06:48:07 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000ac0)=0x10001, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) write$bt_hci(r0, &(0x7f0000005ec0)={0x1, @le_conn_param_req_reply={{0x2020, 0xe}, {0xc9, 0x1, 0x36e2, 0x1, 0x1, 0x2}}}, 0x12) clock_gettime(0x0, &(0x7f0000008d40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000008b00)=[{{&(0x7f0000000b00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f0000000c80)=""/225, 0xe1}, {&(0x7f0000000d80)=""/205, 0xcd}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/163, 0xa3}], 0x3, &(0x7f0000002080)=""/137, 0x89}, 0x1}, {{&(0x7f0000002140)=@alg, 0x80, &(0x7f0000002440)=[{&(0x7f00000021c0)=""/99, 0x63}, {&(0x7f0000002240)=""/170, 0xaa}, {&(0x7f0000002300)=""/65, 0x41}, {&(0x7f0000002380)=""/47, 0x2f}, {&(0x7f00000023c0)=""/88, 0x58}], 0x5}, 0x8001}, {{&(0x7f00000024c0)=@ieee802154, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002540)=""/81, 0x51}, {&(0x7f00000025c0)=""/62, 0x3e}, {&(0x7f0000002600)=""/185, 0xb9}], 0x3}, 0x6}, {{&(0x7f0000002700)=@ax25={{0x3, @netrom}, [@bcast, @bcast, @bcast, @netrom, @bcast, @rose, @rose, @default]}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002780)=""/5, 0x5}, {&(0x7f00000027c0)=""/28, 0x1c}, {&(0x7f0000002800)=""/173, 0xad}, {&(0x7f00000028c0)=""/199, 0xc7}, {&(0x7f00000029c0)=""/224, 0xe0}, {&(0x7f0000002ac0)=""/164, 0xa4}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x7, &(0x7f0000003c00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000004c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004c80)=""/105, 0x69}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/230, 0xe6}, {&(0x7f0000005e00)=""/169, 0xa9}, {&(0x7f0000005ec0)}, {&(0x7f0000005f00)=""/7, 0x7}], 0x6}, 0x5}, {{&(0x7f0000005fc0)=@xdp, 0x80, &(0x7f0000006380)=[{&(0x7f0000006040)=""/255, 0xff}, {&(0x7f0000006140)=""/95, 0x5f}, {&(0x7f00000061c0)=""/218, 0xda}, {&(0x7f00000062c0)=""/137, 0x89}], 0x4, &(0x7f00000063c0)=""/78, 0x4e}, 0x2}, {{&(0x7f0000006440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000007780)=[{&(0x7f00000064c0)=""/137, 0x89}, {&(0x7f0000006580)=""/124, 0x7c}, {&(0x7f0000006600)=""/170, 0xaa}, {&(0x7f00000066c0)=""/120, 0x78}, {&(0x7f0000006740)=""/4096, 0x1000}, {&(0x7f0000007740)=""/7, 0x7}], 0x6, &(0x7f0000007800)=""/35, 0x23}, 0x5}, {{&(0x7f0000007840)=@alg, 0x80, &(0x7f0000008a00)=[{&(0x7f00000078c0)=""/38, 0x26}, {&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/240, 0xf0}], 0x3, &(0x7f0000008a40)=""/153, 0x99}, 0x101}], 0x9, 0x40000000, &(0x7f0000008d80)={r2, r3+60000000}) recvmmsg(r1, &(0x7f0000000980)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/167, 0xa7}, {&(0x7f0000000240)=""/182, 0xb6}], 0x2, &(0x7f0000000340)=""/39, 0x27}, 0x7}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/129, 0x81}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0xfffffff8}, {{&(0x7f0000000540)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/88, 0x58}, {&(0x7f0000000640)=""/223, 0xdf}], 0x2, &(0x7f0000000780)=""/49, 0x31}, 0x1}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000840)=""/55, 0x37}], 0x1, &(0x7f00000008c0)=""/133, 0x85}, 0xc13}], 0x4, 0x1, &(0x7f0000000a80)={0x0, 0x3938700}) 06:48:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:48:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x65, 0x7fff0000}, {0x5, 0x6, 0x8, 0x6}]}) times(0x0) 06:48:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:07 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:48:07 executing program 7: syz_emit_vhci(&(0x7f0000000700)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0x20}, {0x0, 0x3f, 0x7f}}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c805000000000100"], 0x9) syz_emit_vhci(&(0x7f00000003c0)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f06000000043ac4debc30e49132f03f69f05ead03007af7d6bdedbbb6a7e80406b69b4e386f5e43bdaf3fe440b9ce9b7c909181e07903b80a0dfc69cc27ed84e71757c4e1c736c0b5dfb02e254c56840b0d4e95dde1e08ff844bc42d62e1086222b5f1ecd155e0b7fe7ef4a7158d452d92fcde3ba282e82b42def15ef7c1af96806f837f8068e08dccbd8edbd4aa3efa300"/157], 0x7) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT, 0xfffffff3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x54) getdents64(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x15c) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYRES64=r0, @ANYRES32], 0xa) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0552748f2949000500000000000000bc4fb367c954f8d8730565611e148983f39780"], 0x17) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000380), 0x1f9, 0x2000) faccessat2(r0, &(0x7f0000000100)='./file0\x00', 0x1a1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0xffffffff, 0xffffff85}) syz_emit_vhci(&(0x7f0000000400)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000800)=ANY=[], 0x90) clone(0x4c01f900, 0x0, &(0x7f0000000080), 0x0, 0x0) 06:48:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) times(0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x1, 0xff, 0x3, 0x8001}]}, 0x10) times(&(0x7f0000000000)) times(&(0x7f0000000180)) 06:48:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2010, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 454.568501] Bluetooth: hci7: unexpected event for opcode 0x100c [ 454.572143] Bluetooth: hci7: ACL packet for unknown connection handle 1480 [ 454.575600] Bluetooth: hci7: SCO packet for unknown connection handle 201 [ 454.576459] Bluetooth: hci7: ISO packet for unknown connection handle 1106 [ 454.718374] Bluetooth: hci7: unexpected event for opcode 0x100c [ 454.719548] Bluetooth: hci7: ACL packet for unknown connection handle 1480 [ 455.068218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.069807] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.073747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.076576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 455.079712] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 455.081392] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 455.083284] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 456.284891] Bluetooth: hci1: command 0x0406 tx timeout [ 457.116971] Bluetooth: hci7: command 0x0406 tx timeout [ 457.117032] Bluetooth: hci6: command 0x0406 tx timeout [ 457.117489] Bluetooth: hci5: command 0x0406 tx timeout [ 457.118753] Bluetooth: hci4: command 0x0406 tx timeout [ 457.119087] Bluetooth: hci3: command 0x0406 tx timeout [ 457.119108] Bluetooth: hci2: command 0x0406 tx timeout 06:48:16 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:48:16 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:16 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)={0x20, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @nested={0x5, 0x0, 0x0, 0x1, [@generic="d5"]}]}, 0x20}], 0x1}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x54cb, 0x2, 0x5, 0x99e}) 06:48:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x4000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:16 executing program 6: fcntl$notify(0xffffffffffffffff, 0x402, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfff7, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r2, r1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000000080)="0b974bd16d52e9b2873d9da2a8340a1888d79ea9d2e8fe06faeb241bcbfa7dddb5c2e883fc5b95e5e20d87042849439a04817ff46e8abd96eef950abf8fada254d78e16811d274fbbe115ffe53aead526f90a2ecc4fd0967bb2d6b5376a6ca7297afba0a067d5c7601633a6e5720b08f02546a0bd4c87891adf78ca28ba4aacb4c761b3de61cb246d7e20a60b41244b6a8df472b45e984ce0813cae2c8f660bff3712598866a5501236126c183c403f132605e94") 06:48:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fff0000}, {0x9, 0x5, 0x6, 0x5}, {0x8, 0x6, 0x4, 0x1}, {0x401, 0x81, 0xba, 0x3}, {0x0, 0x7, 0x4, 0x9}, {0x400, 0x6, 0x5, 0x2}, {0x0, 0x0, 0x6, 0x18}]}) times(0x0) 06:48:16 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:48:16 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) [ 463.372334] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.373003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.373674] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.377497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 463.379731] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 463.381860] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 463.382432] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:48:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 463.418106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.418784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 06:48:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) [ 463.428700] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.436550] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 463.443881] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 463.444452] Bluetooth: hci6: Opcode 0x0c1a failed: -4 06:48:16 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) [ 463.455887] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:48:16 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r1, 0x8}) 06:48:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 06:48:16 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x80000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f00000000c0)="5d232dcb1ee69526fd044262c1186a39ba36d01b67c02f5c48eea66662ac688f1ad2dfa23d918dc404ba20a5d74bcdb69c580bc7db3cd2af6400fc1aa66c841251c42bc5bab653f58166d6dc457aab7bf9f65023922a424757cb592a929584ca34353e1a989756f55e13cbd62ea830850287a38ac83a5974ede4964ad2c80fc59491e2fd1027146a9426d2f1d70b18f44d57b82d05f2f5a6394e3114d0a685b2cfcef54dd5d102ea24b20cd9d5170c780f2bfc38eecb52838c65bdc1136a1463c6528a1092fd00a60725d838b56473e8f72507111de2256bca7c0f88eeb239e045393850") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r4, r3) write$bt_hci(r4, &(0x7f00000001c0)={0x1, @io_capability_reply={{0x42b, 0x9}, {@none, 0x5, 0xb6, 0x4}}}, 0xd) 06:48:16 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x3, 0x2, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x2, 0xae, 0x89, 0x7}, {0x48b, 0xbb, 0x9, 0xffffffc0}, {0x0, 0x7, 0xff, 0xe9}, {0x9, 0x3, 0x2, 0x7f}, {0xffff, 0xff, 0x8, 0x8}, {0x400, 0x4, 0x7f, 0x8}]}) times(0x0) times(&(0x7f0000000100)) times(&(0x7f0000000140)) 06:48:16 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) poll(&(0x7f0000000400)=[{r1, 0x2810}, {0xffffffffffffffff, 0x8100}, {r0, 0x2000}, {r1, 0x504}, {0xffffffffffffffff, 0x8006}, {0xffffffffffffffff, 0x44c}, {r1, 0x100}], 0x7, 0x2009) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x2362, &(0x7f0000000280)={0x0, 0x200, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xc, 0x0, r3) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x944f103ff3acba85) close(r0) clone3(&(0x7f0000005880)={0x69c72400, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f00000001c0)=""/35, 0x0}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000003c0), 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000180), 0x1) clone3(&(0x7f00000000c0)={0x100009100, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x25, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x61c4, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x3, 0x192, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000005880)={0x61020100, 0x0, &(0x7f0000005700), 0x0, {}, 0x0, 0x0, &(0x7f0000005800)=""/32, 0x0, 0x0, {r5}}, 0x58) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f0000000440)=r1, 0x1) [ 464.343078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 464.344579] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 464.346743] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 464.350175] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 464.351562] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 464.353038] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 464.354639] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 465.565033] Bluetooth: hci1: command 0x0406 tx timeout [ 466.396959] Bluetooth: hci7: command 0x0406 tx timeout [ 466.398149] Bluetooth: hci6: command 0x0406 tx timeout [ 466.398174] Bluetooth: hci5: command 0x0406 tx timeout [ 466.399239] Bluetooth: hci4: command 0x0406 tx timeout [ 466.399675] Bluetooth: hci3: command 0x0406 tx timeout [ 466.400681] Bluetooth: hci2: command 0x0406 tx timeout 06:48:27 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 06:48:27 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x40010, r0, 0x275af000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f0000000080)) 06:48:27 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:27 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x4, 0x5, 0x5, 0x8}, {0xb1, 0xff, 0x41, 0x3}, {0x0, 0x2, 0xf4, 0x77}, {0xfffe, 0x4, 0x1, 0x15f}]}) times(0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1) times(&(0x7f0000000000)) times(&(0x7f0000000140)) 06:48:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100), 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:48:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x28) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:48:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 06:48:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:27 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:48:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) write$P9_RLCREATE(r2, &(0x7f0000001640)={0x18}, 0x18) times(0x0) 06:48:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) (fail_nth: 1) 06:48:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 474.110135] FAULT_INJECTION: forcing a failure. [ 474.110135] name failslab, interval 1, probability 0, space 0, times 0 [ 474.112236] CPU: 1 UID: 0 PID: 6418 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 474.112286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 474.112308] Call Trace: [ 474.112316] [ 474.112324] dump_stack_lvl+0xfa/0x120 [ 474.112366] should_fail_ex+0x4d7/0x5e0 [ 474.112386] ? avc_has_perm_noaudit+0x59/0x3d0 [ 474.112418] should_failslab+0xc2/0x120 [ 474.112442] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 474.112474] ? __alloc_skb+0x2ab/0x370 [ 474.112509] ? __alloc_skb+0x2ab/0x370 [ 474.112533] ? cred_has_capability.isra.0+0x1bd/0x2c0 [ 474.112553] __alloc_skb+0x2ab/0x370 [ 474.112580] ? __pfx___alloc_skb+0x10/0x10 [ 474.112614] ? trace_cap_capable+0x156/0x1b0 [ 474.112640] create_monitor_ctrl_open+0x16e/0x780 [ 474.112667] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 474.112691] ? security_capable+0x2f/0x90 [ 474.112732] hci_sock_ioctl+0x35e/0x810 [ 474.112754] ? perf_trace_lock+0xb5/0x5d0 [ 474.112787] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 474.112812] ? __pfx_perf_trace_lock+0x10/0x10 [ 474.112850] ? proc_fail_nth_write+0x97/0x220 [ 474.112881] sock_do_ioctl+0xd1/0x240 [ 474.112914] ? __pfx_sock_do_ioctl+0x10/0x10 [ 474.112944] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 474.112972] ? do_vfs_ioctl+0x125/0x1470 [ 474.113002] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 474.113029] ? ioctl_has_perm.constprop.0.isra.0+0x32e/0x4e0 [ 474.113064] ? __mutex_unlock_slowpath+0xd1/0x750 [ 474.113100] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 474.113142] sock_ioctl+0x40d/0x630 [ 474.113164] ? __pfx_sock_ioctl+0x10/0x10 [ 474.113185] ? lock_release+0xc8/0x290 [ 474.113225] ? selinux_file_ioctl+0xb9/0x280 [ 474.113261] ? __pfx_sock_ioctl+0x10/0x10 [ 474.113286] __x64_sys_ioctl+0x18f/0x210 [ 474.113317] do_syscall_64+0xbf/0x430 [ 474.113341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.113363] RIP: 0033:0x7f168a959b19 [ 474.113380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 474.113400] RSP: 002b:00007f1687ecf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.113421] RAX: ffffffffffffffda RBX: 00007f168aa6cf60 RCX: 00007f168a959b19 [ 474.113435] RDX: 0000000000000000 RSI: 00000000400448cc RDI: 0000000000000004 [ 474.113448] RBP: 00007f1687ecf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 474.113461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.113473] R13: 00007fff723e2a8f R14: 00007f1687ecf300 R15: 0000000000022000 [ 474.113506] [ 474.659676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.661792] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.663548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 474.665431] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.667536] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 474.669466] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 474.674402] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 475.868931] Bluetooth: hci1: command 0x0406 tx timeout [ 476.700956] Bluetooth: hci7: command 0x0406 tx timeout [ 476.701480] Bluetooth: hci6: command 0x0406 tx timeout [ 476.701946] Bluetooth: hci5: command 0x0406 tx timeout [ 476.702370] Bluetooth: hci4: command 0x0406 tx timeout [ 476.702795] Bluetooth: hci3: command 0x0406 tx timeout [ 476.703257] Bluetooth: hci2: command 0x0406 tx timeout 06:48:37 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:37 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) 06:48:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff2000}]}) times(0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r0, 0x144, 0x80000}) 06:48:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) (fail_nth: 2) 06:48:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:48:37 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:37 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x5}, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x35, &(0x7f0000000900)={@private1}, 0x14) sendmmsg$inet6(r2, &(0x7f0000006140), 0x0, 0x0) 06:48:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) (fail_nth: 3) 06:48:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000002e2f66696c6530005ab5aadf34451de44098e8ab9b94a30f41cd6cd594963c6fa8f6ee2bfe59d13c898ce6d54d9ccf1950d02c507f8541871a80318ec9ac6f00aab6c48e046bbe38a433c5cbe672563e9441ff9d015fc1261a9838d4c913a9467707dbb1fb569501e1742a2423c6ecbc42634e2a7225a99eafb494a801800000c28e1a9f38fd5e2d3b4e02d691d83e2ddf0900000000000000b3230778015673c474ec7250f2c879c3b5cf9af041923928ab06ea9f4bc4d7068a869464a96ff98475bb85ebb0e7be1716e70719e32c60a400c10fa89f77afb16e58c0490581b63b4c62"]) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000100)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x20, 0x7f, 0x1, 0x5}, {0x6, 0x1, 0x9, 0xc9}]}) 06:48:37 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:48:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) (fail_nth: 4) 06:48:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8100000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:37 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0xa, &(0x7f0000000000)=[{0xb5, 0x7, 0x1, 0x1}, {0x0, 0x3, 0x5, 0x7}, {0x9, 0xe, 0x3, 0x81}, {0x8, 0xff, 0x8, 0x80}, {0x81, 0x5, 0x68, 0x8e58}, {0x1, 0x6, 0x2}, {0x266, 0xda, 0x7c, 0x6}, {0xc4, 0x1, 0x3f, 0x1f}, {0x800, 0x6, 0x3f}, {0x800, 0x2b, 0x9, 0xa1}]}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000002c0)) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x256940, 0x140, 0x11}, 0x18) pread64(r1, &(0x7f0000000140)=""/157, 0x9d, 0x1) r2 = socket$inet6(0xa, 0x6, 0x3) signalfd(r0, &(0x7f0000000340)={[0x10001]}, 0x8) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0x0) sendto(r2, &(0x7f0000000200)="20f95760d0b5afc7c12c7d391c246dd708037078fd756541272f3998016d", 0x1e, 0x40000001, &(0x7f0000000240)=@can, 0x80) 06:48:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[0x0]) io_setup(0x4, 0x0) io_destroy(0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r3, &(0x7f0000000900)="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", 0x1fe) fcntl$setstatus(r3, 0x4, 0x44000) sendfile(r3, 0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) [ 485.234878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 485.236236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 485.237747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.239737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 485.243161] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 485.244458] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 485.245548] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 486.429637] Bluetooth: hci1: command 0x0406 tx timeout [ 487.261126] Bluetooth: hci7: command 0x0406 tx timeout [ 487.261152] Bluetooth: hci6: command 0x0406 tx timeout [ 487.261198] Bluetooth: hci5: command 0x0406 tx timeout [ 487.262290] Bluetooth: hci4: command 0x0406 tx timeout [ 487.262663] Bluetooth: hci3: command 0x0406 tx timeout [ 487.264021] Bluetooth: hci2: command 0x0406 tx timeout 06:48:46 executing program 0: r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:46 executing program 3: r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) (fail_nth: 5) 06:48:46 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00090000000800002e2866696c659759"]) write$bt_hci(r4, &(0x7f0000000040)={0x1, @create_conn={{0x405, 0xd}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x81, 0x9, 0x78e, 0x7}}}, 0x11) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f00000000c0)=""/3) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000200)={0x3, 0x3, "14275f", 0x7f, 0x80}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x5}) listen(r5, 0x200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x20000, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000180)={0x0, r0, 0x7, 0xb7dc, 0x2b7, 0x29c7}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:48:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:46 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:48:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x4004) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008040000", @ANYRES32=0x0, @ANYBLOB="38000e00808000000802110000000802110000015050505050500000000000000000000000000000640000000301002a01003c0400000000"], 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000055}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50010000", @ANYRES16=r1, @ANYBLOB="08002abd7000fcdbdf252e00000008000300", @ANYRES32=r5, @ANYBLOB="05001901090000001e00940080001b06000000000000000400dd00150000000800001000003c00001000b00000010000d8f6060001040600"], 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x5}}, './file0\x00'}) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xad5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x20000000000007, 0x0, [0x7, 0x3, 0x7, 0x6], &(0x7f0000000240)}) 06:48:46 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000200)={0x1, 0x92c, 0x7}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0xc400, 0x0) sendfile(r5, r6, 0x0, 0xffff) write$bt_hci(r0, &(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES64, @ANYBLOB="c7510abbf5eb2f2013cd69b178daa2d343f044d3ff1a60ec46226977fcea5b6e7e118ad99aa36d2a10d62adddafe9ed7e8d1b06ff57d4951d20083e5032b66ddc990a8eeb470ad19c500d2142a93eb0603e8e681a5eb8b88dc8d80690e82ad800493ad16d6b86e0fa9443de3cfe89f6eda5b19540136eb210fab6e84e0f416a6b6f540bfb7afd87521ecbae0c08bbfe759bb9060bb56369514e79533c0d1ebd47418ad211f8ddcae19745febf0a1a364e3f8264c55e698e3f44586ec351ecc7b7c7330abe63eeaa807afc1e5187f0ddc4491a5d61a9b2c77be87680a8726"], 0x6) [ 493.197124] FAULT_INJECTION: forcing a failure. [ 493.197124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.198107] CPU: 1 UID: 0 PID: 6682 Comm: syz-executor.4 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 493.198124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 493.198132] Call Trace: [ 493.198136] [ 493.198141] dump_stack_lvl+0xfa/0x120 [ 493.198172] should_fail_ex+0x4d7/0x5e0 [ 493.198189] _copy_to_user+0x32/0xd0 [ 493.198204] simple_read_from_buffer+0xe0/0x180 [ 493.198225] proc_fail_nth_read+0x18a/0x240 [ 493.198241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.198255] ? security_file_permission+0x22/0x90 [ 493.198275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 493.198288] vfs_read+0x1eb/0xc70 [ 493.198304] ? __pfx_vfs_read+0x10/0x10 [ 493.198316] ? lock_release+0xc8/0x290 [ 493.198337] ? __fget_files+0x20d/0x3b0 [ 493.198362] ksys_read+0x121/0x240 [ 493.198373] ? __pfx_ksys_read+0x10/0x10 [ 493.198384] ? fput+0x92/0xd0 [ 493.198402] do_syscall_64+0xbf/0x430 [ 493.198416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.198430] RIP: 0033:0x7f168a90c69c [ 493.198440] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 493.198452] RSP: 002b:00007f1687ecf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 493.198463] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f168a90c69c [ 493.198472] RDX: 000000000000000f RSI: 00007f1687ecf1e0 RDI: 0000000000000003 [ 493.198479] RBP: 00007f1687ecf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 493.198486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.198493] R13: 00007fff723e2a8f R14: 00007f1687ecf300 R15: 0000000000022000 [ 493.198511] [ 493.212508] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 06:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) [ 493.243353] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 06:48:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:46 executing program 7: perf_event_open(&(0x7f0000000080)={0xa, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:48:46 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) times(0x0) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r2 = getpid() r3 = fork() ptrace(0x10, r3) ptrace$peeksig(0x15, r3, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r4 = getpid() r5 = fork() ptrace$setsig(0x4203, r5, 0x3, &(0x7f0000000700)={0x6, 0x5, 0x2}) ptrace(0x10, r5) ptrace$peeksig(0x15, r5, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r6 = fcntl$dupfd(r0, 0x80c, r0) clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x14}, &(0x7f0000000100)=""/251, 0xfb, &(0x7f0000000200)=""/114, &(0x7f0000000280)=[r1, r2, 0x0, r3, 0x0, 0x0, r4, r5], 0x8, {r6}}, 0x58) 06:48:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:46 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 06:48:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x2, 0x0) [ 494.026023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 494.027709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 494.029343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 494.030950] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 494.032574] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 494.034365] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 494.036377] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 495.260985] Bluetooth: hci1: command 0x0406 tx timeout [ 496.028947] Bluetooth: hci2: command 0x0406 tx timeout [ 496.092983] Bluetooth: hci7: command 0x0406 tx timeout [ 496.093014] Bluetooth: hci6: command 0x0406 tx timeout [ 496.093061] Bluetooth: hci5: command 0x0406 tx timeout [ 496.094144] Bluetooth: hci4: command 0x0406 tx timeout [ 496.094518] Bluetooth: hci3: command 0x0406 tx timeout 06:48:56 executing program 3: r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010b14bec900002400ee196cb43ffd0d2f8b5c4983f2af8b5f7fce7541b041dda2d52343d397a5cc0d09d4fe711e38960a49000000000000b7cfdda61fd23db73e572369be18fbf88786d3d89ed0432ccb04e7a8701075e3a4ffd6f4b738500178f16812cca846e3f5b905ba15e9f138cc9bfe7fdd8dc2bd4b000000000000006fe668885e1d8eebf334b04dd7fa489f8f9d73471882f77e707ed53e0badc165917c3086d1fae71a4f082c87582e39a7e7e8391b6885889efc781f1f50c0b074bfa7"], 0xc2) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) write$bt_hci(r1, &(0x7f00000001c0)={0x1, @disconn_phy_link={{0x437, 0x2}, {0xc9}}}, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="33d9c6020fdecee4869395f8a20f8914a5808c554f523ad193a310bfc20e48c64ffe65e601f21d24bd71a4c1239ba06e324aedfdcdc26eb84c372bc27585fa6ee1cfe8a94d656a8e39d35abb9da6970c92e0821def35b4a8ddc3d3711f86816a4a14a569b2357513ed9f15a1ad82c5f9e2bb23c5f31f85d7214f6c26ffe329853721daf0c7c88144d9cb80e801f4b4ec96fb587114d3bc594744d089cad54c9c7bdb016ec880c5a6c4b70739971bf70da312a32c0c9da4b5f1f4ed5c82a9a931e906", @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYRES64, @ANYRESOCT=r2, @ANYRESOCT=r4, @ANYRESHEX=r5, @ANYRES64=r6], 0x6) 06:48:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:56 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000081c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/234, 0xea}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000080)}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000000440)=""/112, 0x70}], 0x7, &(0x7f0000000540)=""/246, 0xf6}, 0x9}, {{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/1, 0x1}, {&(0x7f0000000700)=""/65, 0x41}], 0x2, &(0x7f00000007c0)=""/177, 0xb1}, 0x19}, {{&(0x7f0000000880)=@alg, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000900)=""/189, 0xbd}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/60, 0x3c}], 0x4, &(0x7f0000001b40)=""/98, 0x62}, 0x6}, {{&(0x7f0000001bc0)=@can, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/149, 0x95}], 0x2, &(0x7f0000002d40)=""/17, 0x11}, 0xb8dd}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002d80)=""/89, 0x59}, {&(0x7f0000002e00)=""/183, 0xb7}, {&(0x7f0000002ec0)=""/141, 0x8d}, {&(0x7f0000002f80)=""/84, 0x54}], 0x4, &(0x7f0000003040)=""/7, 0x7}, 0x10001}, {{&(0x7f0000003080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000004640)=[{&(0x7f0000003100)=""/92, 0x5c}, {&(0x7f0000003180)=""/171, 0xab}, {&(0x7f0000003240)=""/190, 0xbe}, {&(0x7f0000003300)=""/136, 0x88}, {&(0x7f00000033c0)=""/110, 0x6e}, {&(0x7f0000003440)=""/58, 0x3a}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/73, 0x49}, {&(0x7f0000004500)=""/142, 0x8e}, {&(0x7f00000045c0)=""/125, 0x7d}], 0xa, &(0x7f0000004700)=""/201, 0xc9}, 0x90}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004800)=""/93, 0x5d}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/25, 0x19}], 0x3, &(0x7f0000004940)=""/45, 0x2d}, 0x3}, {{&(0x7f0000004980)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004a00)=""/224, 0xe0}], 0x1, &(0x7f0000004b40)=""/83, 0x53}, 0x81}, {{&(0x7f0000004bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000007e80)=[{&(0x7f0000004c40)=""/245, 0xf5}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/4096, 0x1000}, {&(0x7f0000007d40)=""/219, 0xdb}, {&(0x7f0000007e40)=""/59, 0x3b}], 0x6, &(0x7f0000007f00)=""/145, 0x91}, 0x6}, {{&(0x7f0000007fc0)=@alg, 0x80, &(0x7f0000008140)=[{&(0x7f0000008040)=""/215, 0xd7}], 0x1, &(0x7f0000008180)=""/29, 0x1d}, 0x81}], 0xa, 0x12040, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000009880)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r9 = dup2(r8, r7) ioctl$sock_bt_hci(r9, 0x400448ca, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000097c0)='attr/sockcreate\x00') io_submit(0x0, 0x5, &(0x7f0000009840)=[&(0x7f0000008500)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f0000008440)="ee0152e74642450f9db0a628e17526a3cb68686001ba7ada129ec884ffe1069a0dca40cb7e440e703839497a47e7b4d444ffcdeb0554b6c8d8144f42e2156b3168ca9cc4a7547c6c7965374a4383f135e61024969e84fb4f2b3eb1043505f1fa51747b4120921e42a0f110629a37042110c4d54c8cc10facb4ea3faf0a9bffcc3d1ba94488c5e3b6d7fa7803cf1098e3dd56519fa54c", 0x96, 0x2, 0x0, 0x0, r4}, &(0x7f00000085c0)={0x0, 0x0, 0x0, 0x1, 0xbe, r5, &(0x7f0000008540)="2f0761b3270b91c0b28fc40a7bca94f7843c70365cd5f3f9761d54b526972c49cbb83f63bec410a86fc424605b287ed20f05519409498dda505de1c93fe9de12912891a7eb103af229b96e880985cebb173077cbeaef550b3c398718", 0x5c, 0x1ff}, &(0x7f0000008640)={0x0, 0x0, 0x0, 0x1, 0x3, r6, &(0x7f0000008600)="e564a4c0009bce07fbce3db432511fd8830b2c427618664ea7078c1eeb8223b566c8994648d886f4ddcf975f4d07f165369ab9c2e460c716a7078605ac74a3f7", 0x40, 0x1, 0x0, 0x1, r9}, &(0x7f0000009680)={0x0, 0x0, 0x0, 0xc, 0x5, r0, &(0x7f0000008680)="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", 0x1000, 0x3ff, 0x0, 0x1}, &(0x7f0000009800)={0x0, 0x0, 0x0, 0x2, 0x9, r0, &(0x7f00000096c0)="220a0b2629b2e50726608f0a1741535de6005b788b502a3111906e3c4d618b8921995eb09b1270893bd48fe4b30b4f6767a866f265ec904ba706dfb38e686339378f15dc0c73faf455113954907910de24639f0d880c18271ecde37ec3952bfcbefe3953d4c732841b60d2735dee00b6bc6887b4b0660f1f2ca4946aabb230ba8db9ce1afc58e62845d339ae0027120a4b4f9aaae15a1e0ee7ccc5bb74e1f5d29bfd325a821a4919435611fa6f59129d257c340a99a5f62ccd2e5f881725267901f98faf2b7038deff54863d429f55ed6eebbc3eb1", 0xd5, 0x5, 0x0, 0x0, r10}]) 06:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4b47, 0x0) 06:48:56 executing program 7: fsopen(&(0x7f0000000000)='mqueue\x00', 0x0) 06:48:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(0xffffffffffffffff, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:48:56 executing program 0: r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4b49, 0x0) 06:48:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000140)="5847b287e97a0b22bf4360653d6aca0d9f95da29df179f102a14cfc2267f1bbe8727c8b44057294a8d3c9f337656c069c75c74f72afc03e341916b810fac938046516a27189451b567ae7e9384714f160c2c360ec61e13909dd014f988ae6b556c1455932640a3f4b918ed2b7cc51e497cd8e754") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES64=r1, @ANYBLOB="b10000000007c6012af58e12ace322899d4392bf458ac37a67be23e8c6088a553e4cd84f3c"], 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x480000, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000280)=0x15fb9aa, &(0x7f00000002c0)=0x4) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) r4 = syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x400) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000340)={@broadcast, @broadcast, 0x0, 0x5, [@empty, @multicast2, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x24) r5 = dup3(r2, r1, 0x0) getsockname(r5, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000380)=0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) write$tun(r7, &(0x7f00000003c0)={@val={0x0, 0x806}, @void, @eth={@local, @multicast, @val={@val={0x9100, 0x4, 0x1, 0x2}, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0x5, 0x6, "97396c", 0x38c, 0x21, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x17, 0x4, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}, @routing={0x2b, 0x6, 0x0, 0x7, 0x0, [@mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x1e}]}, @dstopts={0xff, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x952}]}, @hopopts={0x2c, 0x1d, '\x00', [@generic={0x1, 0xb5, "176d2b18c979b25dd94082dff3922e3c20219e844223ae81f9224b3d0033ef0a7abefab930fb535485d23b44d0d30cc8fa12c4e2670d6ab860f1e8110fef7f7666b4d84669c73b5ffc3953d1aaf3a7ca897c1448f3fc0bdd9915252c4594985de56283524e51a414e9a01174db768059ca14b57c4fd8e0532318ef27736a5c8f057da2e3d4701d527f661cbe6592fcdea1d39d0e0cbcf11659cdabb37d10cd29aaadf9398e9ebb66ed3ad1784e797278a3b8c171b8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x5, [0x3ff, 0x0, 0x7]}}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0x0, [0x9]}}]}, @fragment={0x16, 0x0, 0x9b, 0x0, 0x0, 0x2, 0x68}, @dstopts={0x3a, 0x2a, '\x00', [@ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x3, 0x37, "ecaf5060484801c846b1b6ba5dc045f01b9cedf86bff71ac666c3a973da0b958d210decd7145db46e8f3134a183855072594dec9612943"}, @jumbo={0xc2, 0x4, 0xffff}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5, 0xf3, "3fc6dc4b56db91c27c3ff3b5b334ffb80f6da1aa186bde08b397f00842a8260ceecfab2f603a334b06977fcb56b08ab61eb95daf34ddfc86c4a4f69ad50695ade5ca32d73a09cce28fe4c317df5f84e8081bd24c2194b9320552c301d1047ef39b05c0140ebd0cd21c00c6507d2bd95a66b7083d13c3d9019b2084cfd08241aaf8926f4db2f14b854424f4d167b8b6f0a5ec1a1c85e82cdadf348b3f586213f0070254d3c9b44698f4d209a73b035f8afd2e32954ed4bcde8c9a2ec10cfff9d52ca3bf59b5552a19d6d642fa9c2d57f6e98e9430619dcb7032335f5305559b87736bce58e3ea375d66868dfaa860e3bd1ee360"}]}, @dstopts={0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xc1}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @loopback}, @pad1]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x3f, 0x40, 0x0, [@dev={0xfe, 0x80, '\x00', 0x23}]}], {{0x4e20, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x3, 0x7, "5fcb35", 0x5, "2bc8ff"}, "e39252a5eca96eae542aa355f51c6e1b0f6f1ca4143aafb6f070e4a2fd92f518cb49051cb597760fa8dc76e52950ec5e75a23d775c9f45bfd2c2af3755f38869f3668c9528a1ed4c97516331077d9d71c0bea2b7475b722cb5db7f14"}}}}}}}, 0x3ce) 06:48:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x541b, 0x0) 06:48:56 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffd, 0x0) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x10, 0x2}], 0xff2f) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x401) write$evdev(r1, &(0x7f00000000c0)=[{{0x77359400}, 0x1, 0x10, 0x2}], 0xff2f) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/6) 06:48:56 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x800, "9efdef", 0x1f, 0x80}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x4, 0x200, 0x2, 0xffffffff, 0x0, [0x0, 0x10000, 0x0, 0x4]}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5421, 0x0) 06:48:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5450, 0x0) [ 503.947976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 503.949569] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 503.952438] Bluetooth: hci3: Opcode 0x0401 failed: -112 [ 503.954318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 503.957949] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 503.960380] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 503.962636] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 503.963057] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 503.965619] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:48:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000080)={'lo\x00', 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@getsadinfo={0x334, 0x23, 0x200, 0x70bd2d, 0x25dfdbfe, 0x0, [@sa={0xe4, 0x6, {{@in=@local, @in6=@empty, 0x4e20, 0x3f, 0x4e21, 0x0, 0xa, 0x80, 0x0, 0x87, 0x0, r2}, {@in=@rand_addr=0x64010101, 0x4d2, 0x3c}, @in6=@mcast2, {0x80000000, 0xfffffffffffffffd, 0x4, 0xc8f, 0x7c, 0xffffffff7fffffff, 0x6}, {0x5, 0x7, 0x200, 0x1}, {0x10000}, 0x70bd28, 0x3503, 0xa, 0x3, 0x0, 0x4}}, @algo_comp={0x134, 0x3, {{'deflate\x00'}, 0x760, "c756ea8f398aa58e97ebac8dac1229b21e0c8bcf0cd4a1aeeac0837b5cb912300d7ba4de0378a581b3491dbba8eae8ddb85a4cd20072a54759364fd49d46ea2c733ceaef695bdbccf4e3db1a7ee83da76e9178c0578d87951ae0573a4538ee3b1b2540ba72859fc9a5df5e47e860f7006fe30c848f0f27833c692f17fcab91086dc6cf503721e2932de4d7286557d5424e0ebb70ac5fdc1a350436d7d7bcebf32e335298589b12b05a4a750adc129fa02b08d1394fda6fcfbf32f2d787ea702abbcdcfc887372b234f530ee9821b4f3eead42078220b898845adcbdb911b4a841369204745b7eff127b57e27"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @sa={0xe4, 0x6, {{@in=@broadcast, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e21, 0x631, 0x2, 0x20, 0x20, 0x2b, 0x0, 0xee01}, {@in6=@mcast1, 0x4d4, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x15}, {0x81, 0x10000, 0x7fffffff, 0x3, 0x78c, 0x7fffffff, 0xffffffff, 0x3e37}, {0x4, 0x0, 0xce, 0x8}, {0x8, 0x3, 0xe87}, 0x70bd26, 0x3501, 0xa, 0x0, 0x0, 0x50}}, @XFRMA_IF_ID={0x8}, @srcaddr={0x14, 0xd, @in=@broadcast}]}, 0x334}, 0x1, 0x0, 0x0, 0xc0}, 0x4004000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'macvlan0\x00', &(0x7f00000001c0)=@ethtool_eeprom={0xc, 0xb82b, 0x6, 0x85, "20f2eda23ccb79171f3dafcef4cde78096c3368cf1d49b8ab688e36aa7cf15bbec3a17ad7b59f66e709ac87cc86cb865ea62d00183ff0dd63068d9a28012c23aee97a9aed443f1600169f8fbd07a18ffa64577a1ba73f09e59800e3cc34786236b82d70f14e40d8d4465d51f029858f0855ce80c0995a5ab5c65417e66b1e8d73de70852c9"}}) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000230400012bbd7000ffdbdf250000000008000b00010000000a0000000000002c00130000000000000000000000ffffac1414aa00010000000000000000000000000001000000000a680d000000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4) 06:48:57 executing program 3: r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:48:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5451, 0x0) 06:48:57 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000080)) times(&(0x7f0000000000)) 06:48:57 executing program 0: r0 = syz_io_uring_setup(0x538c, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) [ 504.975559] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.977852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.979080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 504.980188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 504.981438] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 504.982757] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 504.984135] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 506.204944] Bluetooth: hci1: command 0x0406 tx timeout [ 507.036999] Bluetooth: hci7: command 0x0406 tx timeout [ 507.037051] Bluetooth: hci6: command 0x0406 tx timeout [ 507.037548] Bluetooth: hci5: command 0x0406 tx timeout [ 507.038467] Bluetooth: hci4: command 0x0406 tx timeout [ 507.038845] Bluetooth: hci3: command 0x0406 tx timeout [ 507.038866] Bluetooth: hci2: command 0x0406 tx timeout [ 509.084959] Bluetooth: hci3: command 0x0406 tx timeout 06:49:07 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cd, &(0x7f0000001980)="9029cfb5aba555dc70c91df2df84203bfb037cc26ea9a63da638cb9648cb96258e59d74ad0488f60ecd614deebfd71553734c4cc511669bd9469b276c112c1bd28e369a5cdd9c90dd331f5ceebd63bd6969bc2e14c6e921842950bdccca9130b0426657aaba2c5135a7d78f9607ed8b9cf6116dece3287a3b26637f360760985ccecc7e5323093d24fc37d7444ff3422eaf7f2f306f9476a63bacbd42ccceeccbd61fa1c4494b4814250f520d0260ae8b2faeb4604b5ace28a3c1269e59ae0fe7876e668d24a72f37acef24ffafca4825cc30383eb56d5d86f6924") write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000001c40)="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") dup2(0xffffffffffffffff, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0)=0xdd2, 0x4) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000001780)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001b40)=""/216, 0xd8}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000100)=""/143, 0x8f}], 0x5, &(0x7f00000004c0)=""/115, 0x73}, 0x10000}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/23, 0x17}, {&(0x7f0000000680)=""/6, 0x6}], 0x3, &(0x7f0000000700)=""/232, 0xe8}, 0x5}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000800)=""/57, 0x39}, {&(0x7f0000000840)=""/66, 0x42}, {&(0x7f00000008c0)=""/57, 0x39}, {&(0x7f0000000900)=""/64, 0x40}], 0x4}, 0x2f}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/192, 0xc0}, {&(0x7f0000000ac0)=""/212, 0xd4}, {&(0x7f0000000bc0)=""/223, 0xdf}, {&(0x7f0000000cc0)=""/235, 0xeb}, {&(0x7f0000000dc0)=""/104, 0x68}], 0x5, &(0x7f0000000ec0)=""/94, 0x5e}, 0xffffffd3}, {{&(0x7f0000000f40)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, 0xfffffffffffffffd, 0x0, &(0x7f0000000fc0)=""/102, 0x66}, 0x9}, {{&(0x7f0000001040)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000001180)=""/108, 0x6c}, {&(0x7f00000010c0)=""/94, 0x5e}, {&(0x7f0000001280)=""/42, 0x2a}, {&(0x7f00000012c0)=""/155, 0x7}, {&(0x7f0000001380)=""/94, 0x5e}, {&(0x7f0000001400)=""/134, 0x86}], 0x7, &(0x7f0000001540)=""/171, 0xab}, 0x7}, {{&(0x7f0000001600)=@hci, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/162, 0xa2}], 0x1}, 0xffff}], 0x7, 0xe6cadd57051aa85c, &(0x7f0000001940)={0x77359400}) 06:49:07 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:07 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7ffeffff}, {0x6, 0xe0, 0x4, 0x400}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xfff, 0x85, 0x8, 0x5}, {0x9, 0x5, 0x40, 0x8}, {0x9, 0x8, 0x3f, 0x8001}, {0x1, 0x4, 0x20, 0x4}]}) times(0x0) 06:49:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:49:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5452, 0x0) 06:49:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x20100000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:07 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') sendfile(r0, r1, &(0x7f0000000100)=0x4, 0x401) close(r0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) [ 514.367505] audit: type=1326 audit(1762843747.668:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7184 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x7ffe0000 [ 514.376158] 9p: Bad value for 'source' 06:49:07 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4003, 0x0, 0x56, 0x7ffeffff}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r1 = syz_open_pts(0xffffffffffffffff, 0xc0040) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) fstatfs(r0, &(0x7f0000000100)=""/89) times(0x0) 06:49:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 515.194362] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.195412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.197451] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.198899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 515.200238] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 515.201572] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 515.203036] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 516.382029] Bluetooth: hci1: command 0x0406 tx timeout [ 517.213036] Bluetooth: hci7: command 0x0406 tx timeout [ 517.213124] Bluetooth: hci6: command 0x0406 tx timeout [ 517.214217] Bluetooth: hci5: command 0x0406 tx timeout [ 517.215056] Bluetooth: hci4: command 0x0406 tx timeout [ 517.216141] Bluetooth: hci3: command 0x0406 tx timeout [ 517.216924] Bluetooth: hci2: command 0x0406 tx timeout 06:49:19 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{0x200, 0x3f, 0x9, 0x5}, {0x9, 0x80, 0xfc, 0x6}, {0xfe, 0x9, 0x6, 0xffff}, {0x8, 0x7a, 0x40, 0x1}, {0x3, 0x8, 0xff, 0x7ff}, {0x7fff, 0x1f, 0x1c, 0xfffffff9}, {0x8001, 0x9d, 0x0, 0xdf1}]}) times(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000140)}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0xa, &(0x7f00000001c0)=[{0x39d3, 0x1f, 0x1, 0x9fdb}, {0xa3, 0x0, 0x99, 0x9}, {0x7ff, 0x7f, 0x9, 0x1}, {0x9, 0x1, 0xfe, 0xcded}, {0xaf0b, 0x1, 0x1f, 0xb565}, {0x2, 0x99, 0x7, 0x8}, {0x8, 0x6, 0x40, 0x80000000}, {0x7, 0x7, 0x81, 0xffffffff}, {0x2, 0x42, 0x3f, 0x1}, {0xda9, 0x8, 0x8, 0x2877}]}, 0x10) 06:49:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:49:19 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xb) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRESDEC=r6, @ANYRES16=r0, @ANYRES16, @ANYRES64=r5], 0x3) 06:49:19 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/net\x00') sendfile(r0, r1, &(0x7f0000000100)=0x4, 0x401) close(r0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) clone3(&(0x7f00000001c0)={0x3720e0180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 06:49:19 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5460, 0x0) [ 526.018671] audit: type=1400 audit(1762843759.318:24): avc: denied { read } for pid=7317 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 06:49:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x54, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {@with_ht={{{}, {}, @device_a, @device_b}}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @void, @void, @void, @void}}]]}, 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x12fc, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @NL80211_ATTR_CSA_IES={0x12cc, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0xde1, 0x1, 0x8001, 0x3, 0xc61, 0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x7, 0x6, 0x1000]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_IE={0x100, 0x2a, [@cf={0x4, 0x6, {0xf1, 0x81, 0x9eac, 0xb6}}, @preq={0x82, 0x78, @ext={{}, 0x7f, 0x1f, 0x7, @device_a, 0x3ff, @device_b, 0x1000000, 0x5, 0x8, [{{0x1, 0x0, 0x1}, @broadcast, 0x80000000}, {{0x1, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0x80}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @broadcast, 0x1000}, {{}, @device_a, 0x4}, {{}, @broadcast, 0x2}, {{0x0, 0x0, 0x1}, @device_b}]}}, @preq={0x82, 0x6d, @ext={{0x1, 0x1, 0x1}, 0x1, 0x1, 0x6605, @device_a, 0x2, @device_a, 0x800, 0x2, 0x7, [{{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_b, 0x8001}, {{0x1, 0x0, 0x1}, @device_b, 0x81}, {{}, @broadcast, 0x7f}, {{0x1, 0x0, 0x1}, @broadcast, 0x71b1}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{}, @broadcast, 0x8}]}}, @dsss={0x3, 0x1, 0xab}, @mesh_chsw={0x76, 0x6, {0x0, 0x6, 0x1c, 0x6}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1044, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3b, 0x2, "9af0cab478ee116c311136581ac3b8a46b3646b77be91e32ff50684f5af9eb83b3eed7b9861a52f4c719a6db1902ec83ad5b642be5f310"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "b5d9a1c1940f14123885443a463ef212fceef42e278cee9e0b0ae20dc5a822637a1c16846a59be6a515a0791414585083ca247cb6dcaa912f4cc5a7502c4d551424b2851b2c9df6187603310a35609d7c3d507fe50d709457801ac8ef94bff49673acc5ac4a84b578b9e0bb5a02dacc21f10d54947c2c64c7eb6d2a485b0354e0ada20f3fd08cd9ce4d04747e7bce63dfb887a29b2b2366534e8a3b517da92b504062e7088802efe41f1330301f2a2641d722a87d4cfc10ea6d732e293a8ba90d951c54da4728fe5a61a3a1295ea1f4d2a565c28bd126de427fb29eec77750828618dd09f253a946bc7546853edc129e00fd28eb6f925e9e9ea029fbe6f184fa02ded97007fccafcadc5056a8b4963081c298e770fb7c63d294cb69c262f7804c0855822be2be7bc6b5fbd280e2bd01ae616227be6ce1346b4c2407c52dbefbabf34e2c0184db447d459be31a90608e23aa5e59f53b39b321817f6e8315b76924a71764512a69d0f7db28f006c71480841ffb47130f972893151b59dc7ea70e0b406e00f996f31f4a02c3e4a6a325587859b3f55a9e273072cfbd5210106807cb8cd39ea8792120389101a5cc51654b298a19ebbf4f1520b431b9895690ece05fa559556ea72379c096ac0a432572800a11a08547b6fa65089dd2cafda2bd1a80dcc83df548649fff93279f7205277d0170854e2ebb7ed07d7c3d1148f2e00b5706c2b15dcb01458550a9a698cd846fcced76c4d4379a814518aa210f3621c03bb53c37e42c32fb44e967ec7d37e4a3bbc64f18e6976a7d0db9e5f0e905e86c9066aca1053a0552e99a88a59222df5f1a742e23e244333a7577d47dd6228aabebcdb667aae68c5d4b75c513d26246e73803e9f9ed20044a81960bf55a98ed4c22557841ecbee64c3e339e2f6e34df3ac83fbd14ed9428126c1faa1410e408498d2adecf11e8943fb685f0b79780add4351bfcb89c191d88a05359e14a8c55fbced64fc63643f48dda94ed138c215d0ed15cf9edd19b0beb652dc0e465567a633dac20d055d490c8b20d024136bc169cc3087f635928beb7de89de790d1b2077cd64679dd631ab62ef90ac7d30632931e289bf3ffe49ebeba3088ed2d1146681f4e932511bfd25e4f2e8b9c37fb12af475a177c8191afa856b07884463f2300d1549a6de4e212bc634521239deaa2fd86c72e553aa3b23ef3cec2a3704ba728f7d080b2ea3aee3fe06d5de8d226c531c7e84a53763175a6ef216ef8786d9f282ef8d8615ec9b9bdb008d788ce817aa9bbd947d36becdf35188624b634d2d207b3e165bcea9b8d89557f7f2c4a471722be3db84d40a5babb5b135f483cd4ee9c27b5c705de305fa0553c95360b85f0cda1bba1d62c5cd6c87a2f5fec992333f684f3f6df374c4aa55ee291267878abef2bce1a17b6e7d1503886f6f22519ec3d22996a717ec8a48e758d03faada72565a01d74016dceb525f94a919f30e1d5378d73bef2de721c3bc824f02d1f853a47093956e8a0816622e72c5a3b7763ccbbbd13ddf7d007daafa2892a6fa598b6f318d9a87d599cd01994271736b3ccea586ef3f24432eab70b94fe692b304891a3f6cf3dcef663e202906a0f6ddb3443c9ec1bacc9963a612af5869f36ccf6b7dae592ea67cad47189984e68e5182d0844af25a358270b410ecec1107ed862c7c4aef5c3a3e02dce35e1d3c65c8e72f2d5de9aa433fca96a8e73b7649c6f6142621c655466d7df7407bab5fcebdf995ab3f3f83fc0a21bc19aacb31156cfe617df7980c544b97acd71665984d234b9fc43c1d9bb0c36402bccb998926f6a30f7308ee265f4330fa02e94aa2c17a37206e253041ad765ad1792cf481bca6246b2c24c5d129b0c8f30d28da5333682872b6d21cb465c45e98df243b8506ea738cd99eb440a13895bf257984071ba4158a032c95e5385e07352fe139feeea3de55f088009e7f229d1a9723b1cec973d77b1b0f289f44e8ec8c231311c064769eee48a2304972d5a45e3b8da6d0be575eff6892f7f00ce49dc91d4cfba7106cfbb2a8f0bde7bdefbd94a35dd916581c9808abe942fa8aedece6daea33ebb988354a3b9be28ee1b65714f5ab0e1b0dd090e8a715af5c7b22f909c2510923ecb6c5942168d3bccaaad8250da20d1694628a1eecac0df3cafe0460423f0e685cf194bdbbb817a26fcb1f0fb86df18e0cf4459cd1ee556e8442493aff66b29e1389d9440a79df4db46343c7591c22e34b5ed953c36b6423c49e757348fb51fcbacae2e76573b3ce3fd44163ac57839ab76889376ef3355b688db2eea67e59b3b1e6167bd40503e5fc05495994b49a43f1ecc121cec7b3efcc564450c72962b490c1d78bebaea487195cff5ebaa5d8c587eab36a9a19e01fb683434f5864104ddb07e2ce30e63d7fd596a19f625fce6f024d2ba149882fe23aec8b3e5de3447bd95ca5b24818dd2fd9e11c1d1fe18b3ac97cdc61d90d46af28455c69b45e04f177dd3c1e96f03455c9187a11a3573787756f8749df23c3093f3b6ef901f9b314f42a9f0659dbf84831dddae7ce6f7b74214410c21b95626ad22a51c7f6f3e44b44f3086bbe98439bdbf23999b6aac6714c0d1f84733a0ddb47d61f5d62245d384049b0475b6b77b87f5c4b4c89be839f1ff65ab713830f7481a3d6fe3f35d0ba816a77fc305d1994aea977c5d7e1212b3de91684911456a15c56d6c286894656ea1657ed469498eda085495189a17ca62cc9348e5df8631a4b77e5de72e62aefbffb678d095e6a81585c3278c8dc6b3bf1e091e5fad6db65dddcdbd1809c4ead12d0a31c294a26af04c7f722520fb21defb0c7b0b160a82218c67d3f2031b1ffa1685b25140946c984cca397e76b2ec358c6cca4a18ef0414a56e1875e9f0e47f47122303a9d1b70f8fcd00246db101b219c334affacc683262ec4b5d2025b350c668e5c5e0e244411293f5762f50ef21be5ebaf816de4becec50c0beabfcea32801a140ed46f6d8862ffb2cff7f3af1aada68ace3596f42b673cc9d8b9816e080b4b4067f3b356f3f90b39f5c20b3edaed6f749da85cb9de6e7d4772c8a8f34a5172d110e60520b14a02e3feea97c91a5c37a2b58aac86d8c15f8924cdb9e27611fa0a9f211c6a2ee8ceb92260680e2583932d6804eb9c30f0b3ae8f712801d22186c75eafebcc77b272660961ae03099d3f261e3ed39e2f55918be4bc4c442dfb73ca36f65f7c17f181527d508f739da64c2f53ef4290d4cc81bfbfc07b909cb3b94fd9adf0ec5e7fbe643e71d0e009510226bb86a7f466d742b2df59b56e967d74e7b53dcdca074323bd4a76d3d24a1e8d85759a4ad4c997d92f3a577f686cf480472afb5c3bdc748e6af6312474412bf5b8064b0502613f5190d26b2842f2c39d0c278eba1a110916b9afcf70c4824a176dfabe19617998168aa83406c08d0a742b5e22e21979010718b11e2fbcb41b4ab905b1c4ba9e123fd80644be1ccdb660ac586c06337c9c7627240d07abe2dbbd6c43d01864846c58b1ac806b1124cd0356323a9e3587c86d102da284dcdf638acfd8a41a0192e51f9bcf9dc71da56e1c148f68ccada684eaa925fc86ae11c14458aabc270433964e6881e0ff8a73541e1dc43998571598f40d4c86733bafa6d118fd46644eca2b3cd66d035ca10e1383c4bb5df09840e54967d3db7a9369a3f880fec0bfee566f1716c16595cee8d0d0dec60a06e22093d157a6ed43b4f5d9bfca5f1a0070e04b8d0454e616a3bb534ef961d80214922f4076fe846cdb5bb5f74d07f3f6ec7cfd5473d9d482c18aea30dd4ddd025b740d8e8cbaf923287eebc56c423d6dce06cac2c6c3ad09623dcf30598e741f4c1c9ec50ecff9f3d9ca74402fe2ef61319ab8654ee0a67c10b62e1c245ff7270b5e8fa64d73b8be45fe9441a0ff8ef37ca4040fdfd9d596ce2d51349ab6dec5cb4b94c81d856766e179dd10d19e3beea46f060e0f77dfdffdc00bcbe47ac72756ec024f71c8e9ef250e06818621afd6c948c847837f7587455c356d30c7e813db003c9245381c07653f4e39a1038ffc20edd2712e241f20a88fdd6e2e765d3cd6dfd7c2956750d9337435ff23ce099adbafa1529018217de067ae29987850075eef9eafcb7624c61ff5bd7a097f08cc69ecd5e21fcfb3f20358d09dac8ad4bdfe309fbb9ee9ada7cddf1870a57897b1ccf34d3dc8e439618f1cff33ef689e784a439435b8f7e8214a8d338736a49377808c6e2f9879f83ce69c688067bd9d09733bb071151d516bfe5bce9b17e37958a0a4741a4f817a784c4f72bf9fc2e1a76d7eab1cc0fe09924bea780b3a4c7a9863de8a6dce6144843497d98a693ea56f6a41e52d321d7f8ac1d97d770fb4922cacc244b3fbf133fb13f2115cb4c0bfe55d91b5d97425035267a9e70545d4e2e9a5c01fd862e3ff39acd35b62c909d03da2a5d87b972baace3169d43619eb9d61706d2d40437667db4c889352c45d6660af74a3af9f178c5c2d8639c626dedd9ed18a2b751dced2c5d5337882366770a00d4e363db5fa4a475ca750509b6d4ac2136d48b67c047f7b8f9daff637b07f7ad25fc4a5e3b527ee5669dcca9209680e5895d098899e0e8cdd9edb2ce80fa7a809afcce42d1ce6d4989c94b5875bb48986718f244aeaa012f5e98bace8f4e6d4cdae3201d448a5a2f73715de01dc30b0ad384072e06e086bd01a1ad199ae6bc7b502a3993dc8551d4ea8d8086c589fd60a23a7330ed9998f40eff5a2d706dc9e8a3b699227b4af78f9a734b25b42b43b8962a095b24abcd27fb9dd81bb2399ad353a893d5dca4ae1b289e32d0105f875aca8b3e8f3760aa78e3d34b8b0e012f34e72bc9e082d658cea520a1a74743430a878bb272e149ed1b963f46a8e0ef2b89f0e1d71ae39d63705246c1a86c563918edfc06461d51bf2d63a157ec6f8a921a1eb2fdd1dcdddb3f0c59dd3c5404a5a2974b255bd0533085605927442e310c7fef7459b0ead652d819b19e5acf0db1094de92ecb3e00fe92d683941405b19b2ba262c2e0df7916df10e5a312480a5b2c81aebfbe50eaa35bff66b0446a0557bf3416df96ac99052f903a151752d25ec5323313c1335043bb9b72840c60a621211ba94bc515f4498ea0f8b0d85505f7c43ff56b814a22dfbc86b67d4753de922ba357e6194bbdd07bcf8c517ce35bcfd8bbfa8589ea24e7e788c144d6ba67563b691d6e6067200cb800bb4446d430cbeb69325b8903c28787ffbafbedb345991c15e512f4d3267067aa068393e70f89879bfe67f55ad72820b6186362357020636675b588f0ba34c5bab702f69635a1a8ecf2b735384a9293b841761302ca1facecd23516c4a62618f8fcbb8532081e1512a6c626ae0733b60fa1e4f4d1c91e85fca1c47e7fe276c907db8d4ae8a1d2d2002dca9328d73210ba10492e1a3fb78118cc0ceb00dfc019e9bc0fe0eafaead10c3d9f79878556df1d53089601cd52f9b1f085e58f9099cd74e6cb09b7a93e883a1dedfa7f1723a8176bb73016b252c2b75012b01b9452433de4a69b1a5ed975afaa75fcf9c27ad21d7c95ec639fd72002f58e520f4bf9d27519580a50a7d7f865ec5e4bf9f0241bb76ad8c4b49e197fa1f254d6c40b52220b4ae0b008f70e3f362f3047a0904e7c05822235dd81e2dd302fc44499f8e240cef8e883c1cccafafe9504ece9ab33189906320107c56a88c4a6d34a1b911937c459e8cd5655c497289f452660b1b1bc483f95ac745d820f06f9b1b9b4017795fcd14a514b1ad20"}]}, @NL80211_ATTR_IE={0x125, 0x2a, [@preq={0x82, 0x41, @ext={{0x1}, 0x7, 0x7, 0x2, @broadcast, 0x8000, @device_b, 0x2cf3, 0x5, 0x3, [{{0x1, 0x0, 0x1}, @broadcast, 0x10001}, {{0x1}, @device_a, 0x80000001}, {{0x1}, @broadcast, 0x3ff}]}}, @perr={0x84, 0xa9, {0x9, 0xb, [@not_ext={{}, @device_a, 0x5, "", 0x1d}, @ext={{}, @broadcast, 0x800, @broadcast, 0x4}, @not_ext={{}, @device_b, 0x4, "", 0x2b}, @ext={{}, @broadcast, 0x200, @device_a, 0x10}, @ext={{}, @broadcast, 0x7ff, @broadcast, 0x36}, @ext={{}, @device_b, 0x2}, @not_ext={{}, @device_a, 0x7, "", 0x40}, @not_ext={{}, @device_b, 0xcf82, "", 0x40}, @not_ext={{}, @device_a, 0xffff, "", 0x1d}, @not_ext={{}, @device_b, 0x80000000, "", 0x30}, @not_ext={{}, @device_b, 0x1000, "", 0x22}]}}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x38, 0x8}}, @ibss={0x6, 0x2, 0x81}, @mic={0x8c, 0x18, {0x8ab, "4b596a054d6e", @long="2f7a08e421f536ac8ca0dc9cf140b8b3"}}, @ibss={0x6, 0x2, 0x1f}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x6, 0x3e]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0xfff, 0x2, 0x0, 0x80, 0x5, 0x7f80]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x9, 0x3, 0x80, 0x3, 0x7d, 0x8000]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x744, 0x0, 0x1afc, 0x7c, 0x3, 0x1, 0x6, 0x8be5]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x56}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:49:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:49:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8901, 0x0) 06:49:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf9fdffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000440)={0x0, 0xc, "4e4fa1", 0x1, 0x1f}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x54e9335ca7ee1a8a, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000900)={@private1}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', r5, 0x29, 0x71, 0x9, 0x5, 0x53, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x200, 0x2}}) recvmsg(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4044000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x35, &(0x7f0000000900)={@private1}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', r6, 0x29, 0xc6, 0x81, 0x81, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x40, 0x3f}}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000480)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"a931a565b8b44410"}}}, 0xc) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:49:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8902, 0x0) 06:49:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@can, &(0x7f0000000000)=0x80, 0x80800) fstatfs(r0, &(0x7f0000000180)=""/241) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x6, &(0x7f0000000080)=[{0x15, 0x1, 0x7f, 0x8a8}, {0x800, 0x5, 0x7, 0x9}, {0x6294, 0xd5, 0x80}, {0x9, 0x0, 0x0, 0x1f}, {0x6, 0x6, 0x6, 0x80}, {0x9, 0x5, 0x3, 0x80000000}]}) times(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') 06:49:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffff0000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 526.903247] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.904577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.905970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 526.907347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 526.908644] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 526.909810] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 526.911193] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 528.093025] Bluetooth: hci1: command 0x0406 tx timeout [ 528.925009] Bluetooth: hci7: command 0x0406 tx timeout [ 528.925072] Bluetooth: hci6: command 0x0406 tx timeout [ 528.926102] Bluetooth: hci5: command 0x0406 tx timeout [ 528.926900] Bluetooth: hci4: command 0x0406 tx timeout [ 528.928033] Bluetooth: hci3: command 0x0406 tx timeout [ 528.928570] Bluetooth: hci2: command 0x0406 tx timeout 06:49:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="fa000000000000000002000000000000696c653000"]) r2 = syz_open_pts(r0, 0x80000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x80) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x6, 0x3f, 0x8, 0x4, 0x0, 0x8, 0x18521, 0x10, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x200, 0x7, 0x8, 0x8, 0x8, 0x9, 0x8, 0x0, 0x800, 0x0, 0x100000001}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000a00)={0x779, 0x0, 0x0, 0x0, 0x0, "575de706a6963efc780a8d4c4e738e70acb6ea"}) 06:49:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xfffffdf9, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8903, 0x0) 06:49:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, 0xffffffffffffffff) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:49:29 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="739d9e849b74cf0961a3aa725627d36a5c83ff50c592153b48a8c2cda09f5db733630f1063a4bbfbb78f6e8b50e3016b05790a84401fc15876fdcd214666adf6edc919ca64c2f13139ba28a687d30862b2cfe631f24e48c699fcf7931b81d53850082ee160b0d8975a5aba8cec2b3963f48c0eaef78cd29f3fc40e4a75ce3df8baa09d18e5af2ba64db54a60689b446c73ce0f2fd240003bd38bc7d66232e8da4d593b669f01da7464698d72f62171fdb0e9e88e8f39", 0xb6}, {&(0x7f0000000140)="9b1420f7a89ada", 0x7}, {&(0x7f0000000180)="f384bda8ecf656f517ddd5340153059e0ec7ab52521e3340a5e6d5aa8dfd990af2207345a0bb2826e82fed7a54f5ee0d572a9159db4bcee70062946250802a8502b80e096b2d4755a240173ddeb084f07ce0895f027af3a468adc3b17c689ec20825246286a7fc3ef6816cb0b10a57671cc21160a357b49182b8767a57fc772894e9521c9db42ba2db91e4c1b4c5", 0x8e}, {&(0x7f0000000240)="7c7db46680d0aec3928b4019617e38b232abeb0b748f1fde87feb2ea38655f54db673426022c98dbac68d161191671fd0c39e873e5c1b046267fcf5bf75f238a31dac159c8e9d9a16e613d45987bf813555292cd4b143b8ad43c35b53b7a9e3ded36593479b52c7ff30fa42ccece7ba4e6910853a120e7f0", 0x78}, {&(0x7f00000002c0)="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", 0xfd}], 0x5, 0x300d, 0xffffffff, 0x8) 06:49:29 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:29 executing program 1: sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000009) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r5 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r3, 0x4000}, {r5, 0x14a}, {r3, 0x80}, {r2, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = getpid() r8 = pidfd_open(r7, 0x0) copy_file_range(r8, 0x0, r6, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000180)={0x0}) r10 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0xfffffffd, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r9, 0x2, r10, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000100)={r9, 0x0, r2, 0x7, 0x80000}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000340)={{r4}, "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"}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000180)={r9, 0x0, r0, 0xf104, 0x80000}) 06:49:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:49:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8904, 0x0) 06:49:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000080)="dc06f94f36bf8837d5cc94c1d7ce83a821d185f6105a11eeb857b8881e3e6bde35690dd7de2a39e289740f700337936eeb6afcf79c5575b6305f26ec614a23fc7f2ff3b3dadd7b8876243d3fde0a180d630d70d17d0e5261765446fd67890606e5647f390b947a9e2bae3c3a1205ded24e5515baf3d31e5c1e51cd37693ea9c12ad04005c5a369b910730ae9ed409e2017574409f8") write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:49:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000140)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f00000000c0)={0x0, 0x3, 0x8, 0x9, {0x0, 0x6, 0x6, 0x1, 0x38cd}, [0x0, 0xffff, 0xfff]}}, @name="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"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa8c857b660592ae4, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x0, 0x0, 0x9, 0x1}, {0x8fc4, 0x81, 0xff, 0x4cd6}, {0xfc00, 0xa, 0x2, 0xffffffff}, {0x5, 0x3f, 0x3, 0x1000005}]}) times(0x0) sendfile(r1, r1, &(0x7f0000000000)=0x6, 0x2) times(&(0x7f0000001140)) 06:49:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 537.308230] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 537.311405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.314748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 537.316792] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 537.318409] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 537.320283] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 537.321801] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 538.524944] Bluetooth: hci1: command 0x0406 tx timeout [ 539.357907] Bluetooth: hci7: command 0x0406 tx timeout [ 539.357950] Bluetooth: hci6: command 0x0406 tx timeout [ 539.358985] Bluetooth: hci5: command 0x0406 tx timeout [ 539.360066] Bluetooth: hci4: command 0x0406 tx timeout [ 539.360967] Bluetooth: hci3: command 0x0406 tx timeout [ 539.361902] Bluetooth: hci2: command 0x0406 tx timeout 06:49:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:39 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) signalfd4(r0, &(0x7f0000000080)={[0x1800]}, 0x8, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000001c0)=0x8, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c1c30000000053e100f167180000080067000000000008000300ff6e59572c77f23dd4e30a0fed6baae90773165900e32fd6b68a9c47af69eccf92670761ea86a46a3433343fc4167e2abfc8158081af3f618f91ac2b4d2f78c0a1e1fa6eebba3e74e561e94df669a0943ab26765d0fe51dbf0c33b89001a8e83e6768d566774babcff8569b1996a158f23291b67758a5ea3a3632dea8426e760dfde3ebfbaca1c9699f42fef1d55500d4398468c0bac2bdc8374e5bbccb3054a807294eb6d485186050dc3e348156c7a2677204855ca2b77301adf", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) 06:49:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:49:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x32, &(0x7f0000000040)}) times(0x0) 06:49:39 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r2 = dup(r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001140)={0x53, 0x0, 0x6, 0x0, @buffer={0x9, 0x1008, &(0x7f00000011c0)=""/4104}, &(0x7f0000001040)="2e9bab5b93a0", 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x44800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x72}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000021000100000000000000000002"], 0x28}], 0x1}, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000000140)="dee863cf13d415a0b667cb55e13775a4cec4eb33d02e032db207801cfeea128fb374ffdcab8e30f269d4e9c7946a506ac7822d09912cf526df364338186c2a422baf1417dbab60320e3aa8f595eb4d1ee19470961da593167db705035eb104dff644f3249d06cfcc7461fe651d1ddc9c68d265c03cfc80102605959b00e8fe8c5d236e172e22c5ac770048096c003da6509ebc016d6278c7c3994993295754151a9b8d7fd7d5074599", 0xa9}, {&(0x7f0000000200)="e61016cfa5b2b3b3b53080d8fc2ce13272dfe9a7dfa32f", 0x17}, {&(0x7f0000000240)="f68a873488f18fbccab3cd3b7be70926cffa23f6f676c953e8c81cae24fc80a537f5d4d522b993d1292271a2a88275d1014537697bddf14cb52be7b52bcf95e1b7fe110f20bef40c2d6a1b5e76d16316e233b0074b7ea940a8fb9c7d8ec207bc9cafc87073b1d22c0e9c0a5fe1c4496f44e92f5cbe4f6ecb492e", 0x7a}, {&(0x7f00000002c0)="eb3ba6e09c36ff521f4bf324cf79ea075b0c91766eabd17a5d0343a060dd7fbe6de99d39b8f3647fd43114cd027c3c141f9726b8515b77696e967cc88eb5e3b34c4e4d538b5abf96f8dbb057ede52590ad8e1bab", 0x54}], 0x5, 0x400, 0x3f, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x894a, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000100)={0x12, 0x8, 0x9, 0x3, 0x3f000e0e}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x0, @initdev}}) 06:49:39 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:39 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8906, 0x0) [ 546.060753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 06:49:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8907, 0x0) 06:49:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8912, 0x0) 06:49:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000200)={0x0, 0x4ea, @start={0x0, 0x1, "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", "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"}, [0x5, 0x3, 0x9, 0xffff, 0x101, 0xd2, 0x81, 0x1ff, 0x40, 0x1, 0xe4, 0x7, 0xffffffffffffff81, 0x2, 0x0, 0x80, 0xe22, 0x3, 0x6, 0x7, 0x9, 0x3, 0x4, 0x7, 0x2, 0x0, 0x8, 0x7ff, 0x3e2, 0x5, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0xa8df, 0x100000000, 0x3ff, 0x7f, 0x7, 0x8, 0x774500b5, 0x38, 0x0, 0xc6, 0x5, 0x8, 0x100, 0x3f, 0xffffffffffffffff, 0x4, 0xa00, 0x6, 0x8, 0x3, 0x4, 0x6, 0x78, 0x6, 0xb73, 0x5c, 0x80000001, 0xffff, 0x100]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000c40)={r1, 0x2, 0x1, [0xffffffff, 0x800, 0x1, 0x4, 0x1], [0x8, 0x0, 0x7e61884a, 0x6, 0x7, 0x4275a91f, 0x6, 0x8, 0x3, 0x2, 0xfffffffffffffff7, 0x7, 0x302, 0x3, 0x3, 0x6, 0x0, 0xa6f0, 0x65f86fad, 0xc3, 0xffffffffffffff4b, 0x1a, 0x266b3eae, 0x1, 0x4, 0xd4f, 0x0, 0x6, 0x400, 0x2, 0x4, 0x200, 0x1000, 0x7, 0x315, 0x5, 0x2, 0x1ff, 0x8, 0x401, 0xa5, 0x9, 0x3, 0x7f53, 0x7, 0x401, 0xcbd1, 0x2, 0x7, 0x794e, 0x7fff, 0x9, 0x20, 0x5, 0x1, 0x3, 0x7, 0x1, 0x8, 0x8f3, 0x49, 0x100000001, 0x80000001, 0x5, 0x30000000, 0x9, 0x7fff, 0x2, 0x101, 0x0, 0x5, 0x7, 0x6, 0x3, 0x5, 0x1, 0xffffffff, 0x1000, 0x2, 0xf99, 0x0, 0x8, 0x5, 0x2, 0x40, 0x401, 0x7f, 0x100000001, 0x4, 0x1, 0x38, 0x453, 0x7, 0x5, 0x6, 0x1, 0x40, 0x6, 0x1, 0x101, 0xe98f, 0x7, 0x100, 0x9, 0x4, 0x7fffffff, 0xab, 0x2, 0x0, 0x63f, 0x4fd8c007, 0x9b1, 0x6, 0xa56, 0x4, 0x200, 0x8000, 0x7f, 0x9, 0x200000000000, 0x81]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) times(&(0x7f00000001c0)) times(&(0x7f0000000100)) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xa592, 0x20, 0x8a, 0xfffffffd}, {0x7ff, 0x0, 0x3}, {0x8, 0x7f, 0x1, 0x5}, {0x0, 0x81, 0x3, 0x6}, {0x1, 0x5, 0x3f, 0x8000}, {0x3, 0x3f, 0x7, 0x9}]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) 06:49:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000400) clone3(&(0x7f0000000040)={0x2040080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:49:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:49:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8940, 0x0) 06:49:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r4, r3) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r6, r5) bind$bt_hci(r6, &(0x7f0000000140)={0x1f, 0x4, 0x2}, 0x6) dup2(r2, r1) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x8, 0x2) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:49:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 546.928270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.930718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.934346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.939084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.940152] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 546.942244] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 546.944101] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 548.127381] Bluetooth: hci1: command 0x0406 tx timeout [ 548.957017] Bluetooth: hci7: command 0x0406 tx timeout [ 548.958113] Bluetooth: hci6: command 0x0406 tx timeout [ 548.959128] Bluetooth: hci5: command 0x0406 tx timeout [ 548.960129] Bluetooth: hci4: command 0x0406 tx timeout [ 548.961106] Bluetooth: hci3: command 0x0406 tx timeout [ 548.962081] Bluetooth: hci2: command 0x0406 tx timeout 06:49:48 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8941, 0x0) 06:49:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001340)={r8, 0x2, r4, 0x6}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0xa32}, {0xfffe, 0xff, 0x80, 0x401}]}) 06:49:48 executing program 7: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setreuid(r0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{&(0x7f00000000c0), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000003c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000440)=""/36, 0x24}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, &(0x7f00000016c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001780), 0x6e, &(0x7f0000001b00)=[{&(0x7f0000001800)=""/110, 0x6e}, {&(0x7f0000001880)=""/11, 0xb}, {&(0x7f00000018c0)=""/146, 0x92}, {&(0x7f0000001980)=""/77, 0x4d}, {&(0x7f0000001a00)=""/201, 0xc9}], 0x5, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c13", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001c40)=""/34, 0x22}, {&(0x7f0000001c80)=""/214, 0xd6}], 0x2}}], 0x6, 0x40010100, &(0x7f0000001f80)={r1, r2+10000000}) inotify_add_watch(r3, &(0x7f0000001fc0)='./file0\x00', 0x80000181) clone(0x13aab180, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000002000), 0x800) 06:49:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:49:48 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:48 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x5602, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='bond_slave_0\x00') [ 555.706470] loop1: detected capacity change from 0 to 8 [ 555.747068] loop1: detected capacity change from 0 to 8 06:49:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x700000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}}}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:49:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2000000000000036, &(0x7f0000000040)}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x111280, 0x1b4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x1000, 0x5, 0x1f, 0x2}]}) times(0x0) 06:49:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x894c, 0x0) 06:49:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001340)={r8, 0x2, r4, 0x6}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0xa32}, {0xfffe, 0xff, 0x80, 0x401}]}) 06:49:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="3ae4cd63f35cd9513b264250b8793ce324860f87010f0e90c4fb374740a5aafdeedcb4240067c9eab48d30daa9ddcc784e1e0fe4f4cb484d3ca5c57dce3ca6620a9f97527fcd141dbe2d9a4466d24d97bc6108e6f8a4214c8cb18046a5b68cc8c0e6decc97d131040b007334b451c035658b26dd0007bc5c87ca0c62360d1ba506654c0e93ca72ba1b2ceb", @ANYRESOCT, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES32, @ANYBLOB="36714c8195ac2dbaebe5f16ead2e52ae4df740f44e77c1e7c9955a3c45808c0b34e2cb58360363fd0ad690c4af82486473e77b93abc6b9fcb38e7ddbab61fcf7d6ea203f8a02776dee5e51a376b34d04e5025e0bfa234d2a902fbd5948d3e5592748396c689223ba8383c72736d6c86ee091a9cea7b7fdd5b9", @ANYRES32], 0x6) 06:49:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) pipe(&(0x7f0000000000)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x280480, 0x59) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) rmdir(&(0x7f0000000100)='./file0\x00') 06:49:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 556.514906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 556.516612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 556.519782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 556.525676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 556.526616] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 556.528278] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 556.528984] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 557.725504] Bluetooth: hci1: command 0x0406 tx timeout [ 558.557067] Bluetooth: hci7: command 0x0406 tx timeout [ 558.558214] Bluetooth: hci6: command 0x0406 tx timeout [ 558.559214] Bluetooth: hci5: command 0x0406 tx timeout [ 558.560212] Bluetooth: hci4: command 0x0406 tx timeout [ 558.561197] Bluetooth: hci3: command 0x0406 tx timeout [ 558.562161] Bluetooth: hci2: command 0x0406 tx timeout 06:49:58 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3f7, 0x100, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000000)) 06:49:58 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:58 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:49:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001340)={r8, 0x2, r4, 0x6}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0xa32}, {0xfffe, 0xff, 0x80, 0x401}]}) 06:49:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8982, 0x0) 06:49:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/243, 0xf3}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/1, 0x1}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000280)=""/22, 0x16}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/27, 0x1b}], 0x8}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000005c0)=""/221, 0xdd}], 0x3, &(0x7f0000000700)}}], 0x2, 0x0, &(0x7f00000007c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) ppoll(&(0x7f00000008c0)=[{r1, 0x8000}, {r2, 0x2}, {r0, 0x1}, {r0, 0x2601}], 0x4, &(0x7f0000000900)={0x77359400}, &(0x7f0000000940)={[0x7fffffff]}, 0x8) getsockopt$sock_timeval(r2, 0x1, 0x57, &(0x7f0000000800), &(0x7f0000000840)=0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) bind$bt_hci(r0, &(0x7f0000000700)={0x1f, 0x1, 0x1}, 0x6) 06:49:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x810000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:49:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001340)={r8, 0x2, r4, 0x6}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0xa32}, {0xfffe, 0xff, 0x80, 0x401}]}) 06:49:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xa00000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001340)={r8, 0x2, r4, 0x6}) times(0x0) 06:49:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f00000000000000000009fc"], 0xb) 06:49:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xb00000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:49:58 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) r8 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x2, r8, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r7, 0x0, r0, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="692e27010a3af04f76d6c963397db83e1ca8ef53b0f1f7d92bd793bc863128dbb0972fa2990319e78607821852a6a18fa5ca24455285bc90b0d34c6e0ccdefe794c219e505fe7d26ff6e20a732ccd0df5ccfdcbcbd792ee9df8fd3d8b5511e956f7ac68cf393d3edeefdcc54779a1413e7ed9f60703326a1cf96a95a49189a6b3b2273f9b7008adb08bedaa56d35f721b56f3ac70ae2152b8b4b51a1b98de97acba617da1023f5cebcde21ccef759e9932328d7bcf7fb9e4335c266f72a36c4d40bb252d80509defd5dcb2791886d0977d300b0c3f122bdfe9ba0f675dc4845daa025b771cfc67d04c9d0369f1ad11c3adcfab957635e9a9e24be1a2c8307506875af647c55d6a11b6ed0426d0af262303e2e9a9ded7cb01e3b4b4591f89511121fdd44549845b7d1e61ee6e878ccaa8aa544fb10b0d825118eb7bd510fe07d73be2053cefd926444684916d6368199b2dd931b40088b26ac8f3f417c7af64720bbfbcc3b80a381dd0f508b2eedc63645f5885c3b62036fa3b32b9615d1a0921ed9fe90b359638828bf392b60bb79d3c1a2c647a7b10e3d45c9ec57844f3549eb2f137147ff8d89541f4645d3fb91275a4b614d8f6beeff09294193d9d0359d6457b2d0529808c940da518c9d3f57a0b7a9fcdd9e2f48d1e206c59228d8f3807198bb795d0b7ef7bc7fb17a585485c57dac44784ebd9a1eb3865e6d9375d70485df0fab5ca0b0a7dbbfebf65b7d3bcf8309d9d1dc89fd5f47d51278a5f347f5b7b9d66bc64cc463207bc1b486d1671bc4ae8b469beda1f1e8cdeab87854f6df1ce5648721fcdc962405cd9d9a3fd9c9c0d8eca395068241e928b001b05801082ca54db3beff0d7284191562d957fee811afa136db5afe463f464b28fe317b713fc8ffb1fc6d007bd01be4a0c08fea9afec11e53c91f227e856d7619e84fb9e31ff34116978f937e3437c46f74515d2b06d8eaef48eaee1b72514cd19af5d4f82f06b43076cc9acdeee5ee891d7b11640c3e5dc9e384f215c2ab60061e26d61b62eed9984d96cd095ddfb12c65884b1ed775452c278e5e37ac6189dd1336fc328fef19f57a7e0a75dc95931d54ed6f6a37beb6cc93583f03ddae16e31092320fcb356ca1d6d658eaad030ca3f1030cbfc8c87aaa6ce8fac2fed1723780cf2741cbea560d06626ab6bbb8f489d3596121ac07aecbfa70877abae22ffa20a190323f703d69097ba79da0b97b1d0ca2ba41465b3fdba12baf2bbddf5ea75b6e6910f7fef405df1112d03c5e3d2391caebf62684c41072c492220a87c945b0b0fd5e592f24ed415b8376d6de744c5079d97cc0b30e912f12b63ffd637940da7a987dd70295266ffc6cbb1ad2ec6bbf513c2aeda752ef928a3c3e810a8c045abe1d304e0adf0113570d1ad4fbd6d0c187fa97be293671594bc412c34a27456b9ac2363dfae69d2ba507b246f2a76dd8a45e468de12ca951697d139f2e296ced9a7ad3c1fa9f09549c218fde3f2ab4127832f9b9b802fac12fb84ae172a5357cf4937e587431d7a5ebd0a732b04bda8c169494ee106294baa0712e3d0a16880faa6df700aba2fb6cbb28632aa6d87b776c61133c195219f2f6caff72b32221004498720b2cc6f618759edf977f83d588c28a2dbf83358ff37102fb9e1716a5889899f8eb9b0be60d4f5ac627c82563858a7ace3745c2b9e3c3ad6c9f96d024a4518206120e66bd803c954a4912c65298d952ba1d883970715e32ac0165fbeaad2ad27bf3ed594f5c92f60c5a65bb4c8445590bf16c5ea82045c592884b15bf108b7b1a9b0f4fce00ecba085a97a9ab96b8c5d90f28da3f7809b08a0393c44263bd9c7d4d3211a365fc275bf98da736e80f0e87121fb4729e46b1e43b4e4538eaf88395d8835040819e29061aa29f0abdc8137ae3ada0595604138d18bc9d5f0188592483f805dd12c5265dc3d0176b757f0495b5b7684653abbf06014189f90db97c2c4898cb28e05be178027f6723341d04613a75c723df13388da109b714a4a004461815804be26e37cea492a0ea0ee9ba36008a56f66684ba15a857c2560515bcba3e74bedc259b614e161aa3dcc75ea2c86151ea17e93f58431997ba21b0f1fa5aa9018e0881842e6efa3e899da5892108f0b7fdcc13feb4f09423ab6c0d8193a22b1649a003a3bcac60fc976628f9f83bdd99906ee0b71cb76bd3d884263f26acdba44f3a3be4c4db5cefff83a39fd88a14a021b42da23aa866758201f4f53f4c81f120d7c9ab6186e0021f16b0e59041bf0f04a99c55b0fc5041e80aa58ffe5165da3adc0e6db66a7fb01a66035fced705a0a157468fe8c57bfd3d0505f042c69044c0bce2752b9d452c05ac7130a325e45b938c58a8a6c2eaa7a4e427c78b6ce57c4d7d1fbfba6b4dfcd4432b3944f2567aaa4aec638c64c8cb1ab0846ce0cad1a385c3b19ee7e4bc80c339b27628f8c3808ea1c2f09ad401483bb4216fd0ade52847f28d880eefc29d7d42f44b2fb9edee817189948fcc8600e402263f720c93fcadfb1b7eb4ecc8c99720e6784fdaf7fdd03d73a1005c3331213bc7aaf01a3a4457209b860165ca2226616d88e944251514b0986e90d63158caacbe760bcc777def8e5723ae851e11c216575df130a8e099412d8f4de9c205b13f922c002b510edd1596566e1b8409fd7eb36b590d7a4009b2e5bef7c9fe44028e13afcd1c09275417436ddbe24323342504048754e654c76f03946956db9a54f09504c68bb934ac252a81aeb16579b252ac3b326f0a95d5a371333cc327eb5bd5cb745dc8fa6c57bd1002b14044e036902f98f2967249f9d96f60a4f9364689c0e33ea271918eb97f0da4689d43686b6fc135c11b23bc5c2715b615bff979b211e3088147cf6e2a73efc153245f36fae2fbe0657286eaf3148fd5845d349b1fac36a3328e4fa6ca05c8d4ef2666d71df89a6a73516c145c405ff3d91b0d8453d76357d39255b32da644c6dd9b04bae66035df8f0c847549f37d0c2442b8b98dcf97fb002c56f2809cf4da2bbee6697bea299a67ddb4e16dcddcb30dc9ef6c8e13adea1834a1b97a3597ba8a54b9fdc7a61dfc39e1bc2aeb81b97e163267c535291a33410956073c811a652b5958faa115d62556858abdee388aeb7e0f034d7457d2aa8ca8394561d411379dbc8342416f359a5b63699bb39e4cf8c83d3d71e53c80726f92eb4306dc5e8afdea154be2fb01965486cd251b1217a4774344e85c83275ca2b69771296be6c02153bccdccdd5b27fae7b279b906d76c262bef79e77f4fdcab47260caea4a377ca40ee07d4d2126f9c061ece489cf653a8f06ea29b4f686b186889b416d9c86ed39bb87ac748129311b170d734a74ac48363abf8cd0cafb7dc12f92270557221f8fd0c4fea6447e7c5f82a272ff43df5366ee00795339519b492121c020943de18c7fc05cdfb9c872e3d49c67a12a43880bbad84aa762c29c8a16f9ba932b56803245429db8c871b73f9f9ef585a10584efd6f1a2a4341d640a78467c3748ee8f70208f0cc37c33ba806e842f8578319019bf085c0650ef2a6549acda3070c28eb0b5061a6e93107d745e7a2b20a60c7e1d9747a3c880fc8120dcb794a4593c665ecccf73af8ce69bbbd4c6d149a9f1393493f08a38851b8f0e5441a36d91988bc7b1c160a171842732d912fd60e154860f09767d8b800b4e12d94d83d56415ef0ec68da025c7529863c14d5db2c9fde2ecd156a9caa40a3dad12f9b5b1468adf8d29a96dbb8ed052a62fdfc36f02af68f3d982bec21178a76059ee42ce8c92d2bad360e002fae187b10b67e5c620d1ce9264c4fed3153602983f0677cbed981d3957693f4d055ab264d16a99f264ed9aabbedd1f973778747caec7a8c4d244c073556db0453eda9a40588f22590279ca2d66e87046a21db6049b0628890021d6dbb99c82bde6138e4528f764f6c85226b42d0959ab12c82112d5d1433cc7f9c213ac4259012bd565daccbb9a1c53111c5693a414f1da35b01f4f2ae4135d23cd0168b8067d912bd1c6a8107a873d1d1c5e9ecf1529a8977d56e6097fc34991332764c8a62da4e654bae42bfea54fac8a235c4b55d39a927e01dad3e31b1fcb131db9ad247e7d24b9b9d4ae8a222809ec9e85c82162b95885c506faca0ea67e5476d356cfe0e80b38084d3e781234c722d8a4fd14d689ab680f4c4cd4814c0d0b8a1a103880fc465219a6b251eb7836ce57f8e3390948821be2f7f86ff014837d6b70bc846416b4d7f61e20c7eca426aaaf73cec0ea96d924bc6119b0b797e40549eec3c8290f15018aa103a752cc882d91b30344e480829ea43fe38a8f4c49856bf7cbc1211dca07c0b1cb56e4414ce898054ee68d1e8fdfdd2049f2e30ae2823ce69f67902494b51fa47eb05c45ed3c8d09c5bf576dbc901b728341eb49cbced165b83ea83a250cdcd0112926cfc7aecb6f0790262a2607317179cf58e1b60a56f3d0fbe2ba364d52c7ac1d8d0d5800a70e43e6aa990c320efa771b1bbbb3d09d60e56992e7e18a5ed8045bac622d8e5dec51e150ec361d1156d113dd2823d5e8664522dc28220e295caaff9d7f2efadde0c3dbdd8a3af365135b64987557c3f801669fc8da9b284bc1ba6872a07c7756ed2f7e95dcbd1530e561ef547f76e07e0f53d1bacb1e8a2f2346dfd0896576690eec97dd6011ad409118ce95ebe9c184faf250493e32e76f0fd8d5ee7de7f543491662f99a9146b588598f292801bf3d05b5942468b9d0386d43a3f55cd510e82557e50aaeda995126cc07b07e1bc9f5298c82a66bfb01b912d679093d6f7ffbdbbf6451705b37e2ad134df11f91db5a0dc808bbfb8f00d3ec0c95226afe0d9efa07c2d5176b569c7dacc07bb0da59686015c178d56bd2da1f74ff5838d7126f6d750f122a6437716757c7a53d9654f225927e863640f1023d54766389b2473234bc19bd6ea723e9fd40c51e69924bb48a0542590144f3c8139e7d8ca262f649c122c959215f612f458cc90ef1f5f24aacbc0f67a115c6626f5d73241ba14f857b24295b66332dd77cf8c82cde94f0917a466c9324b32b53f3e30447cbb941ba6834fc99cc5a14de687ec9ea72fa526500cd7b79ae728765d64f45344fd2b1330cc6a02bfe8c7531511dfb3ada621ffeacee81f41faf653a54ce1fd439abad7cf96d70032809a0419c9d66c553c2db76c69ce1811b781ce9ad03f88f3d082ae1a9f456274bda6d211cdff0a005ec3af33d6298e769cc8bfb1b2d080568ec67632d1f6c2e346687455d605f482306a97728ab1e493736400783917e976cec61c4fab6b8a9ad3e71637b0dad581994093a032f9ed4f4bbf9eb961bcdd376693959f771b0dc663353ed402eb9383f7300562e2ab5b03aabbe3933a1382c3b8052df9c8e0cfb9dbe271c34823b9b47f18ab5ca9e00527e755d8a817b96475bd871d1545524f7cd17183eae587c7a9f8fb2422108fcd634f5a5d699d0f16a67e9513f947e635736c3a36cc7c6a4c5aa3050c086de816b4988bc997731ed849f50cb2deb43cbe206ccf0f75323630bbefb30a86f49b7af351079af1a728be3ad4805248d29967b12612ea4423d2d2191fc452f973d19bfe01b12da64bfd44d7515d4604b236c46c2031db1c823dd872132e291efb0c6d729361f991bd76a9db8a30284368dfd8ea46f18ee1bd1829d2948476e8d0272b339ad115d70112f175626320342c605b53f4b58769756967eaed0d2996fb8e98547390e72613f87f21052e36ecb3d3cdf14711d2691", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) times(0x0) 06:49:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8983, 0x0) [ 565.865892] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 565.866705] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.867912] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 565.868632] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 565.869370] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 565.870981] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 565.871624] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 567.071150] Bluetooth: hci1: command 0x0406 tx timeout [ 567.900969] Bluetooth: hci7: command 0x0406 tx timeout [ 567.901456] Bluetooth: hci6: command 0x0406 tx timeout [ 567.901897] Bluetooth: hci5: command 0x0406 tx timeout [ 567.902296] Bluetooth: hci4: command 0x0406 tx timeout [ 567.902693] Bluetooth: hci3: command 0x0406 tx timeout [ 567.903128] Bluetooth: hci2: command 0x0406 tx timeout 06:50:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) r8 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x2, r8, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r7, 0x0, r0, 0x7, 0x80000}) times(0x0) 06:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:50:09 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = geteuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xa2848, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user}, {@access_uid={'access', 0x3d, 0xee00}}, {@access_any}, {@mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@afid={'afid', 0x3d, 0x3}}, {@loose}], [{@fowner_gt={'fowner>', 0xee00}}, {@obj_role}, {@smackfsdef={'smackfsdef', 0x3d, '$'}}, {@permit_directio}, {@obj_role}, {@uid_eq={'uid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$\'.-:'}}]}}) times(0x0) 06:50:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a0, 0x0) 06:50:09 executing program 3: syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:50:09 executing program 0: syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:50:09 executing program 1: io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfff, 0xffffffffffffffff, &(0x7f0000000000)="9810abcc560427d01cbb7992841624cea5b268", 0x13, 0x2, 0x0, 0x2}, &(0x7f0000000100)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xac, 0x81, 0x1, 0x1}, {0x20, 0x3f, 0x94, 0x2}, {0x2, 0x7f, 0x1, 0x3}, {0x7ff, 0x9, 0x9, 0x6}]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r1, &(0x7f0000000240)=""/70, 0x46, 0x41cfd320) pread64(r0, &(0x7f0000000200)=""/5, 0x5, 0x7) times(&(0x7f0000000140)) 06:50:09 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="01082020405a529fbc8fdada14a41e5c9999840787181f85892d50eba2ca35b2bebaa654"], 0x24) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) write$bt_hci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="52ea805e564a578bbd3d4232cd99ac5bda63662c6afcf8341097dd5c3bd44e0388c7a59f3567d38494986e3180e4864eb9f0c88c50aab6853ad689ba2282414eaf8ca79d0bfe88b52d6277c6b81573b36efd07a975f11ba54a97803119658bbf7f", @ANYBLOB="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"], 0x6) 06:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) r8 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x2, r8, 0xa0}) times(0x0) 06:50:09 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a3, 0x0) 06:50:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x0, r2}) times(0x0) 06:50:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) r7 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, 0x0, 0x0) times(0x0) 06:50:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x2010000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 576.716982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 576.718463] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.725946] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.729482] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.733413] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 576.738409] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 576.741376] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 577.948900] Bluetooth: hci1: command 0x0406 tx timeout [ 578.780982] Bluetooth: hci7: command 0x0406 tx timeout [ 578.782221] Bluetooth: hci6: command 0x0406 tx timeout [ 578.783377] Bluetooth: hci5: command 0x0406 tx timeout [ 578.784434] Bluetooth: hci4: command 0x0406 tx timeout [ 578.785428] Bluetooth: hci3: command 0x0406 tx timeout [ 578.786432] Bluetooth: hci2: command 0x0406 tx timeout 06:50:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 06:50:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) times(0x0) 06:50:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x102) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x0, 0x4}, 0x6) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x4e) 06:50:18 executing program 3: syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:50:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:50:18 executing program 0: syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:50:18 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 06:50:18 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 06:50:18 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) times(0x0) 06:50:19 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{0x7, 0x1f, 0x4, 0x1}, {0x8, 0x1, 0x2, 0x80000001}, {0x6, 0xad, 0x3}, {0x1ff, 0x8, 0x0, 0x3}, {0x6, 0x1, 0x4}, {0xe5c, 0x34, 0x9f}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301080, 0x60) times(0x0) 06:50:19 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() r5 = pidfd_open(r4, 0x0) copy_file_range(r5, 0x0, r3, 0x0, 0x0, 0x0) times(0x0) 06:50:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:19 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000000fc0)={&(0x7f0000000c80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000ec0)=[{0x0}, {0x0}], 0x2}, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x48000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x5394, &(0x7f0000000040)) ioctl$CDROMREADRAW(r3, 0x5314, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000b00)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = pidfd_getfd(r3, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000001600)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003900), r3) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x34, r5, 0x2, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400a0}, 0x40) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc0}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) [ 586.486280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 586.488515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.491394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.492451] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 586.494297] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 586.495385] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 586.496941] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 587.676945] Bluetooth: hci1: command 0x0406 tx timeout [ 588.508954] Bluetooth: hci7: command 0x0406 tx timeout [ 588.510181] Bluetooth: hci6: command 0x0406 tx timeout [ 588.511319] Bluetooth: hci5: command 0x0406 tx timeout [ 588.512442] Bluetooth: hci4: command 0x0406 tx timeout [ 588.513546] Bluetooth: hci3: command 0x0406 tx timeout [ 588.514637] Bluetooth: hci2: command 0x0406 tx timeout 06:50:29 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) times(0x0) 06:50:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xf9fdffff00000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0xffaf) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:29 executing program 0: syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:50:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 06:50:29 executing program 3: syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 06:50:29 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:50:29 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) dup2(r0, r1) times(&(0x7f0000000000)) 06:50:29 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x3f, 0x8, 0x1, 0x101}, {0x8000, 0x3, 0x81, 0x8}, {0x8001, 0x0, 0x4e}]}) times(0x0) 06:50:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:30 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() times(0x0) 06:50:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 06:50:30 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xffff, 0x20, 0x0, 0x400}, {0x2, 0xb2, 0xef, 0xc}, {0x0, 0x81, 0x9, 0xf8d6}]}) 06:50:30 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:50:30 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={0x0, 0x0, r3, 0x5, 0x80000}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x40, 0x80, 0x88, 0x1ff}, {0x6, 0x5, 0x40, 0x50d8}, {0x9, 0x1, 0x3, 0x500}, {0x9, 0xf7, 0x7, 0xcdee}, {0x8, 0x36, 0x1, 0x2}, {0x0, 0x8, 0x4, 0x4}, {0x0, 0x0, 0x2a, 0xe027}, {0x1e, 0x2b, 0x40, 0x200}]}) times(0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r6 = dup2(r5, r4) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x6, 0xdee}}, './file0\x00'}) setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000240)=0x3, 0x2) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0x2, 0x4}, 0x6) 06:50:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x2, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 597.189563] audit: type=1326 audit(1762843830.491:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8119 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ca89f0b19 code=0x0 [ 597.490229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 597.492307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 597.494779] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 597.496335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 597.497792] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 597.499473] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 597.500805] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 597.905295] audit: type=1326 audit(1762843831.207:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8119 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ca89f0b19 code=0x0 [ 598.684992] Bluetooth: hci1: command 0x0406 tx timeout [ 599.517040] Bluetooth: hci7: command 0x0406 tx timeout [ 599.518253] Bluetooth: hci6: command 0x0406 tx timeout [ 599.519347] Bluetooth: hci5: command 0x0406 tx timeout [ 599.520465] Bluetooth: hci4: command 0x0406 tx timeout [ 599.521509] Bluetooth: hci3: command 0x0406 tx timeout [ 599.522558] Bluetooth: hci2: command 0x0406 tx timeout 06:50:39 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) times(0x0) 06:50:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x3, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:39 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) 06:50:39 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) 06:50:39 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) 06:50:39 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:50:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) fchdir(r1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = msgget(0x2, 0x101) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000000000a60383856a2da6f73fc2adc8be1068614e4a1c346f5c0aaf735d70d821ef6682a7b07ba72e50ce1948942192e85d150a936e436d3091da1769086249190132639abf3809540e0e1e719a6feb151d4010d4e87fcb58c190126ab8ffbd43e3abaa58abda126140e24134d59e3c88debd2678677d4d9ba6f67bd18d7a4b07a7207ee8b0978de403c7ad2cf68c91257412e229cc72a80fa067230bca766645164d3e9b927f9b42"], 0x25, 0x800) times(0x0) 06:50:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @write_current_iac_lap={{0xc3a, 0x7}, {0x6, "fc0332e4fc4e"}}}, 0xb) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip_tables_matches\x00') setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000180)=0x1, 0x4) 06:50:40 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) times(0x0) 06:50:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = syz_mount_image$nfs(&(0x7f0000000440), &(0x7f00000000c0)='./file0\x00', 0x5, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="edf81a6a8ee32849ed856a83b72526ed9866d296d3dd5093169e937b8e08c2a482a1c38f71f2affd4d21a023ad4b44ec9b72ad92b72ab4d6695d2868c8f4916fcf3e54acff0f4e483bcbb377ae4d7fdd72240a55ccb9c0625e7d211b0c8595ad2610517a6be11e210418e57bfac809b1cb3f7f8b6af0134149b0e26002908155d5dcf570f8d02ba5a4dec1c014da85ee3db98e4841cdf57e5038f1041404dc29605b62ecfb35402745e309b9dd83ffa28a5a84a9f4006e", 0xb7, 0xdb}, {&(0x7f00000001c0)="85bfa10f5abac58ac1849d4d8b0cf9b72262f8a8f51582c73f0315cf69a071338fcfd17365776ec461330758685d7aa4ffd61edc2a8ad8599b5587142f7e7088d113e4d144a9e6fe74088bf20b91c6c493664fab11cdd8ee2c057145e38ddb72c32ad4802a9c01e808f8fe81d64498ff03b3aa12ff73a6a1a058c72634544fa0c1a58d3373445b16b22b6ec10c41bad1ea080c655a93eeed4e3f8e4741d32e797c6858a6e81085c69e1fdd1cdf9962880f", 0xb1, 0x1}, {&(0x7f0000000280)="8af1b30385b249b3215060475bc5a4b07a9b3676327802465fec88d2e999aa046ce0d0093078664db171f6e3f6e33972740e97144d955b3b9fecae31ae08e0ebc9d4ac322e58677ca8e0fb6915550c6874c1905932691b679e2634b5", 0x5c, 0x10001}], 0x40480, &(0x7f0000000380)={[{'\x00\x00\x00\x00\x00'}, {']%\xcf*'}, {'$%+!/}$#@]#.\x03*'}, {'/'}], [{@measure}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}]}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000400)=0x4) 06:50:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 06:50:40 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) 06:50:40 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) [ 606.824630] loop6: detected capacity change from 0 to 256 06:50:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000200)) times(&(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x7, &(0x7f0000000000)=[{0x9, 0xff, 0x0, 0x5}, {0x8, 0x8c, 0x0, 0x200020}, {0x1f, 0x1f, 0x9, 0x7ffff7ff}, {0x43b6, 0xff, 0x5, 0x8}, {0x7fff, 0x9, 0x20, 0x3}, {0x8000, 0x3, 0x82, 0x10}, {0xd31, 0x40, 0x2, 0x7f}]}) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) pread64(r0, &(0x7f0000000100)=""/172, 0xac, 0x10000) 06:50:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x1, "42824b", 0x3f, 0x9}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:50:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x7, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:50:49 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) 06:50:49 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x300, 0x0) 06:50:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) times(0x0) 06:50:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x35, 0x81, 0x6, 0x8}, {0x0, 0x5, 0x40, 0x10000}, {0x6, 0x4, 0x3, 0x80}]}) times(0x0) 06:50:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 06:50:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r2, r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00', 0x101000, 0x100) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0x4, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:50:49 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) times(0x0) 06:50:49 executing program 3: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 06:50:49 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xea, 0x0, 0x3fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x400, 0x3, 0xff, 0x56}]}) times(0x0) 06:50:49 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 06:50:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40049409, 0x0) [ 616.308167] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.309469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 616.312682] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.318094] audit: type=1326 audit(1762843849.618:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8198 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0x3fff0000 [ 616.321315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 616.336096] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 616.341890] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 616.346618] Bluetooth: hci7: Opcode 0x0c1a failed: -4 06:50:49 executing program 0: r0 = syz_io_uring_setup(0x538c, &(0x7f0000000400), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) [ 616.479952] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.485349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 616.489608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 616.495710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 616.500069] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 616.505243] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 616.512567] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 618.461024] Bluetooth: hci1: command 0x0406 tx timeout [ 618.524951] Bluetooth: hci7: command 0x0406 tx timeout [ 618.526008] Bluetooth: hci6: command 0x0406 tx timeout [ 618.527014] Bluetooth: hci5: command 0x0406 tx timeout [ 618.528008] Bluetooth: hci4: command 0x0406 tx timeout [ 618.529057] Bluetooth: hci3: command 0x0406 tx timeout [ 618.530032] Bluetooth: hci2: command 0x0406 tx timeout 06:51:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES16=r0, @ANYBLOB="af68b714538b4a7980000c00"/21, @ANYRES64=r0, @ANYRESDEC=r1, @ANYRES64, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESDEC=r2], 0x6) 06:51:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) times(0x0) 06:51:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40086602, 0x0) 06:51:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:51:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:51:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 06:51:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) times(0x0) 06:51:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40087602, 0x0) 06:51:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) times(0x0) 06:51:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 06:51:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:51:00 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) times(0x0) 06:51:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x401c5820, 0x0) 06:51:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 06:51:00 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r2, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) times(0x0) 06:51:00 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x7, "054449", 0x3, 0x7f}) 06:51:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) times(0x0) 06:51:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4020940d, 0x0) 06:51:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x9, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:51:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:51:10 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 06:51:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:51:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) times(0x0) 06:51:10 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x8, &(0x7f0000000080)=[{0x0, 0x7, 0x5}, {0xffff, 0x20, 0x0, 0x1000fff}, {0x76, 0x31, 0x6, 0x4}, {0x9, 0x16, 0x82, 0x8}, {0xc8, 0x20, 0x6, 0x8004}, {0x6, 0x20, 0x30, 0x20}, {0x1, 0x4, 0x9, 0x101}, {0x19, 0x9, 0xe6, 0x80000000}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000200)={0x0, 0x4a87084ccd01c154, r1, 0x7}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x14, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x9, 0x61, 0x1f, 0x4d0f}]}) getsockname(r1, &(0x7f0000000140)=@isdn, &(0x7f0000000480)=0x80) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x1, 0x4, 0x1f, 0x8001}]}) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x4000}, {r3, 0x14a}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0}) r8 = syz_io_uring_setup(0x2bc2, &(0x7f0000000240)={0x0, 0x4dfc, 0x8, 0x0, 0x3e3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff, 0x7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000300)={r7, 0x0, r2, 0x7}) 06:51:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xde9, 0x280) write$bt_hci(r1, &(0x7f0000000100)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x3}}}, 0x5) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1}, 0x6) 06:51:10 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:10 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 06:51:10 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) times(0x0) 06:51:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 06:51:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:10 executing program 0: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 06:51:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000100)={@broadcast, @multicast2, @dev}, &(0x7f0000000140)=0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)="ca01da1d24") getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX=r0], 0x6) 06:51:20 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 06:51:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="5540523c0559", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:51:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 06:51:20 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:51:20 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xa, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:51:20 executing program 1: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x4, 0x6, @random="d8f4d14d8f2d"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r0}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r0}}, 0x3f) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x3}}, 0x0, r3}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, 0x0, 0x20}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f00000018c0)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb630080743b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, r3, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r5}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r5}}, 0x3000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x5, 0x1, 0x0, 0x7fff, 0x1, 0x0, {0x0, r5}}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x7, &(0x7f0000000000)=[{&(0x7f00000003c0)="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", 0x1000}], 0x1, 0x0, 0x0, {0x1, r5}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x2, 0x3ff, 0x0, 0xbd39, 0x0, 0x1, {0x0, r5}}, 0xabb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000000)) 06:51:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) times(0x0) 06:51:20 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 06:51:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) accept(r0, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000300)=0x80) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000340)="ff4241") open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8537be9b512c4673) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000380)={0x0, 0x136d7395}) r5 = dup(r4) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x5420, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r6 = dup2(r3, r2) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) write$bt_hci(r6, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x6) 06:51:20 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) copy_file_range(r0, &(0x7f0000000000)=0x400, r0, &(0x7f0000000080)=0x1, 0xffffffff, 0x0) 06:51:20 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:20 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 06:51:20 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 06:51:20 executing program 6: setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) 06:51:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 06:51:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16, @ANYBLOB="e861ecc8ec4e243636db6cfa9b5fd8aa82443f9b1c16548f4171fc5e7d9d71f58ef15ae8f4c7936d511ecd9001ead85b4b4b27398e6966834bf63eba036fad2c6666d550d30f9f747b474eb3fa171934920d3fbb43833da297f52b0ad6263643fa45a28b5f49090bd197f68cfca3625e58e554719483798d5d5726ab71cdc245721829a5116910e171935fd10f97e2126576d46eb841175fb000685599f36b34a2d89d721a9d67e7335cbf1de7d3e2333504ddd510c63a6adc73fdfc4ef6b19a3619f693052b13f8b60f172235e9c7eda2ac4f94c7ec9600534ee5d6405dec90075d48ee", @ANYRES64=r0, @ANYRES64=r2], 0x6) 06:51:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) times(0x0) 06:51:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:51:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xb, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:51:30 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 06:51:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, 0x0) 06:51:30 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x800, 0x20, 0x6, 0xc000000}, {0x0, 0x0, 0x7, 0x5}]}) times(0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x1ff, 0x6, 0xfd, 0xb1}]}) copy_file_range(r0, &(0x7f0000000140)=0x100000001, r1, &(0x7f0000000180)=0x1f, 0x4238, 0x0) 06:51:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x3, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x300, 0x4) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xfc01, 0x3}, 0x6) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x80100, 0x2b13ff98874797b0) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x2, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000200)) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000140)=0x81, 0x4) 06:51:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:30 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) times(0x0) 06:51:40 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mipi-dsi', 0x2, 0x42) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp-reno\x00', 0xb) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) pwritev2(r2, &(0x7f0000001840)=[{&(0x7f00000003c0)="12c7936eacee1ce10601b03a34ebfc218b86f86deeacbd7c01f8b4f923cfeee9864a0401578a250a00c9caaae1465f34b493124fb5db9d7f1cae647607ed33f7bc9b07f6a4176a7e2411947fce9ce97f827122d494268579f215691a1a249df6a6d0fff039072b89082663f8d54cc2f131f8fc41a12206bd1a97cc0e12eefad2eae47e848cb728e91ab2b3bdcaa152b6930a9a7429aaff2a26555b5057cff1c46cc6d66d923cd642e689c583b3fb746673abda9f2bb197a5c585d33aa4b2bfc8a4f4af753a3ff19d", 0xc8}, {&(0x7f00000004c0)="6eaa9f29f1079915810b979cf2af227cf37e0c38c2e5c755c97639147a1e1bec2419f1cc3d48f1dac7e9e9a16d14b40e8f67d2fecae3dc650f06f08e31177e3931", 0x41}, {&(0x7f0000000540)="0ad44c2d0e75689072717223b8cc97ea1ff13ba277529499e901cbeaf32ec18f945d2a6c4fb98623b62f6fbce7317d46eb1f4de652c9e4b49ba3dbbe8719868e98cf2e4fc85304", 0x47}, {&(0x7f0000001900)="d776b444c80ddf08c66876056517aa567265df61ce6b3a430127397b77fd097424fc081364de41f8e81a2e96bdf73340e6c65c8d656889996d3b04", 0x3b}, {&(0x7f00000005c0)="a80055b4ceb9d260390444abf0eff82f7928258454638a01898c868a4db15d48c48d1b41e9df41f5748f29f6a0c663c383248b", 0x33}, {&(0x7f0000000600)="6edfbd0264a32a158ffcd29ae61ee6aeea10d99f1ae5af9738e409604a9e7cbb733c927eb4a235239d7a84bcd6f011767a9c78c571fdd2e2dafffca4d71bdb0d7a6effefde108ad1c405b74be7cd2f9795850771c9cd34f0b79462d02cb11f7fc31f9e9284c53a24cb3ab361204d46ca2485675fd87d53f71deb116494abd5cff4ed36408c088c7f39e410e26c9bd87cd04ea160639cfcb770e5f9ddeb11ab9f40e9986500335623", 0xa8}, {&(0x7f00000006c0)="a20a6b89af4fb8f18448027ec3a181fdd33fcfde4e739992", 0x18}, {&(0x7f0000000700)="cf0a343c14e2a45dcd49c15d2525a063e01c66e758ba95d4826ba252e2aa27193f167571218e92409e780181a75a8c77c355dde650ebf113", 0x38}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="182c099aad26afd600d04d2c04847ba74c04ca6297ec4fa760a1aca5b33d4ee02bba204a6e79df52d0a5889a59c1ec6be302391464b5749e48104aab53f851f6e1629932e036fe3a2fb25037c674ad2d1c9ce66d170991c931f4d1787cd6c8658fca4123e9becc5b40a4617e248c776a0be8b995feb0124416f019498e13cfd5c0227e0b06501900875e306226590ddc976472ddfaf680ac7f7bd396e3bc46748beea95c6ee67adcabe198bc4b242c1dd16bd11c8708712068845a7a81f85ab38405b2aebda1be10d8bca1277e8a405e8a951443c4d66ec86c3b4f16114765ed2765a27f22bda2ae08", 0xe9}], 0xa, 0xffffffff, 0x7, 0x5) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000019c0)="c0eec154c02092e17b6f9d993753d3ab", 0x10) open(&(0x7f0000000380)='./file0\x00', 0x951c40, 0x14) fork() times(0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0xfff, 0x8200) rmdir(&(0x7f0000001980)='./file0\x00') ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000001940)=0x90000400) 06:51:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x1, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f00000018c0)=ANY=[@ANYBLOB="dc0100001800000125bd7000fedbdf25000000000000000000000000000000000a0101020000000000000000000000004e2404014e2300000000000000000000005232c5631a1d434f42f8ca5776bd6687aacaf5d7eb630080743b56b9bf4c6651c3acf092efcc9e6878d11a5d78", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a010100000000000000000000000000000004d33300000064010100000000000000000000000000c5ffffffffffffff05000000000000000104000000000000210000000000000000000000000000004000000000000000030000000000000000fcffffffffffff0104000000000000d10200000000000009000000000000000800000000000000000800bb0200000002000027bd70000740bf49916e7bb313eb5f1b3500000a0006060200000000000000b500000000000000e4000600fe800000000000000000000000000037000000000000000000000000000000004e20009b4e23", @ANYRES32, @ANYRES32=r4, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x4000011}, 0x40084) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ll={0x11, 0xf5, 0x0, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="f367f041c470da6da401aca4a15f7894e27eba90d9e338f4d5f3c06f888f264896603bdb69b8", 0x26}], 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x3d0}, 0x0, 0x8000000, 0x1, {0x0, r5}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x9c, 0x5, 0x0, {0x0, r5}}, 0x3000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index, 0x3f, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x5, 0x1, 0x0, 0x7fff, 0x1, 0x0, {0x0, r5}}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd, 0x7, &(0x7f0000000000)=[{&(0x7f00000003c0)="8f6c0a3769bf5143e1fea25fca1e4151d5543e69078f5548efa50997eda6008b3033fec2c97b191d958ab58aec5dc9cb4fffdd4f18868ba8d8a9bb5b9e0dd5ad5a4f09366b9c34476b303e3bff90cfebd45b7ab3463a17537c6318374e8dbc5cfb9043b17e0e6ced9d8c9d42d4208673e88d7686ba48df8ae1162241f4e7dfcd2275b7f82970d59373f7b1f05bdef1dceb8f65883d0e5be7dd147dde67a1c2804186a1c5248599ade6f1dda5c41c138168d93fa03a0aa641784e5aee1510ae0ebae6f069f7c5c85fbd105d499d50dc5f1b73d2cc4867c4ae7f13d7cdee9b9c9aa330e386926dc4d6d36867ef789c837140cebb1c8f1f9d795bb20ccfabb9839e8a838956ead881500838902b9a8abe6546323b9fce1c9fc469af1eb70f4c5fb335d329ad508866aa725bd8e028d5577136f8d8efddfa13ee8d7c820260de5941e384125af6aade3e313c5953b934166bfaa75d00fbf75be5dbd0e00e02366661d27f1257f824529cef51b6c84eec727318064845f2d1da010f2ab02a066c0e91db50efe70d305653a2e39e66769914e0869eecec57cf74b85521368360713400ce0a223ecc9fb8da44114a143bd65e2aa8e1570ffa93d2857a58411c50c0c53c6a57f69a760a4d4816d383f8fe2f74e7529b3c1246f25c392f21d2ec840d5a5cc9df2b2fd8c2fd70e62e4d9628f059e2ab30af103a727cc2ee9103e43fe349ed50ef6b83e96dc0b68feb54d9488fd3209ba4bc8dc3d3cabc0d18ac14e3707bd2107ea5d21cfaeb623927c5257a73df75e01305163a8a4a7b0110a3220c461f21a43344614703a2246c67e15cb01c0b3ad4541eaef3d99d83c6cefbdcc25029a5d704dfc6bf4c3a3ce47d2faa2c43873cb611e919e64d6d4142f8e8a46e4f77a3a616c811c00bee708cc4b59d87d0375e90b9a0086d98d92efd5e3f3d734b476e3090d458888b16dfe9945c3613305c095b48bd6878e3f3353e5d4898a2f73359bbec92d51e66816f11179a153cd634aec9e0ddb0e356942f5e391477dfdefc975d099366821b85cf30e1122dcb76ea45eb2e68683d34aada85640cb438ea719a684cf5d496d42063b4cc37c8015265b2c79090a68d8faf3905e9d96ae9f79d8e068b0eb4528c3388cc6a624a65bfcf9746e24bee3ae0a96a7511f5b4c1160d83a6c3999883ff601ee369001cbe8fb860ef6050d481e57cfed678368c1534bb95bd5daa0887752aa6bc57fa956681b56fd813a4ade35f11a3ec02353ef78cf6bc0fdfbe3aa24df8df9c1ad91079c5c0ae9b7e06a60cd4fa7bed0fc7157be1111be2a31396b24cd70a6a56b1f9718ab741158d90d04fe471f2b0c9a25f6c79922f896da0b68dcb80e286f5259784156a4b5f043185a6f968909ac242a1824b6710ffb9c8ebe139aa3713fd9f8b11f3be83354af6eb35f7d4dbf06664729fff76b8500e6d3408f50eefeccf79488b9615197cc05bef6868599abbf5e88789c78fcf09bd2b06b0dbd7c50d89e1d8995edfef29429e54a6aec563a99e57e758bf1b9876711123b038518f99c3a81da41af9b8b456d4d40affc14eb0e74d3fff087d084f5be33942419c0ce92b527f1ce95456397aea6edc513138bf696bdd05e254c5ed7de6c0a8cec14acbb128b0b2d702d7d015f5f9c4edc8f9f0403ce55799e665e1e0e04ea9aff867e3ce6b7832861be56f0152077050d09dd9663374499b308f46f554501c8a205670e074cfa2f3b6484072878604fb0dc3db6f9993e6fcb811622815f2909569f454505fc971baa9f8c99fc13683ba68a796523a12d65862ef140aa27e774cd6bd704d9d77a3fc08d2010e77e517fb2b4c4c34671c3fbeefd1050f957a56e9d86bb2560a255dbd7558b0e66e0e5c450a36fe2201c1b695f53cf9bda8216f2c7ef544bccc225d420507c7ded94e575a13d6f4a677e00816b56104aa2a6ba92a63751be7af4e9265ba4499e00171c8f17ba2f6c3953b77b9775be2482e3dfa10dafea321b4d19dd5799aa8386b20a15139375bc066e9c6bf5aa89b6aad78f8250cac62f15dfb750ff9d6c531b4613426adcee01a5b81aded1cd9431909d97c9bf68cf5d3fb99f5ff0b08a2eaa237af2d2e0c58a51f6b5b99b0c628ffad2ad3fcdaaaddb4801259a7aa548f69cf21c68b1056041c66dbab83d58c9cdc3574825ac5d3fd484cab9c8e99787ca5daf263e93e878712ac09f1352b913fa1c405b198ddb24172ccec31aa094fd537943c73be79722df4f88d70c5ce751278d15047067d1d339dad12b575192b86efa8de1844086f5ca82e6b22d3fb55163413e2446649ffa66dee02771d303121609992d302c51f6b036f38162134c302c4e6b24ca0b7882bd79b2e9a56a9a09e809cd5ecbf73839dfa090d90b96df00bba5c1c58f2e0d2fa03de0a04bf770ffe703eb878b973bd93b0305d03f2184831a96af6a3d03396f9329a776a024455542e88e62badd3b5f660b1017b49c4f98588ab4b067178fabe8055d1435d7080db1df872179cf6caea1a9ad7ab3f0d8c346fb779d0bef2f42570949862c768458deee4a5c552f89e3931bc9547cc1ddf6dd1f5f77d833faf67fce24ffda77e6c04c728c900be5bb921db06b2e9eabb6c78eb2925d1ddb3cec28cbe694719be9714d4af550bb0ad13706db0836a18642d36296e1f2aee0178bdf920d2672aa6fc638d1a2add6fb396330e892ec167ef3641b7daf07bab6d78757629cdf68b7ae4aa70d243f756d6b5aa2d9952c48f93a35d47a10c026ab5b840691d664f95c034cfe509b4766cc9d47871e4e621b9217cb928dbe7e3dc2f8fa543fec3c2bd36b229321a33e81e72295a8e6d1131e25d269d836c82f705ac76d7aa324ed6f5e36d31f1a94c9c40a8d3ba246a1c909e060beb8996f097244858bc48160fe7a515d3bee9d1eb9f7d8cd20e81f241867ea0ac5e96c86040bbdfed7235cab29552d5bfca1009a525ab90975486683ee8ae6ea76bb2f1fcc5db68396da1ed5f5a943f4bd5470cefb0e234b8ea296769ec1da55a74494932b0d083ab5cbc194d120490e1d2101cd1086975898b6a03110893bce59e2892cbc3bb21f509fffabbd8cbb7c46dd5f34eaef51e9a6c6e039992c4018c5d7cc01a4a75740953573f4fc8ddba1a920625b9500ada12616ed53f3a4bebd669e2c74d1bc06b704267745b0451eb43dc53baaeeaa9fb9b93147c14e4f78138760fe466d39fa79e01f6bd0768db82fba63a5858426a894971e0b7c20744e5ef278e0d023f7d13a2d7982f6edc08ad047b29420faa0be1db08eca5190100ed477c29e075bcd2148604a8f95c43cad3f5dbe67df30d1471d54e233746fc594b5a48755b0f179da54f18aa57ab9b582f49c463240998bba653540779999f672074bb8dc0ddada2d65a287fc1c9305562324958ee0e84a96fbddc1952611a2fe4feb2c80899554718dd866db900b987ffc1adc6f193891f7443d00fb2e4a694372faf96fac42c62c4e1272bd74ab2515c15600dd2cbcaf789e57704dbaa672c0bf144012550a85282970c81413c6ae0474f64830da4bdce579e7ecc9536c3f3872cfab643365a58217111bce172a05edc2ba94953dcbdaa5551cb9a488297fb7fe04348465ac2f723c9b28e470758c879b4d43043846e09528c14bb7f5028fe84672d561125ecda9a861f07b067d637b2167a965cc8932ffc6e1572ba2a3fa0f17178476974f9b98a488080710d3be0c77d4cf2c1f850c070607382c6e749a2641ad35b54bc2de014629b6a17603eb53bde5d8c78605b3a74e5db1ac04747d102c0c911b82fca6497e2f2a7cbe7b3efefae0ebb6e2d45e5df6d63eeaba2ae272e6b739fc2b76ef158e2e4be6f0d78e5df0c76bc86aaa6601aaf0a8e95c46758abd05ea93f829c4ea3e5a19152edaff80ede0260d22eba1edb0d020f9249d026c6e677f74ed05fdfc3609e79876e017ab8f402ee05f22c78f28edf14557437a2eb39a86a639d5132b4a9a90be9115f521611e7690297659d09843887cd8252439ee2979b7e5e45d97994f3891784a2144160bae805fccee7752d9a9b1c945e587029265ffd30673bcdfd65d37a2206c29c98abd19fabdf8203fc293843795221cfee0c59f50175636348f9a3f1a3f0f7a7e044156bfec70ebc1d4f408318612cfcb7073d01353370c1798dd47704121bc6dea74705c6433b3ae60529eec741ff4a38236acb85caeb34f718ba9947fadd71f2ce98a85b731444adea5e580e7599599b993799344c7dba432ecb57c51aca8bf5294db8c42c0b0b80fef4f26c1d93f6c1a60afa2876d3fb627bbb104cd0d0e874ac688ad7efd4229470515d2e0238a9678bfcb23155f05919b9b75f08c594b74b477a352e95da172bad85b5513d6b435a130dbaaae9e735150579c437639a920366a4403b2c9c78f76089bfdb7729413c17fe1f5f54ef5987e97b0dbdf33a841972793cbbdabc8d9897ad55111e85a2e0e0f22b62a3024bb58a71409b41cbd6a41e4fde640ac7ef780378f41aa1745ed436553a57d86294db25ffa75a501343774e640595642fdfd6eb48ffb6a4038c3e2611bbfe80ce84bb6677372aa8087c972be4621c453b4ba87adfa2e3e95ff7444e2254d53b8776e01701bf97c4b077b7271297f56fc162965eef139f971c8b5506e17d8228c3edfe28cadca65c0c41057d1538400d55415e50265ebe73ff3b5c136f1ff8c948b60752e05fd614e245202412a6599170a063a84e7bc760716515f586fdd27d38c0b9bd007264494c4945bbe63b74c9c5f5372598c3955e29800afab475a01bf0fc1771e8f7c155301e432b1df14bd7477e389b3ff0455fde742c83d6178ded8f6536a481beb56435978a49e28990ffac86843d57f392dfdfae6d409cad233e835ce3011bfd962fe3d519bd3b51093f4e902e76419406b2c03c6ad64c946dd1312c44a9656a0578419b380fc5bd9b8183caaef3aaf0894b77f688f020e5d87fa983444c6b8292da913f3b59ba211ce4f8a5c5209b1920c3c0687ff42948cb65303af06ad6f326ba5dfa329c0ca8c0bd62a9f32716921da5a7446470499a022b424d5918ea6e589ce4f109f5bbcb930d0ef5a166aaeed46f6e7ddf58be47f3d64cb3ce2f00149691eb668e63ad4a29de88b8beadb06c90f73f0df04fb60eb248c42770f335e49465479d2d73848c64743e846d69ce16f9f9ff97aa40de4e473c316037f0fb47b5d9162abba7b904ac6805ba13bc59d3fc20a78faa97038d727834c28cfe028f562d72e3141180d8dabfb77bbc6cc1f674c0701fec17dc9ba6f998d57aaa84ff874136daafe412076f295ecac4f1fe77898b1b227b2b3b28609dcd39541f33463155221b15d8cf85f0a06f2187bd40862406396576919411fa7f78d3cac5c8f66a330738b6e3fabfacfa440626386a8d9829479c2144580b288f421e106a5f413a25223e6f49d265e03e77ebc738bbce58b89429402c4a91061a84ee0da22541b384e625a5f1f0b3b6b539e312be439fabb21c416d70e02f72edcb86e0898956c99c39458a0588f71c078a23779651f45893a0a3b19d937d55ad2b46d74dc8a42bdc3f20bcbde737e0b7dc9409856cc3a7273e2c1f42a48b82e428be78132ebe1c496aed4b91d27856386d6ce724c297ee80ad7dddc98621f3cbbcceeca563824ca5dfb44b09092872ed77d171b99bca5e66b6635e85fba0f4fe8e956e46b0b3dbbe22a56b5eb4cc280c245177ac13c62611048f5bb285f2c373fc5323a3bad7b507db5223b2e39d50480fa74a0b59cfa82b70720e", 0x1000}], 0x1, 0x0, 0x0, {0x1, r5}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x1, 0x0, {0x0, r5}}, 0x5) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000240)="6be3bbafd2771f0340eab1ab2acfce5a3eb53301504e0e1679e1473566c2538019904b4b704c4229db2be8e20baa6445ef95d594141f640142b0611b9e9d037d2529fb0edaed6416d8a89928536d8d7bbeeaace0daefb16e9b53ef3e24ed2df6265158d54111bc23f05328b7881f3513eed8a30bb7ded7af82cf3d15bef2be6e1e3551973796b28982aad0931f10e8b69f197f5f4218d841d4d35bffd31ae50cfc636d62e426a57cba2ba2a3c93f11590f48e2c4b2d789d9f2d9108918af9d98d071e4dd71cbcb93c9030000000000000070c9775636449eac05d46737437c7e10588528683bc6c6f949cab5f93642b7ff70299a53f9a1def69dd8181b1ba9d799663bdf982e170d9caa6f1f0f9ac42f1039242114b62f742dc8126bea4a91984a8c715e726707bd6f75491aa52cea99ac69b4e0713d75f40a6538884a3fbcfdee053f73d87be978b5c3d1fb90d6c12d64772ebcf450a3e9cf63f96ff4da730c8d47e5b718739e3780b146e421f3307380f06b6b5b04a97815ed7e35b177a97350fd4e08e6c37b") 06:51:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:40 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040), 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:51:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 06:51:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80086601, 0x0) 06:51:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) times(0x0) 06:51:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:51:40 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:51:40 executing program 6: timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r0) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_delete(r1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r4 = semget(0x1, 0x1, 0x17) r5 = semget$private(0x0, 0x4, 0x222) semctl$GETNCNT(r5, 0x1, 0xe, &(0x7f0000000280)=""/236) semtimedop(r4, &(0x7f00000001c0)=[{0x0, 0xff90, 0x1000}, {0x1, 0x81}, {0x4, 0xffff}, {0x2, 0x400, 0x1800}, {0x1, 0x1ff, 0x1800}, {0x1, 0x6, 0x1800}], 0x6, &(0x7f0000000200)={0x0, 0x989680}) timer_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+10000000}, {0x0, 0x3938700}}, &(0x7f0000000380)) timer_settime(r1, 0x0, &(0x7f0000000240), 0x0) timer_gettime(r0, &(0x7f0000000080)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000), 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[], 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="77851b4f74d292592177cda9b9a9c06bf0f58b739b882badbdc0fec0e5a529af61a1ce02913877b5004f5976f51f4a155efbb2d83458e8e42ea68ddfefe79aa173289dd91aad9424add18d3b163b2b79360f8d1dcc695864764adb763c4a25a73b3b3b3f016cc3dfc68ae4520b7723020728279b05b667b9fc9cc7fd25837423c5c93f71c3402b56603d7ac1d0f8d16b32bccb039d872a148c1c3e6fab7a8b56089087dec3898de955772b760795cedf12545e34ac47b6", @ANYBLOB="3f0000000000000000000000000003008427f7a842bcfe28e9a752ade2e181638443e5d1f6a048d901203d38f38b9af6c010ec71b39a974af20683aad81d6aafb7a6cd71e4cf0948b140955701df63bad0a6fca0e3c6cf9842d6987db8402b85c69e845145836253c13e9130598c1fb9530ea926b5243d051a6ea2be43a41d9c38d1fde7ecd77525ff1ca2f7d995b7875f9f8b6fc2c47051c6725116c0c45e14cce53633ff11a4ec31bac84c7e79462714b6e8aee2bcd25b68b5dd13aa360ae346ea90f3122e8ba852829a927a4dbc391e3160eb16bdce3f05"]) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r7, 0x1, 0x4, 0x0, &(0x7f0000000080)) dup2(0xffffffffffffffff, r7) 06:51:40 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000080)=""/100, &(0x7f0000000100)=0x64) 06:51:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 06:51:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80087601, 0x0) 06:51:40 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:41 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x1, "f2cc99", 0x5, 0x7}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:51:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x7, 0xb3, 0x3f, 0x1000}, {0x2, 0xff, 0x20, 0xd14}]}) times(0x0) 06:51:41 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) [ 668.624701] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 668.626050] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 669.852915] Bluetooth: hci2: command 0x0406 tx timeout [ 671.902678] Bluetooth: hci2: command 0x0406 tx timeout 06:51:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040), 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:51:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108906, 0x0) 06:51:50 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 06:51:50 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x80, 0x6, 0x8, 0x1f}]}) times(0x0) 06:51:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r2, r1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x2, 0x4}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:51:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:51:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x300, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:51:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:51:50 executing program 1: times(0x0) times(&(0x7f0000000000)) 06:51:50 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:51:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:51:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108907, 0x0) 06:51:50 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x62, &(0x7f0000000140)=[{0x6, 0x0, 0xfd, 0x5}, {0xe000, 0x80, 0x0, 0x3}, {0x5, 0x6, 0x2, 0x326}, {0x0, 0xa6, 0x0, 0x200}]}) getpgrp(0x0) times(0x0) times(&(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x0, 0x9, 0x31, 0x800}, {0xfff8, 0x40, 0x2a, 0x20}, {0x1, 0x0, 0x1, 0xffff}, {0x100, 0x7f, 0x20, 0x2}, {0x8001, 0x3f, 0x6, 0x4}]}) times(&(0x7f0000000100)) times(&(0x7f0000000040)) times(&(0x7f0000000180)) 06:51:50 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x4, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x49b0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:51:50 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) r7 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, 0x0, 0x0) times(0x0) 06:52:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:01 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r10, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={r8, 0x0, r10, 0x7, 0x80000}) 06:52:01 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x100) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r4 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r2, 0x4000}, {r4, 0x14a}, {r2, 0x80}, {r1, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = pidfd_open(r6, 0x0) copy_file_range(r7, 0x0, r5, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r9 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r8, 0x2, r9, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r8, 0x0, r1, 0x7, 0x80000}) syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x21f, 0x3, &(0x7f0000001280)=[{&(0x7f0000000180)="068259e34a8096079e9e861ea6903cc7dab8edf5801569180c9dff858b29eb6dc11baeccfac3d83a1bd114e337ac48fa77adb10cdb2872bba36383d69f2d5f12b3", 0x41, 0x1}, {&(0x7f0000000200)="701377b236820e868ac478dd4fe7125c951eeb98d37c19442973bca483671849d5ce6bc3379a432a0a3494d594121c7483140a8b822a15432780d9778a6c9a3a853963d035589983d3baed6e6705d8679414f7e86a39c7b69478909ac20ebf4a9917c7e02626acf4226dc1bbe0ee44ee5eceec9d953653e83313784af7", 0x7d, 0x9}, {&(0x7f0000000280)="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", 0x1000, 0x8}], 0x40000, &(0x7f0000001380)=ANY=[@ANYBLOB="687567653d6e611d369524ea657665722c736d61636b66737472616e736d7574650169c65766736861743d24262c686173682c0000000000"]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001340)={r8, 0x2, r4, 0x6}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3ff, 0x5, 0x8, 0xa32}, {0xfffe, 0xff, 0x80, 0x401}]}) 06:52:01 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)) creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0xb0, 0x9}) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) poll(&(0x7f0000000200)=[{r1, 0x4000}, {r3, 0x14a}, {r1, 0x80}, {r0, 0xa15fcb352d375c3f}], 0x4, 0x3f5d) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() r6 = pidfd_open(r5, 0x0) copy_file_range(r6, 0x0, r4, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) r8 = syz_io_uring_setup(0x3cfc, &(0x7f0000000240)={0x0, 0x20000000, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x2, r8, 0xa0}) times(0x0) 06:52:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80111500, 0x0) 06:52:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x700, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:01 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040), 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x40, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x801c581f, 0x0) 06:52:01 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (fail_nth: 1) 06:52:01 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x100) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000100)=0x40, 0x1) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)) times(0x0) times(&(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x8f7a, 0x8, 0x1, 0x8}, {0x1, 0xfe, 0xdd, 0x8001}, {0x6, 0x9, 0x1, 0x6}, {0x81, 0x1, 0x7, 0x7b41}, {0x1, 0x9, 0x5, 0xff}, {0x6, 0x2, 0x81, 0x1}, {0x8000, 0x6e, 0x9, 0x4}, {0x8, 0xad, 0x7, 0x3f}]}) [ 688.030291] FAULT_INJECTION: forcing a failure. [ 688.030291] name failslab, interval 1, probability 0, space 0, times 0 [ 688.031960] CPU: 0 UID: 0 PID: 8514 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 688.031989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 688.032002] Call Trace: [ 688.032010] [ 688.032018] dump_stack_lvl+0xfa/0x120 [ 688.032061] should_fail_ex+0x4d7/0x5e0 [ 688.032083] ? avc_has_perm_noaudit+0x59/0x3d0 [ 688.032115] should_failslab+0xc2/0x120 [ 688.032140] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 688.032173] ? __alloc_skb+0x2ab/0x370 [ 688.032208] ? __alloc_skb+0x2ab/0x370 [ 688.032232] ? cred_has_capability.isra.0+0x1bd/0x2c0 [ 688.032253] __alloc_skb+0x2ab/0x370 [ 688.032280] ? __pfx___alloc_skb+0x10/0x10 [ 688.032318] ? trace_cap_capable+0x156/0x1b0 [ 688.032344] create_monitor_ctrl_open+0x16e/0x780 [ 688.032371] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 688.032396] ? security_capable+0x2f/0x90 [ 688.032437] hci_sock_ioctl+0x35e/0x810 [ 688.032460] ? perf_trace_lock+0xb5/0x5d0 [ 688.032493] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 688.032518] ? __pfx_perf_trace_lock+0x10/0x10 [ 688.032548] ? proc_fail_nth_write+0x97/0x220 [ 688.032580] sock_do_ioctl+0xd1/0x240 [ 688.032613] ? __pfx_sock_do_ioctl+0x10/0x10 [ 688.032643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.032671] ? do_vfs_ioctl+0x125/0x1470 [ 688.032702] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 688.032729] ? ioctl_has_perm.constprop.0.isra.0+0x32e/0x4e0 [ 688.032764] ? __mutex_unlock_slowpath+0xd1/0x750 [ 688.032800] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 688.032861] sock_ioctl+0x40d/0x630 [ 688.032883] ? __pfx_sock_ioctl+0x10/0x10 [ 688.032904] ? lock_release+0xc8/0x290 [ 688.032944] ? selinux_file_ioctl+0xb9/0x280 [ 688.032981] ? __pfx_sock_ioctl+0x10/0x10 [ 688.033005] __x64_sys_ioctl+0x18f/0x210 [ 688.033037] do_syscall_64+0xbf/0x430 [ 688.033061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.033083] RIP: 0033:0x7fa955ef4b19 [ 688.033100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.033120] RSP: 002b:00007fa95346a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.033141] RAX: ffffffffffffffda RBX: 00007fa956007f60 RCX: 00007fa955ef4b19 [ 688.033156] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000004 [ 688.033169] RBP: 00007fa95346a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.033181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.033194] R13: 00007ffdbf66ebdf R14: 00007fa95346a300 R15: 0000000000022000 [ 688.033226] 06:52:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80811501, 0x0) 06:52:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:01 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8050) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:52:01 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) (fail_nth: 1) [ 688.241530] FAULT_INJECTION: forcing a failure. [ 688.241530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.243323] CPU: 1 UID: 0 PID: 8527 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 688.243361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 688.243375] Call Trace: [ 688.243383] [ 688.243392] dump_stack_lvl+0xfa/0x120 [ 688.243438] should_fail_ex+0x4d7/0x5e0 [ 688.243466] _copy_to_user+0x32/0xd0 [ 688.243491] simple_read_from_buffer+0xe0/0x180 [ 688.243528] proc_fail_nth_read+0x18a/0x240 [ 688.243555] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.243581] ? security_file_permission+0x22/0x90 [ 688.243610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.243635] vfs_read+0x1eb/0xc70 [ 688.243662] ? __pfx_vfs_read+0x10/0x10 [ 688.243684] ? lock_release+0xc8/0x290 [ 688.243721] ? __fget_files+0x20d/0x3b0 [ 688.243767] ksys_read+0x121/0x240 [ 688.243787] ? __pfx_ksys_read+0x10/0x10 [ 688.243814] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 688.243855] do_syscall_64+0xbf/0x430 [ 688.243880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.243903] RIP: 0033:0x7ff19608469c [ 688.243920] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 688.243941] RSP: 002b:00007ff193647170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 688.243962] RAX: ffffffffffffffda RBX: 00000000199a311b RCX: 00007ff19608469c [ 688.243976] RDX: 000000000000000f RSI: 00007ff1936471e0 RDI: 0000000000000004 [ 688.243990] RBP: 00007ff1936471d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.244003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.244016] R13: 00007ffeb11884cf R14: 00007ff193647300 R15: 0000000000022000 [ 688.244048] 06:52:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(0xffffffffffffffff, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x810, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"ab947c"}}}, 0x7) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0045878, 0x0) 06:52:11 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (fail_nth: 2) 06:52:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:11 executing program 1: ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000100)={{}, 0x4, &(0x7f0000000000)=[0x20, 0x5, 0x200, 0x4], 0x8, 0x2, [0xe2, 0x1, 0x100000001, 0x5]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) 06:52:11 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:11 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (fail_nth: 3) 06:52:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0045878, 0x0) 06:52:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(0xffffffffffffffff, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x2, 0x4, 0x81, 0x7}]}) times(0x0) 06:52:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000140)={0x10001, {0x1, 0x6, 0x77, 0x7fffffff, 0x7}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x1, 0xf8, 0xff, 0x0, 0x3ff, 0x2, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x608, 0x80000001, 0x5, 0x6, 0x4, 0x5, 0xbb, 0x0, 0x8f, 0x0, 0x2}, r1, 0xf, 0xffffffffffffffff, 0x9) 06:52:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x380, 0x0, 0x0, 0x80000000}]}) times(0x0) 06:52:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x2}, 0x6) r2 = accept(r1, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x80) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000001c0)='batadv0\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) sendmmsg$inet(r3, &(0x7f0000000200), 0x0, 0x20080010) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:11 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(0xffffffffffffffff, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0189436, 0x0) 06:52:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x900, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) bind$bt_hci(r3, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) times(0x0) 06:52:21 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9c0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x7]}, 0x8, 0x800) fsync(r1) times(0x0) 06:52:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (fail_nth: 4) 06:52:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc020660b, 0x0) 06:52:21 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x5a, 0x7, 0x4, 0x0, 0x1, 0x8, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2008, 0x8, 0x9, 0xf, 0x3, 0xf6, 0xeaaf, 0x0, 0x9a1f, 0x0, 0x2}, 0xffffffffffffffff, 0x2, r0, 0x0) times(0x0) 06:52:21 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000000)) 06:52:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/spi_transport', 0x40001, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000100)={{0xeb, 0x3ff}, 0x100, './file0\x00'}) dup3(0xffffffffffffffff, r1, 0x80000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x4cc040, 0x0) ioctl$sock_bt_hci(r4, 0x400448e7, &(0x7f0000000480)="801d06ecbe1b7fe5ba756f4989b314fe62281c9cb1f76c9fe49506405dc79fdb90890056feb8fea91f8774c15783c27c6a0467f0a34e17cd12e5e9a39ea12147b943eeabf649a251632be994e79a5972b2ab8795233a464a8cc207f5039f569ef8de690ad634b6defa6212b3cfaabada2852161b0c2fa1d29334744cbed55eaa4626ecc1ef5307e04c08375d9e03d776cbcaef07b2b99652b48187bd4b218e06b8a2e1741d624cea0ad0ff0972d92da8d2f4a26141") ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="1adc3765c15c714777b7ee45420e4547006e1d54aa9369ef") ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x4, 0x4) fcntl$setstatus(r0, 0x4, 0x2000) 06:52:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) (fail_nth: 5) [ 708.038647] FAULT_INJECTION: forcing a failure. [ 708.038647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.039865] CPU: 1 UID: 0 PID: 8617 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 708.039882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 708.039890] Call Trace: [ 708.039894] [ 708.039899] dump_stack_lvl+0xfa/0x120 [ 708.039929] should_fail_ex+0x4d7/0x5e0 [ 708.039945] _copy_to_user+0x32/0xd0 [ 708.039960] simple_read_from_buffer+0xe0/0x180 [ 708.039980] proc_fail_nth_read+0x18a/0x240 [ 708.039996] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.040009] ? security_file_permission+0x22/0x90 [ 708.040026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 708.040039] vfs_read+0x1eb/0xc70 [ 708.040054] ? __pfx_vfs_read+0x10/0x10 [ 708.040066] ? lock_release+0xc8/0x290 [ 708.040087] ? __fget_files+0x20d/0x3b0 [ 708.040112] ksys_read+0x121/0x240 [ 708.040123] ? __pfx_ksys_read+0x10/0x10 [ 708.040134] ? fput+0x92/0xd0 [ 708.040151] do_syscall_64+0xbf/0x430 [ 708.040166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.040179] RIP: 0033:0x7fa955ea769c [ 708.040188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 708.040201] RSP: 002b:00007fa95346a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.040213] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa955ea769c [ 708.040221] RDX: 000000000000000f RSI: 00007fa95346a1e0 RDI: 0000000000000003 [ 708.040228] RBP: 00007fa95346a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.040235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.040242] R13: 00007ffdbf66ebdf R14: 00007fa95346a300 R15: 0000000000022000 [ 708.040260] 06:52:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='rose0\x00'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448e4, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="74613a31372e63007fc460def740240e35e01f71b7c1e1c0c51762dc94863486a514020000000000002d52b69019d37ca23b1f15d94519efed2fff00000000000000192d3dcd0b2f386c6a5092a4f2378976cac5de9ff7343caec7ed6842ddc0581a83fc4390a278c8f59cf1aa031bafc788aeed4d73c9e12ecc8ddd85f08faee0577edb0f39f1a66db7991d799bcc85b9a4752a44cbd9a10c80f7ae15356dc6a1cb1edcf78473b9ea6069867e522cb7b867c6cc4c4d7087541cc22295682bf2"], 0x16) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 06:52:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xa00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 06:52:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) 06:52:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:31 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3ff}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffff7f, r2, 0x0) times(0x0) 06:52:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000140)=r1) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x40, 0xa9, 0x9, 0x0, 0x70000000000, 0x4011c, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x81, 0x1}, 0x2, 0x401, 0x3, 0x3, 0xfffffffffffffffc, 0x0, 0x7ff, 0x0, 0x101, 0x0, 0x33c356dc}, r1, 0xb, r2, 0xa) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x5b8d48481d2674ee) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:52:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x2, 0x0) 06:52:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:52:31 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:52:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x4c, 0x7fff0000}]}) times(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2, 0x20, 0x7, 0x2b}, {0x5, 0x3, 0x4, 0x6}, {0x3, 0x8, 0x81, 0x2}]}) 06:52:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000080)) 06:52:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:31 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:52:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 06:52:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xb00, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000040)="22cc11102a5bdb7b7e7bcbd9d8bdc3f4ce86dbfb788a275842912274b59245f66aa5a57480183206c5fcd984cbf6da160dfa5d49ffdcc4abe031577f00db60ddf1907e7ec9af2bcfcdfb65422978e74c0ca8f55ab849910c5749be9a2ef8d2e9cc5fbc94de69cb68cf4b4ec78312850be1e339684390d9c64c272ee42cc76f2b9e574d8cddc92b6fb25ec6178084b1523d628195940add56cacb771b6055ff5cfcefe8926784b87b3c78dacb6d27d696") open_by_handle_at(r0, &(0x7f0000000200)=@fuse={0xc, 0x81, {0xc5e4, 0x4}}, 0x8000) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000100)="c17cd8fcab753f8d7397a1f1a181cb8bde15d5e8bad96b9faf39771deb2c23b16d2fd64958b6ada3eab5baac1e31f04cd7c184f4e6947ccd78f929944caed033a50973e3fc2d8f238907e018fc5237c8e172ba4f532f055d3949953ea37b6d02bb9b11a2c3a49d4fbe742a46ac19720ce1c489595d4cf6b22c31b957ba48e9bfbb76773daad0db189dc2d00a876170def8c15b89084653c93fd90b0ba7b4daea2de5e9662ae98a3259f88bd45a05d1b4dca8db52226fddfa") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000001c0)={0x3, 0x3, 0x11}) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:52:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) fcntl$setpipe(r2, 0x407, 0x122a) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[], 0xfe60) 06:52:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4b47, 0x0) 06:52:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x744d, 0x1, 0xa4, 0x2}, {0x8, 0x3f, 0x33, 0xa40a}]}) times(0x0) 06:52:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:52:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x30) times(0x0) 06:52:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:47 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:52:47 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:52:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:52:47 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4b49, 0x0) 06:52:47 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) times(0x0) times(&(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="010000008564a3e0794d422a", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) fsmount(r1, 0x1, 0x8) 06:52:47 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r5, r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r7, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="05d87fcd2880f45f8c607779d88607b2d8166cf6fb6d954c35debfbc0c5db29002880c8e0b70aa60a378b25fe718e548bbcc930350e4b2658e68124d7e94249f9927cc34df8c5adbd91f72f519c158f392bb", @ANYRESHEX, @ANYRESHEX=r6, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES16=r7, @ANYBLOB="77ee18f64941e52eb58016ed65a95e2fb42a74015274b4f4b941eb76f0fe9777"], 0x6) 06:52:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) 06:52:47 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:52:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:52:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, 0x0, 0x0) 06:52:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) close(r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="090000000000006c6530000000000000516ac9c41736567fd5b80a8e2d62ec2dbc46d1dd9ad197427eb8a22364929b555c9a30de09d28e1620de814434327c3a16c346de920bc48642ff3f060fc4f6f16e76d9d88c0acee64415aabcd79e43"]) openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x400040, 0x0) 06:52:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:52:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x541b, 0x0) 06:52:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1008, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r2, r1) bind$bt_hci(r2, &(0x7f0000005540)={0x1f, 0x4, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) recvmmsg(r3, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000000140)=[{0xfffffffffffffffc}, {&(0x7f00000000c0)=""/99, 0x63}], 0x2}, 0x5}, {{&(0x7f0000000180)=@can, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000240)=""/85, 0x55}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x1000000000000126, &(0x7f0000001300)=""/135, 0x87}, 0x2}, {{&(0x7f00000013c0)=@phonet, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001500)=""/189, 0xbd}, {&(0x7f00000015c0)=""/95, 0x5f}, {&(0x7f0000001640)=""/118, 0x76}], 0x4, &(0x7f0000001700)=""/169, 0xa9}, 0x5}, {{&(0x7f00000017c0)=@pppol2tp, 0x80, &(0x7f0000001940)=[{&(0x7f0000001840)=""/118, 0x76}, {&(0x7f00000018c0)=""/114, 0x72}], 0x2, &(0x7f0000001980)=""/41, 0x29}, 0x7}, {{&(0x7f00000019c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/179, 0xb3}, {&(0x7f0000002bc0)=""/163, 0xa3}, {&(0x7f0000002c80)=""/223, 0xdf}, {&(0x7f0000002d80)=""/152, 0x98}, {&(0x7f0000002e40)=""/161, 0xa1}, {&(0x7f0000002f00)=""/71, 0x47}, {&(0x7f0000002f80)=""/104, 0x68}, {&(0x7f0000003000)=""/151, 0x97}], 0xa}, 0xc43c}, {{&(0x7f0000003180)=@isdn, 0x80, &(0x7f0000004340)=[{&(0x7f0000003200)=""/144, 0x90}, {&(0x7f00000032c0)=""/105, 0x69}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x3, &(0x7f0000004380)=""/4096, 0x1000}, 0x8001}], 0x6, 0x10000, &(0x7f0000005500)) 06:52:58 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r1, 0x8}) times(0x0) 06:52:58 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x20, 0x0, "f1533e2539ca674390133fb9b3e660b7824e85e5d48f7cef3f847e20cc129a6c504d81c56bbc4f91211d6cb2f9cabb115aec07505125b060c71a5d6fc6912c1227e8a2d16ca345d2283cc54d2117373a"}, 0xd8) 06:52:58 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_io_uring_complete(0x0) r2 = dup2(r0, r1) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) read(r0, &(0x7f0000000240)=""/180, 0xb4) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) pread64(r3, &(0x7f0000000140)=""/193, 0xc1, 0x57c) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 06:52:58 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:52:58 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5421, 0x0) 06:52:58 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xd0, 0xfeff0000}]}) times(0x0) 06:52:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1020, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:52:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, 0x0, 0x0) 06:52:58 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000200)="d3c1ebaec43f5340e89272dede35f2c3f6026b1139603249bebe2c64c45ed7bf8d367e5a3e0caf17954d98ff652ddb4540a7c4400b139a921c30178fb19cc6c28150e3d9fa9bd4d523602d8a04223771659ee411cd1edb3995c9025b4601282ce4bd248647d1ab379b869aba6863acb207a660058fedc79b37beafc7bc070d7cb0b3c337c980e856a18d7b4ed0a15e4bb7058a8e6290cdf67737245d68c838b671ce9623373876b6428ba9ad3ff46cd6569a79f78460d0ce85b99ec87d278dc1f0") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x204200, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x4}, 0x6) [ 745.692347] audit: type=1326 audit(1762843978.993:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=8757 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca89f0b19 code=0xfeff0000 06:53:07 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3, 0x1f, 0x1f, 0x7fff}, {0x0, 0x3b, 0x20, 0x76c7}, {0xc213, 0x1, 0x80, 0x5}, {0x0, 0x4, 0x8, 0x81}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) times(0x0) 06:53:07 executing program 0: r0 = socket(0x1, 0x4, 0xffff0001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "86b60466e1e7d279", "8c463ddda8dd77525414edd87c6a02bb", "179bb9dc", "a6eb2e8b6d5d01a6"}, 0x28) dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:53:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.log\x00', 0x100c2, 0x0) r2 = openat$incfs(r1, &(0x7f0000000000)='.log\x00', 0x1a9002, 0x12) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) 06:53:07 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = signalfd4(r0, &(0x7f00000000c0)={[0x89]}, 0x8, 0x80800) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000100)="bccbf9092a485a3bbbfbef5bd8a0bce33c5ed44b2e5e45c4ad8c90016676a9e16c431a8a31bd2ef6d679a533fa8c0a5247ae88b694ae1140ba45f9e5c1f18fc94d10a73ce38a7f073015") 06:53:07 executing program 3: times(&(0x7f0000000080)) 06:53:07 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, 0x0, 0x0) 06:53:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x2000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:07 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5450, 0x0) 06:53:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x2010, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:08 executing program 4: ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000140)="995734abc2af97244e44973c3a8f628a8f4ce9dabce4b51846f9b1d672f3a3d55cb2fa0f28560ac6aa0d02728eb9ca18ae5df2eb3a5a64a99132041c3f0a0b6eaa63981c6372291154491112d1b57a38f596193083c1587f2550b0b0c01762687b3c2a730dcb6d9a7e54917a977e7554bc672e11a18023cc95618a542b23ae592dcf97594c3e3322b28db7b075cc8f9674ddd005e7fd77bcacaee919b2c15ee61b72995cb34154a9597f893c57fc12ed34abf5df6d55ff170a080f29fd1caa190e838792442433c55d17b2549df78acb7326d54aed4829a1aefc8c249ea5cdf9d1d4fcdc1a7004ba7ca620570166c1231cd2b1638e0e83dd4ad96a0a660c7cf4") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)="fd2d33e19f409a31c127c3ab9b91053b26667471841b26fa07fb0d4b8fb6d90fb128ed22c004259748b85bac09562930d4d55e5e8a11f2c1346c6e760148789b602215") r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/dmi', 0x40083, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x6, @none}}}, 0xb) 06:53:08 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5451, 0x0) 06:53:08 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 06:53:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00']) write$vga_arbiter(r3, &(0x7f00000000c0)=@unlock_all, 0xb) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000140)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r6 = dup2(r5, r4) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r7 = dup2(r2, r1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) ioctl$sock_bt_hci(r7, 0x0, 0x0) 06:53:08 executing program 3: times(&(0x7f0000000080)) 06:53:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x7, 0x3, 0x9, 0xea}, {0x4, 0x8, 0x6, 0xfffffff8}, {0x3, 0x1f, 0x6, 0x3fed23ea}, {0x6, 0x7, 0x83, 0x80000001}, {0x7, 0x8, 0x3, 0x5}, {0xff, 0x9, 0x6, 0x10001}, {0x0, 0xaf, 0xfa, 0x5}]}) times(0x0) times(&(0x7f0000000040)) 06:53:17 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x101, 0x5, 0x40, 0x4000001}, {0xffff, 0x6, 0x4, 0x80000000}, {0x401, 0x1b, 0x3, 0x7fff}, {0x2, 0x0, 0x4, 0x44}, {0xff, 0x86, 0x1, 0x7}]}) times(0x0) 06:53:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x2, 0x8], 0x1000}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000004140)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004000)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/4095, 0xfff}, {&(0x7f0000001500)=""/225, 0xe1}, {&(0x7f0000001600)=""/37, 0x25}, {&(0x7f0000004200)=""/98, 0x62}], 0x8, &(0x7f0000001740)=""/120, 0x78}, 0xcb}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000017c0)=""/4083, 0xff3}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/9, 0x9}, {&(0x7f0000003800)=""/209, 0xd1}], 0x4, &(0x7f0000003940)=""/16, 0x10}, 0x8}, {{&(0x7f0000003980)=@ax25={{0x3, @null}, [@null, @null, @default, @netrom, @netrom, @netrom, @rose, @netrom]}, 0x80, &(0x7f0000001680)=[{&(0x7f0000003a00)=""/200, 0xc8}, {&(0x7f0000003b00)=""/232, 0xe8}, {&(0x7f0000001640)=""/35, 0x23}], 0x3, &(0x7f0000003c40)=""/54, 0x36}, 0x7}, {{&(0x7f0000003c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003d00)=""/34, 0x22}, {&(0x7f0000003d40)=""/49, 0x31}, {&(0x7f0000003d80)=""/83, 0x53}, {&(0x7f0000003e00)=""/221, 0xdd}], 0x4, &(0x7f0000003f40)=""/158, 0x9e}, 0x8005}], 0x5, 0x0, &(0x7f0000004180)={r2, r3+60000000}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000041c0)=0x1000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x9, 0x10001, 0xaf64, 0x3, 0x8}) 06:53:17 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 06:53:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$FIOCLEX(r0, 0x5451) times(0x0) 06:53:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 06:53:17 executing program 3: times(&(0x7f0000000080)) 06:53:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5452, 0x0) 06:53:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:17 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5460, 0x0) 06:53:17 executing program 4: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_adv_enable={{0x2039, 0x4d}, {0x1, 0x6, "ddef7cd15cb2711af731763acff59fe9e540bb47c151e581edea493ac7f12033494074d5e387a1b699802cd306cfe617b8a27a54c73c8c098610612211d2607a438aea19f143815f72d56c"}}}, 0x51) 06:53:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) 06:53:18 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:18 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/175, 0xaf}, {&(0x7f0000001280)=""/10, 0xa}, {&(0x7f00000012c0)=""/38, 0x26}, {&(0x7f0000001300)=""/194, 0xc2}, {&(0x7f0000001400)=""/240, 0xf0}, {&(0x7f0000001500)=""/107, 0x6b}, {&(0x7f0000001580)=""/229, 0xe5}, {&(0x7f0000001680)=""/8, 0x8}], 0x9, &(0x7f0000001780)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}, 0x10080) times(0x0) 06:53:18 executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)) times(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000380)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r0, r1) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x42502, 0x0) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000280)="e1f77779cd8147871a3dd65b9b4d9cdda995760b425f5aca5eeca320df5468516fbc94ebc4bd0a3c7b23aa3d887da50636416ea1e6ce585e0785d2d97fef4be94cf52970c39015229cd4383a3f726f6f0c5fe8156eda105b655c14db223df12a4f76b315e5480adabda39a09dd9e639b0e5405733791217dcfc4b42de97b0174f1604b15abbe068a8d3084b077a6b8866889b787306fdb56ded8be00f20838a685d373f4f49216b8fef93c18c4e2e742cfb8a51e75239c14579e949063fd8fed368edb") r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt(r5, 0x78b5, 0x40, &(0x7f0000000140)="0aaf8c3fa763633e7de62b19cdab88354f3a288e09e5c9b5ec4f2c0cee4904eb6e847cf489c8bd9d418ce40eee9940d94e78063e9e78aac6bca0e0f1fe5e5dce167f70d264875b3c71d88d7456385c069f2fc3ca3c1b13", 0x57) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r0, 0x1, 0x80000}) 06:53:18 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:53:18 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8901, 0x0) 06:53:28 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xedc0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) (fail_nth: 1) 06:53:28 executing program 4: r0 = io_uring_setup(0x795d, &(0x7f00000001c0)={0x0, 0xdce4, 0x8, 0x0, 0x25c}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000240)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @remote}, &(0x7f0000000140)=0xc) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000000)=""/144, 0x90, 0x8, 0x5}) 06:53:28 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (fail_nth: 1) 06:53:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'wg0\x00'}) 06:53:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x1, 0x3, 0x4, 0x0, 0x0, 0x988, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x4a824, 0x9, 0x8, 0x0, 0x24, 0xc23, 0x0, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xf, r1, 0x3) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = accept4$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x800) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000280)) r5 = dup2(r3, r2) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r8 = dup2(r7, r6) ioctl$sock_bt_hci(r8, 0x400448ca, 0x0) write$vga_arbiter(r8, &(0x7f0000000180), 0xf) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x1f) times(0x0) 06:53:28 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8902, 0x0) 06:53:28 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) [ 775.464560] FAULT_INJECTION: forcing a failure. [ 775.464560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.465636] CPU: 1 UID: 0 PID: 8889 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 775.465652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.465660] Call Trace: [ 775.465664] [ 775.465669] dump_stack_lvl+0xfa/0x120 [ 775.465695] should_fail_ex+0x4d7/0x5e0 [ 775.465711] _copy_to_user+0x32/0xd0 [ 775.465724] simple_read_from_buffer+0xe0/0x180 [ 775.465744] proc_fail_nth_read+0x18a/0x240 [ 775.465759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.465773] ? security_file_permission+0x22/0x90 [ 775.465789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 775.465806] vfs_read+0x1eb/0xc70 [ 775.465821] ? __pfx_vfs_read+0x10/0x10 [ 775.465833] ? lock_release+0xc8/0x290 [ 775.465853] ? __fget_files+0x20d/0x3b0 [ 775.465878] ksys_read+0x121/0x240 [ 775.465888] ? __pfx_ksys_read+0x10/0x10 [ 775.465899] ? lockdep_hardirqs_on_prepare+0xdb/0x1a0 [ 775.465921] do_syscall_64+0xbf/0x430 [ 775.465934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.465947] RIP: 0033:0x7f2ca89a369c [ 775.465956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 775.465967] RSP: 002b:00007f2ca5f66170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 775.465979] RAX: ffffffffffffffda RBX: 00000000199a532d RCX: 00007f2ca89a369c [ 775.465987] RDX: 000000000000000f RSI: 00007f2ca5f661e0 RDI: 0000000000000004 [ 775.465994] RBP: 00007f2ca5f661d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.466000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.466007] R13: 00007ffd8b6267ef R14: 00007f2ca5f66300 R15: 0000000000022000 [ 775.466024] 06:53:28 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8903, 0x0) 06:53:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000580)="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") [ 775.539757] FAULT_INJECTION: forcing a failure. [ 775.539757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.541616] CPU: 0 UID: 0 PID: 8899 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 775.541658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.541671] Call Trace: [ 775.541680] [ 775.541689] dump_stack_lvl+0xfa/0x120 [ 775.541737] should_fail_ex+0x4d7/0x5e0 [ 775.541765] _copy_from_user+0x30/0xd0 [ 775.541792] move_addr_to_kernel.part.0+0x40/0x120 [ 775.541826] __sys_connect+0xd4/0x1a0 [ 775.541855] ? __pfx___sys_connect+0x10/0x10 [ 775.541888] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 775.541926] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 775.541964] ? ksys_write+0x1a3/0x240 [ 775.541987] ? __pfx_ksys_write+0x10/0x10 [ 775.542016] __x64_sys_connect+0x73/0xb0 [ 775.542044] do_syscall_64+0xbf/0x430 [ 775.542070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.542094] RIP: 0033:0x7f367348fb19 [ 775.542112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.542133] RSP: 002b:00007f3670a05188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 775.542156] RAX: ffffffffffffffda RBX: 00007f36735a2f60 RCX: 00007f367348fb19 [ 775.542171] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000003 [ 775.542185] RBP: 00007f3670a051d0 R08: 0000000000000000 R09: 0000000000000000 06:53:28 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x4, 0x7, 0x9, 0x1f, 0x0, 0x100000001, 0x2080, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x1060, 0x9, 0x6, 0x2, 0x9, 0x3, 0x1, 0x0, 0x80000001}, 0x0, 0x5, 0xffffffffffffffff, 0x2) times(0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) syncfs(r2) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) [ 775.542199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.542212] R13: 00007fff9e25ac6f R14: 00007f3670a05300 R15: 0000000000022000 [ 775.542247] 06:53:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:28 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x80000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:53:28 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:53:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:38 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0xbfbe6b42f201c39}, 0x100) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r7, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r10, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) accept$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) recvmmsg(r4, &(0x7f0000003f40)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000280)=""/149, 0x95}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001440)=""/91, 0x5b}, {&(0x7f00000014c0)=""/201, 0xc9}, {&(0x7f00000015c0)=""/237, 0xed}, {&(0x7f00000016c0)=""/186, 0xba}], 0x7, &(0x7f0000001800)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000002800)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002880)=""/83, 0x53}], 0x1, &(0x7f0000002940)=""/2, 0x2}, 0x4}, {{&(0x7f0000002980)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002a00)=""/183, 0xb7}, {&(0x7f0000002ac0)=""/150, 0x96}, {&(0x7f0000002b80)=""/131, 0x83}], 0x3, &(0x7f0000002c80)=""/150, 0x96}, 0x81}, {{&(0x7f0000002d40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002dc0)=""/159, 0x9f}, {&(0x7f0000002e80)=""/140, 0x8c}, {&(0x7f0000002f40)=""/130, 0x82}], 0x3}, 0xf85f}, {{&(0x7f0000003040)=@nfc, 0x80, &(0x7f0000003700)=[{&(0x7f00000030c0)=""/199, 0xc7}, {&(0x7f00000031c0)=""/221, 0xdd}, {&(0x7f00000032c0)=""/113, 0x71}, {&(0x7f0000003340)=""/50, 0x32}, {&(0x7f0000003380)=""/23, 0x17}, {&(0x7f00000033c0)=""/115, 0x73}, {&(0x7f0000003440)=""/212, 0xd4}, {&(0x7f0000003540)=""/177, 0xb1}, {&(0x7f0000003600)=""/205, 0xcd}], 0x9, &(0x7f00000037c0)=""/38, 0x26}, 0x9}, {{&(0x7f0000003800)=@ax25={{0x3, @default}, [@default, @default, @remote, @bcast, @netrom, @remote, @default, @bcast]}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003880)=""/146, 0x92}, {&(0x7f0000003940)=""/199, 0xc7}, {&(0x7f0000003a40)=""/163, 0xa3}, {&(0x7f0000003b00)=""/95, 0x5f}, {&(0x7f0000003b80)=""/93, 0x5d}, {&(0x7f0000003c00)=""/207, 0xcf}, {&(0x7f0000003d00)=""/143, 0x8f}], 0x7, &(0x7f0000003e40)=""/233, 0xe9}, 0x2}], 0x6, 0x2, &(0x7f00000040c0)={0x77359400}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000042c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004280)={&(0x7f0000004100)={0x16c, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0xc014) 06:53:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8904, 0x0) 06:53:38 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, r2, 0x1000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0xf9, 0x3, 0xffffffff, 0x2, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x10, 0x7, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg(r3, &(0x7f00000027c0)={&(0x7f00000002c0)=@ll={0x11, 0x4, r7, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002700)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="d2e634c931e406a50b9d1b1832c6df83fdd4183757d39e6e994ba80f06b1930458699cbc51d868a1f3870faefd51ba533c8b152b903e07912d8adaa51c0b58be8bd6b085582739407b343f5a89402eadd66ff6eb24b95e19e9cb8a0c68ecfe62c4160d69c4c7665754c46f4aa099879c1d8f5f5954a6b024246fc43d80e057df2a26f6310f93a6be4884c47089ce8391363a9c7b4b628b48d8dad8", 0x9b}, {&(0x7f0000000440)="3d594075095d6fee7672230c3ce0c9c27db1c2e3ed6371fa703bc085", 0x1c}, {&(0x7f0000000480)="8496fb6dd8a37c87", 0x8}, {&(0x7f00000004c0)="6567399ab6bda97ad63fa66c48fe3bcccf9a05a8b30f500a9eae8c153e1ba707f612768a4ad40ebd0d21a9066986625fd208c7bb3f5d82059d92f3ae8b9f82da5bf8d25b13968db124d0c0668c5ef1be8648f9c4b1dd0bcbd0ef48181818cd7e8d14d79691f36a07bef13760da6ba9b36bb414f846d7902da3cb12dd2fed789c2048d97a31a0ba3a73c701ef906ebaea04427c161a1de5fbfbd45bd2270830b24f131cb7fd1d8574aefecf762e0af471eb089505fa40af7d6b134fc60c3a880369343bcc7d927fac290355c105a80932040f28a9b735bdb9484813baf6d15577589b13a6", 0xe4}, {&(0x7f00000005c0)="f69ea2ce086e5cf1278ec2d0d6ab348e9b2b3c3ed4207aa85054c84d0ac9a30e7ee018ae2c6153f321b445a9f7a46e0749291839952b394257d421bee7fdc7166b81db9160079d1985b6c98b87e68739da326f53d1545caf2a0cc00b992afe32e0b80b8ae56bf53d2c156e645b3c8faaca85798c7df3360c3cb2", 0x7a}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="827340612762b748d18fa2e612e4b05167e8dce598c3ac41610b0305f235a6b5f4073573d8eed9d9ac51c2c01bb803e36814f9384adf3229b4ff80b51471015c7ad7c4aa3ed0ad163f983963399c530407a04f0adbdfab877f9a430d965d3b7ad2e480af64699da9a8d61a266b72770f47cf4e0ce1697cc4c3626349e1daec7e749badad8d6e7b040ed1fe32c71fb7cb031fcd54ded7aed5388a269c677648b8fbd9934ea3a4c9fa76d75b7fc81c4229d30318be2fe12b18e28fffb50c", 0xbd}], 0x9}, 0x5) write$bt_hci(r3, &(0x7f0000002800)=ANY=[@ANYBLOB="013a0c07065513061b763dcb716f4639722635e77cc8cee9fac3240e316f8b86f30a86fa1f2346744efb88041040b3e44eede7d4bbcaee80cefcef82ae2efd19df10aeb53e4c5136981b2f82ad831748009ff4b8fa118ba3ae826ea185ce5c8ba061e25ef078b519512e1f9efde7fb77de16d39a3c4b464b6a45c118bbf6e1282e1cee926e4e86e4f45e441fb673865ca2c7"], 0xb) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r5, r4) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0x4, 0x1}, 0x6) 06:53:38 executing program 0: clock_gettime(0x1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000002700)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000002340)=[{&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/138, 0x8a}], 0x6, &(0x7f00000023c0)=""/237, 0xed}, 0xfffffff7}, {{&(0x7f00000024c0)=@qipcrtr, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002540)=""/207, 0xcf}, {&(0x7f0000002640)=""/96, 0x60}], 0x2}, 0x4}], 0x2, 0x1, &(0x7f0000002780)={0x77359400}) times(0x0) 06:53:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x595, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/212, &(0x7f0000000180)=0xd4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:53:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (fail_nth: 2) [ 784.879943] FAULT_INJECTION: forcing a failure. [ 784.879943] name failslab, interval 1, probability 0, space 0, times 0 [ 784.881267] CPU: 0 UID: 0 PID: 8932 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 784.881284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.881291] Call Trace: [ 784.881296] [ 784.881301] dump_stack_lvl+0xfa/0x120 [ 784.881329] should_fail_ex+0x4d7/0x5e0 [ 784.881345] ? __inet_hash_connect+0x9f9/0x1b60 [ 784.881363] should_failslab+0xc2/0x120 [ 784.881377] kmem_cache_alloc_noprof+0x80/0x690 [ 784.881393] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 784.881411] ? __inet_hash_connect+0x9f9/0x1b60 [ 784.881427] __inet_hash_connect+0x9f9/0x1b60 [ 784.881448] ? __pfx___inet6_check_established+0x10/0x10 [ 784.881469] ? __pfx___inet_hash_connect+0x10/0x10 [ 784.881485] ? lock_release+0xc8/0x290 [ 784.881504] ? inet6_hash_connect+0xe1/0x180 [ 784.881521] tcp_v6_connect+0x12d7/0x1bb0 [ 784.881541] ? __pfx_tcp_v6_connect+0x10/0x10 [ 784.881557] ? register_lock_class+0x41/0x560 [ 784.881574] ? register_lock_class+0x41/0x560 [ 784.881597] ? __lock_acquire+0xc65/0x1b70 [ 784.881617] __inet_stream_connect+0x3a5/0xed0 [ 784.881633] ? __pfx_perf_trace_lock+0x10/0x10 [ 784.881652] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 784.881673] ? __pfx___inet_stream_connect+0x10/0x10 [ 784.881686] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 784.881700] ? __pfx_inet_stream_connect+0x10/0x10 [ 784.881712] ? mark_held_locks+0x49/0x80 [ 784.881741] ? __pfx_inet_stream_connect+0x10/0x10 [ 784.881753] inet_stream_connect+0x57/0xa0 [ 784.881768] __sys_connect_file+0x14b/0x1b0 [ 784.881787] __sys_connect+0x161/0x1a0 [ 784.881804] ? __pfx___sys_connect+0x10/0x10 [ 784.881821] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 784.881839] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 784.881861] ? ksys_write+0x1a3/0x240 [ 784.881875] ? __pfx_ksys_write+0x10/0x10 [ 784.881890] __x64_sys_connect+0x73/0xb0 [ 784.881905] do_syscall_64+0xbf/0x430 [ 784.881919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.881932] RIP: 0033:0x7f367348fb19 [ 784.881941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 784.881953] RSP: 002b:00007f3670a05188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 784.881964] RAX: ffffffffffffffda RBX: 00007f36735a2f60 RCX: 00007f367348fb19 [ 784.881973] RDX: 000000000000001c RSI: 00000000200000c0 RDI: 0000000000000003 [ 784.881980] RBP: 00007f3670a051d0 R08: 0000000000000000 R09: 0000000000000000 [ 784.881987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.881994] R13: 00007fff9e25ac6f R14: 00007f3670a05300 R15: 0000000000022000 [ 784.882011] 06:53:38 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$bt_hci(r1, &(0x7f00000001c0)={0x1, @role_discovery={{0x809, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:53:38 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8906, 0x0) 06:53:38 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) (fail_nth: 3) 06:53:38 executing program 3: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:38 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x81) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'nr0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) times(&(0x7f0000000100)) 06:53:38 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x0) sendto(r1, &(0x7f0000000240)="34d34ab02ddda72fd5b025272739adfb28cddd800d1dff7fe04a5417f9ded09f41629162db24e0c4658046d404b5764d855f1de2abe8c4aa80e634a3f9016935cc73b2d084d8b3af8866831ab94dee88f28ad277d1d324b3eda1cf9ac2c25c1a74202a9b2ab4667b95b56916bd53ac02e1636a997bf78d1590018382eeed353f81c1bab1554cc070dce99a587bae516c19cd24b2813e9b7832d4e61641032c1754011067a8b1cfbf529117f319f8f175761f00a970def044b15995d81b6cc0e1d2f42c9f32fe79f494ca53921a9414295a", 0xd1, 0x0, &(0x7f0000000340)=@caif=@dgm={0x25, 0xd923, 0x1f}, 0x80) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xc8, 0xff, 0x2, 0x7f, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x249a, 0x4, @perf_config_ext={0xffff, 0x3}, 0x2040, 0x2, 0x1, 0x4, 0x7, 0x3f, 0x1748, 0x0, 0x401, 0x0, 0x7ff}, r0, 0xffffffffffffffff, r2, 0x3) times(0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x7, 0x4, 0x2, 0x0, 0x100, 0x50, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, @perf_config_ext={0x3ee, 0x40}, 0x40043, 0xffffffffffffffff, 0x6, 0x4, 0x0, 0x9, 0x5, 0x0, 0x40, 0x0, 0xffff}, r0, 0x8, 0xffffffffffffffff, 0xa) 06:53:48 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8907, 0x0) 06:53:48 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 06:53:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:48 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="27a01166446238bd9a7aa9d4fcb2c2e0b4ff1b07473dfb1c068f3bbb12932e2f2c863cfb1666971384a63ee8f0f36b8bf14109f841271796aa2146f7370bff5e8e303f8894b44f8e6987c1a8c035f3f93df8604722f765c44cf0963bf0b1179a594a40797be48843"], 0x8) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0x2, 0x2}, 0x6) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r5 = dup2(r3, r2) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) write$bt_hci(r5, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r1], 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x1, [0xffff, 0x29], 0x6}, 0x10) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r3, 0x400448e4, &(0x7f00000003c0)="e769f3cee5106cbe0a30957ac9fd") setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000380)=0x62, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/236, &(0x7f0000000200)=0xec) 06:53:48 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x9, 0x8, 0x7, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x401, 0x40}, 0x49241, 0x3, 0x4, 0x3, 0x1, 0xd152, 0xffff, 0x0, 0x4, 0x0, 0x9}, r1, 0x5, r2, 0x18) times(0x0) 06:53:48 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) perf_event_open(&(0x7f0000000080)={0x2982bafd7e2dcd61, 0x80, 0xac, 0x6, 0x7, 0xa9, 0x0, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x5, 0x80000000}, 0x4040d, 0x3, 0x4, 0x9, 0x401, 0xe94, 0x8, 0x0, 0x1, 0x0, 0x152}, 0xffffffffffffffff, 0xb, r0, 0x1) 06:53:48 executing program 4: ioctl$CDROMSUBCHNL(0xffffffffffffffff, 0x530b, &(0x7f0000000280)={0x1, 0x40, 0x1, 0x0, 0x0, 0x20, @msf={0x6, 0x0, 0x3}, @msf={0x6, 0x14, 0x1}}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, r1, 0x2) io_setup(0x400, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdb}]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cc, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={0x0, @nfc={0x27, 0x1, 0x0, 0x6}, @tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x1}, 0x4}}, @l2={0x1f, 0x4b6, @any, 0x1f}, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='ip6gretap0\x00', 0x80000000, 0x8eb, 0x200}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000000), &(0x7f0000000040)) 06:53:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8912, 0x0) 06:53:49 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x1, 0x1}, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) close(r5) r6 = dup2(r1, r0) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0xff, 0x6, 0x2, 0x0, 0x10000, 0x243, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0x35, 0x0, 0xe, 0xc96, 0x8, 0x8, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0x1) times(0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x124, 0xffc}) 06:53:49 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r1 = fork() times(&(0x7f0000000140)) ptrace(0x10, r1) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x20, 0x7, 0x9, 0x9, 0x0, 0x0, 0x5400, 0x12, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0x100, 0x3ff, 0x3, 0x78e, 0x8001, 0x8, 0x0, 0x1, 0x0, 0x9}, r1, 0x5, r0, 0x1) 06:53:49 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xfff6, 0x1}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:53:49 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8940, 0x0) 06:53:49 executing program 4: mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:53:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:53:49 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x3000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:53:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x5}, 0x1800, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x8, 0x202000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000040)) sendfile(r0, r1, &(0x7f00000000c0), 0x40) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 06:53:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @local, 0x5}, 0x1c) 06:53:59 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:53:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:53:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:53:59 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8941, 0x0) 06:53:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'ip_vti0\x00', {}, 0x3}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:53:59 executing program 0: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x3}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:53:59 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000200), 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1b}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x48081}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:53:59 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r5 = dup2(r4, r3) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r1, 0x2c, 0x0) 06:53:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:53:59 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x48000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000000040)) ioctl$CDROMREADRAW(r1, 0x5314, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000b00)={{0x1, 0x1, 0x18}, './file0\x00'}) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003900), r1) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x34, r3, 0x2, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x400a0}, 0x40) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40001) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) times(0x0) r5 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x3, 0x2, 0x10, 0x8, 0x0, 0x8, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0xfff}, 0x1000, 0xfff, 0x3, 0x0, 0x7, 0x10000, 0x9, 0x0, 0x7, 0x0, 0x800}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x8) r6 = dup3(0xffffffffffffffff, r5, 0x0) times(&(0x7f0000000100)) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000001040102000000000000000000000011080003400000000305000100050000000600064000010000087fffffff470238d897f4a37163ecaca4"], 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0xc0) shutdown(r6, 0x1) 06:53:59 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x1, 0x1, 0x80, 0x0, 0x0, 0x108, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000080), 0x2}, 0xa418, 0x6, 0x8, 0x3, 0x29, 0x3, 0xff7f, 0x0, 0x5, 0x0, 0x2}, 0x0, 0x0, r0, 0x1) times(0x0) 06:53:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0x3, 0x0, 0x0, @local, 0x5}, 0x1c) 06:53:59 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:54:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x7000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:10 executing program 1: fcntl$getflags(0xffffffffffffffff, 0x40a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:54:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x4, 0x6e, 0x4, 0x0, 0xfffffffffffffff7, 0xc10, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe19c, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x41200, 0x3f, 0x9f0, 0x6, 0x2, 0x9, 0x2, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x4, r2, 0x0) 06:54:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x894c, 0x0) 06:54:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0x7, 0x0, 0x0, @local, 0x5}, 0x1c) 06:54:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(0x0) 06:54:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000100)=0xfffffffe, 0x4) 06:54:10 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040), 0xf) dup2(r1, r0) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) 06:54:10 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) close(r1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 06:54:10 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xf, 0x0, 0x0, @local, 0x5}, 0x1c) 06:54:10 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1, 0x5}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:54:10 executing program 1: rmdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x54e8, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setstatus(r0, 0x4, 0x4000) times(0x0) 06:54:10 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) (fail_nth: 1) 06:54:10 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8982, 0x0) 06:54:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8000, 0xdc) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0xba, 0x5, @buffer={0x0, 0x55, &(0x7f00000000c0)=""/85}, &(0x7f0000000140)="11b395c6457cb9ac68f8c22bff433d014761782e6b502672e78ce858c333be10b2261321d501fe2385f732f60b5edd475b59e3ad587101899bcb18836813c9b6a30b2cdcdfee5e58f2c9a19d99cb1eb2451aafd1269e33b0d7b6fc0a4e2614eac2c4c90c1dfaa7f0f923d6f04e24cb892270b074c0af6527ef07de8ac0a160b006665d719271b1ea3038c1608ba3264581be9d8761997d0d24f66cc061f0fc7f86ee54d344d4b31d9d54bf10c496c8bdf233909fbe2476185954", &(0x7f0000000200)=""/129, 0x3, 0x10, 0x3, &(0x7f00000002c0)}) [ 817.323617] FAULT_INJECTION: forcing a failure. [ 817.323617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.325665] CPU: 1 UID: 0 PID: 9123 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 817.325697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.325710] Call Trace: [ 817.325718] [ 817.325726] dump_stack_lvl+0xfa/0x120 [ 817.325769] should_fail_ex+0x4d7/0x5e0 [ 817.325795] _copy_to_user+0x32/0xd0 [ 817.325828] __x64_sys_times+0xaa/0x160 [ 817.325868] ? __pfx___x64_sys_times+0x10/0x10 [ 817.325904] ? __pfx_ksys_write+0x10/0x10 [ 817.325947] ? do_syscall_64+0x85/0x430 [ 817.325977] do_syscall_64+0xbf/0x430 [ 817.326000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.326022] RIP: 0033:0x7f7e7dd2bb19 [ 817.326057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.326077] RSP: 002b:00007f7e7b2a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000064 [ 817.326098] RAX: ffffffffffffffda RBX: 00007f7e7de3ef60 RCX: 00007f7e7dd2bb19 [ 817.326113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 817.326126] RBP: 00007f7e7b2a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.326138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.326151] R13: 00007ffd5479012f R14: 00007f7e7b2a1300 R15: 0000000000022000 [ 817.326182] 06:54:10 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 06:54:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) (fail_nth: 2) 06:54:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x2, 0x1f, "e27836", 0x4, 0xbb}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xff7f}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:54:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8983, 0x0) 06:54:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2800, 0x100) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x40, 0x7f, 0x81, 0x0, 0x8, 0x800, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x8001, 0xffff}, 0x508, 0x6, 0xfff, 0x3, 0xcbb, 0xffffffff, 0x9, 0x0, 0x487, 0x0, 0x82}, r0, 0xc, r1, 0x0) times(0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x107000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x20, 0x8, 0x0, @private0, @private2, 0x700, 0x10, 0x1, 0x1}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@loopback, @in6=@private2, 0x4e33, 0x6, 0x4e23, 0x800, 0x2, 0xa0, 0x80, 0x3b, r3}, {0x1, 0x8, 0x1, 0x3a2b, 0x3f3e, 0x9, 0x2, 0x20}, {0x4, 0x2, 0xa77c, 0x9}, 0x4c, 0x6e6bc0, 0x1, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3500, 0x1, 0x1, 0xd7, 0x4, 0x2}}, 0xe8) times(&(0x7f0000000080)) times(&(0x7f00000000c0)) times(&(0x7f0000000200)) 06:54:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:54:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 06:54:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) [ 827.827738] FAULT_INJECTION: forcing a failure. [ 827.827738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.828702] CPU: 1 UID: 0 PID: 9157 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 827.828719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 827.828728] Call Trace: [ 827.828734] [ 827.828738] dump_stack_lvl+0xfa/0x120 [ 827.828766] should_fail_ex+0x4d7/0x5e0 [ 827.828782] _copy_to_user+0x32/0xd0 [ 827.828801] simple_read_from_buffer+0xe0/0x180 [ 827.828823] proc_fail_nth_read+0x18a/0x240 [ 827.828838] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.828852] ? security_file_permission+0x22/0x90 [ 827.828868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.828882] vfs_read+0x1eb/0xc70 [ 827.828897] ? __pfx_vfs_read+0x10/0x10 [ 827.828909] ? lock_release+0xc8/0x290 [ 827.828929] ? __fget_files+0x20d/0x3b0 [ 827.828954] ksys_read+0x121/0x240 [ 827.828965] ? __pfx_ksys_read+0x10/0x10 [ 827.828981] do_syscall_64+0xbf/0x430 [ 827.828996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.829009] RIP: 0033:0x7f7e7dcde69c [ 827.829019] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 827.829030] RSP: 002b:00007f7e7b2a1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.829042] RAX: ffffffffffffffda RBX: 00000000199a67a2 RCX: 00007f7e7dcde69c [ 827.829050] RDX: 000000000000000f RSI: 00007f7e7b2a11e0 RDI: 0000000000000004 [ 827.829057] RBP: 00007f7e7b2a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.829065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.829071] R13: 00007ffd5479012f R14: 00007f7e7b2a1300 R15: 0000000000022000 [ 827.829089] 06:54:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a0, 0x0) 06:54:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) 06:54:21 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x1040, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, r2, 0x0) times(0x0) 06:54:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:54:21 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) fadvise64(r0, 0xfff, 0x1, 0x0) 06:54:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x4000) dup2(r2, r1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:54:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a3, 0x0) [ 828.638452] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 828.639293] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 829.852927] Bluetooth: hci2: command 0x0406 tx timeout [ 831.900946] Bluetooth: hci2: command 0x0406 tx timeout 06:54:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000140)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) recvmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/133, 0x85}, {&(0x7f0000000580)=""/176, 0xb0}], 0x4, &(0x7f0000000680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x10000) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x9, 0xfd, 0x7a, 0x0, 0x7ff, 0x80, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x20a, 0x0, 0xb0, 0x3, 0x81, 0xfffffff8, 0x3, 0x0, 0x2, 0x0, 0x10001}, r3, 0x5, r0, 0xa) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x20, 0x9, 0x40, 0x7f, 0x0, 0x1, 0x910, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x4}, 0x8001, 0x100000000, 0x401, 0x0, 0x7, 0xfffffcf9, 0x8000, 0x0, 0x13d, 0x0, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xb) write$vga_arbiter(r4, &(0x7f0000000840)=@unlock_all, 0xb) 06:54:30 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x0, @local, 0x5}, 0x1c) 06:54:30 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f00000001c0)="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") ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) fsetxattr(r2, &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x11, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/mac80211_hwsim', 0x1, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f00000000c0)=""/134, &(0x7f0000000180)=0x86) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000002c0)={0x0, 0x81}, 0x2) 06:54:30 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) times(&(0x7f00000000c0)) 06:54:30 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 06:54:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x800448d5, &(0x7f0000000040)="930cb503b53e363d1ad14dc8e90ce35c8bbb8523f89595414a5acf8ce1c5a81021125b88f2cca3") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r5, r4) ioctl$sock_bt_hci(r5, 0x400448e3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 06:54:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe8, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x4c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:54:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x40, 0x7, 0x9, 0x81}]}, 0x10) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:54:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x9000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0106200100aaaaaaaa127c04"], 0x13) 06:54:31 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) write$vga_arbiter(r1, &(0x7f00000013c0)=@target={'target ', {'PCI:', 'd', ':', '6', ':', 'a', '.', 'd'}}, 0x13) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xfffe, 0x4}, 0x6) r3 = dup2(r2, r0) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x4}, 0x2915282bcc4ff8de, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, r3, 0x0) r4 = timerfd_create(0x7, 0x80000) fchown(r4, 0xee00, 0x0) times(&(0x7f0000000080)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/163, 0xa3}, {&(0x7f0000000040)}, {&(0x7f0000001200)=""/79, 0x4f}, {&(0x7f0000001280)=""/183, 0xb7}], 0x5) r6 = dup2(r1, r5) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) 06:54:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 06:54:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x7ff, "9777bf", 0x8, 0xfe}) 06:54:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) 06:54:31 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xac, 0x2, 0x0, 0x7, 0x0, 0x6ef, 0x20080, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4, 0xfffffffffffffbff}, 0x282, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0xffffff2b, 0x0, 0x1}, r1, 0x2, r0, 0x2) 06:54:31 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:54:31 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0xa8, 0x75, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x800, 0x376, 0x0, 0x2, 0x80000000, 0x400, 0x1, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x5, r0, 0x1) 06:54:31 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x40a82) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="c1c30c9e5574db9e517316aecd46b938af10d00b6a4f44d79d10988291bfdae4859f30be9c3f040bff455081b5fe4101032123ebdbb573dea656f44bac5cc8"], 0xfffffffffffffde8) 06:54:31 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @local, 0x5}, 0x1c) 06:54:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xa000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:31 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x9, 0x7f}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0xff, 0x0, 0x20000000000000, 0x80809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x200000004}, 0x580, 0x0, 0x0, 0xc, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x0, @time={0xef8, 0x3}, 0xff, {0x3, 0x4}, 0x81, 0x1, 0x1}) times(0x0) r1 = memfd_secret(0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r1, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x1) 06:54:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 06:54:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) 06:54:32 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x80200, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)=0x8) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r8 = dup2(r7, r6) ioctl$sock_bt_hci(r8, 0x400448ca, 0x0) r9 = io_uring_setup(0x489a, &(0x7f0000000400)={0x0, 0xbdf7, 0x20, 0xfffffffc, 0x3d4, 0x0, r8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="03000000000000002e1e8e36486530002a2365668c407806027e547c029a8c01c957a7c0286d90f6472fca6530c6acd9cc43f6e0f8c33a78754e22014c9d809f0da124cb0b4c1539b21295e2adc4f5841a9204cca0ed0a219399"]) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r10, 0x1, 0x4, 0x0, &(0x7f0000000080)) io_submit(0x0, 0x5, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xfff, r0, &(0x7f0000000080)="7725bf924b06083e7acefe73815257423e560cfbb1884d3ab3509af306892937f36b9446f4b9705f15349fde9262b0ac0d61ed558c58c0a83be7e07026e48f99d7cb9425f74744", 0x47, 0x8, 0x0, 0x6, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000140)="b55198fa17444cc23dd16592331588f577099b88d2b1c099c5747a281344c0f0232cde3e04040694d4919d115b3f39b18221c9e17bca968f86099cd1486e69ea4c28f03637de5f65a9a28a97b89aa6adeb80baee541bdab7338a17303ee145fc296c0a87603fc558640cd2837e94287c431ac58b23760fe3eac17521e7f390ef0f0b80cc7ffb407fadc34b1cd449bb30a5733d1b7df3b6f17184fd30265bd311fff1d28358264948ed506f44628eff28ae7c55994adaefde5f110e5810cc2ef5468a6e5a83b0b4de4c9c8058a03b6aca16f624016a07de56358d054e", 0xdc, 0x80000000, 0x0, 0x4, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x9, r5, &(0x7f00000002c0)="56d17c5e69682f9e55c02a6ab1af925a45db767ad92520368c0a13079d13e9efb8d4655b2e5e852396f72778c8ab54be2e0161f44bd8ae9ae053663b3ee8bf10284647f57a7edafa4faca045745944a5fb57bb98994d664862a6affcc7de6e0a4ec6cfc9c0e032f0a296286c73c5d78293f4c6922188825799a0de4877fd8548145230b76f4e2060110488f5237a9a9e69ef673cfc9117aad4fd3b28b5c67838d22451162e81d92df3fa63b90acaa32982cdcb1701c087ea1bd21c6ae6488444d3057f1d9939af9e4bc3b86522a2f4833eab133b", 0xd4, 0x4, 0x0, 0x9569d181bf0c0a68}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0xb880, r9, &(0x7f0000000480)="72fc352e3342e5daf88d2795b21d819eacd5d5908f974e862de9f21bb7632e65bb22a56d3586871795cf11828966a690a13c93550acf0309ba47a2be380abf3964606acb5a2dd5c23d398b8770aa6caf27a83dfbec0ea7912b501d073dbaeea704bea87b51d7219d7ed3cf8e7f3cf3d1adbca7f07ffc89d40b3663cdd5252879fa050b58702dff36b1fdc081b188465e1115ca37b8950bddb262d78b9cf9496f72517b702587dc508591d56ec16654100501faa03dbc1a17304ccc4770236813667b5d1ade31279b63be9af07312f4", 0xcf, 0x80000000, 0x0, 0x2, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x5, r10, &(0x7f0000000600)="b91917a05a8847364414a5ca9a598ebb3e488450be9246abd58bc668bea6281a4155a6", 0x23, 0x57a2e11e, 0x0, 0x1}]) times(0x0) [ 838.788494] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 838.789718] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 839.900960] Bluetooth: hci1: command 0x0406 tx timeout [ 841.948894] Bluetooth: hci1: command 0x0406 tx timeout 06:54:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xb000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0x0, @local, 0x5}, 0x1c) 06:54:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 06:54:42 executing program 6: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x81800) setns(r0, 0x20000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r3, r2) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000140)="d033d37aa26db728c00c6f605a565f0554077842d65b81cdcf6ceeddb37b32d14369a06f6517a66272457be69f44f9201ffc83f2b13697830b08a0ae4349c6030a15f0ec40bc8f0ac63671bd89babbff67a80ce1d24389b30e680e54853745b9eece4611d769e70d5a2b8b9b703d06f587f275fb8d1e259b8ac56ac6b02442150f83d368384f55e36e5f7ff88810509716ae341d2872693f21c30c1536ea0ad7a0f1ce22db4d58b51807af096b7afd9ce10eb01b33751ceeea423e4d81cdfb541d87b22e2e8cfacc28d655586db6a722") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r5, r4) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) write$binfmt_aout(r2, &(0x7f0000000240)={{0x10b, 0xfc, 0x6, 0x1c5, 0x340, 0x5, 0x289, 0x1000}, "f885cc366131fc31130d586cd88632e3202ccef707fd216e54e3bc", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x53b) 06:54:42 executing program 3: getpeername$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) times(&(0x7f0000000240)) dup2(r0, 0xffffffffffffffff) times(&(0x7f0000000200)) io_setup(0xfff, &(0x7f0000000040)=0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000001c0)={0x2, 'ip_vti0\x00'}, 0x18) io_destroy(r1) times(&(0x7f0000000100)) 06:54:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) ioctl$sock_bt_hci(r3, 0x38, &(0x7f0000000000)="644469212c9d21f144323b61e337f3ffd5d03485a7ab1796fa3bc0") ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:54:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x30c}, 0x0, 0x1, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) syz_io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x8cb2, 0x0, 0x0, 0x28a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1000, 0x1, &(0x7f0000000180)="4e56ac680ca867456cbcddaa706cf2f75817e26e37e3c75175cc0485604d9e6f42992b3f7cc0ef0006881144b5185ececb706e02999234f509364910e7331315646e049a79d0bba67edd4f42ddd30674d12a8bfd35214f3d0e74d01a86e7bb9d4aad14d0b4a74385056653b383f691c548cf8d3322e3d6", 0x1}, 0x5) 06:54:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c02c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x9, 0xffffffffffffffff, 0x1) times(0x0) 06:54:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x35, &(0x7f0000000900)={@private1}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={'syztnl1\x00', r3, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) r4 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4e23, 0x7f9a, 0x4e24, 0x3f, 0xa, 0x80, 0x40, 0x32, r3, r4}, {0x1, 0x80000000, 0xff, 0x1, 0x8b06, 0x0, 0x0, 0x9}, {0x1, 0x3, 0x8, 0x7}, 0x9, 0x6e6bbe, 0x2, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x3c}, 0x2, @in=@empty, 0x3501, 0x4, 0x0, 0x9, 0x5, 0x40, 0xa28}}, 0xe8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0xfe, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:54:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x10000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:54:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, 0x0) 06:54:52 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000000c0)={0x80000000, 0x1000, 0x10001, 0x101, 0x101}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:54:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x5, 0x0, @local, 0x5}, 0x1c) 06:54:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6) 06:54:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) r1 = socket(0x29, 0x80000, 0x3f) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2) 06:54:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) times(&(0x7f0000000080)) times(&(0x7f00000000c0)) 06:54:52 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, 0x39, 0x100, 0x70bd2b, 0x25dfdbfe, {0x4}, [@generic="904712cadbc3d9808839ab9e229a764f620483a04603225bc232ab4322e0d645e08e54de32f5fdff9c457cdcd327284a1d10b09370b47d953cd50786d9c2dad36a86a9d6b2f308f9fa1502332b7edda8f8cc6ea4ad090f48fe2bc2ff3bdc419451acfb8875e3194fb03dc79b0fed73ec6e7014e89e8b24c5ef1483d835e679e6397ca70e290fee8c288738a059ef923d45f84e8ec4bd22f5d5d2c43ec05d03e4b5f4c33193c7968443e10fd776794d36a51c034d54"]}, 0xcc}, 0x1, 0x0, 0x0, 0xc004}, 0x21) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/44, 0x2c, 0x40000140, &(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42}}, 0x80) times(0x0) times(&(0x7f0000000280)) 06:54:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) 06:54:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 06:54:52 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000100)={0x2, 0x20000800, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pidfd_open(0x0, 0x0) times(&(0x7f0000000080)) times(&(0x7f00000000c0)) 06:54:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1f, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xaef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) inotify_add_watch(r1, &(0x7f0000000100)='./file1\x00', 0x90000028) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) times(0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syncfs(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000180)='./file1\x00') 06:54:52 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r0 = getpid() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x4, 0x1, 0x40, 0x7, 0x0, 0x7, 0x8, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0xca9443d37c90f76c, @perf_config_ext={0x3f, 0xc1}, 0x9000, 0x5, 0x5, 0x1, 0x2, 0x0, 0x6, 0x0, 0x8}, r0, 0xf, r3, 0x6) times(0x0) 06:54:52 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) r4 = dup2(0xffffffffffffffff, r1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x1, 0x2}, 0x6) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x1, 0x4, 0x0, &(0x7f0000000080)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r7, 0x1, 0x4, 0x0, &(0x7f0000000080)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x2, &(0x7f0000000040)=[r5, r6, r2, r7, r1, r0], 0x6, 0x0, 0x1, {0x0, r8}}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0105040dfffffaff01400300f413c468a609b2d5ff18dbddbee7ed7f2a9c40586a846c410a9f60b3c110e375c727ad93d2aa6567c07febd9bab3a18a4735fece5939e67e4f5e1f2a64f780e581d92a3014a3a214bf4dee274c6b48c53bc65f02b45c8e6ec405ede475d446c2bcde9918900cfabf7e4643c56b4ddba6df969d0694442e704e8fa11e55bef75b2945b831b22ea01b61fade86f82b"], 0x11) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000200)=0x5, 0x4) 06:54:52 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0) fork() recvmsg$unix(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x2100) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) dup(r1) syz_open_procfs$namespace(r0, &(0x7f0000001780)='ns/time\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000100)={0x0, 0x6, 0xc7, {0xc7, 0x23, "03825b420b5ccbca4dc1561478093f5c87cabe0061470fe4db568502414607559c7dacebd41d654a66adb0551ff4121ec6b904253ef01eb03639b35e0cfc2be64b6249d66c03d8f11282544b9891b876029a7a0b9e0077f1324993d84e2934e51786e7443cb88fca6d0fcff649492d17b297f7d50d3158927c04b2a7da374d03da93c67789f504e9e8ceb20abd39939f56e355c59c615235a94352363e71e27d77837009e71d96318abd4df45e001ff972aeb661a95033abf96009f5c4ad497bb1f3930c90"}}, &(0x7f0000000200)={0x0, 0x3, 0x45, @string={0x45, 0x3, "2b0ada3278606540f5c85f7e5a82db70ae7875ffd2d9490f8e457469f3f642736b87a22bcdc91e1a38010b1e5056aae7d6ff46d6296732b63745ec50f85317f1f0b66c"}}}, &(0x7f0000000580)={0x44, &(0x7f00000002c0)={0x0, 0xa, 0xf3, "c3b2b498f6af88f6401e93f13c78ca00b768ef875d4b8aca2afd0df61f557f071b77cf0210d370ba69bd64fc0e82ee987ffbcb7efda8d6c61d4f5347929019b35f5fdeded8d8fb21935d4fa526fd63147531fbf22866f219e49682fca9b4c862e506a6360c3e561474a4c2bfe80a0fa85efd60170c29704286d1b782597671b6497b3dcbc00b4bd5c249f35d221b5e50887cb4b33116d5baee89c81bec45676b6bd25cb37ce179878c66fb1ebb0679b252dcc29c5495001c7620f80300fb6708cdf5bc5760593b00e2c45c6de6813e8ed9d71192c5797ba68367ff91e18f4e4d5dc9af4fa5e450be8a93348b382364d6818c7d"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xa6}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000440)={0x20, 0x81, 0x1, "ec"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "2d07a3"}, &(0x7f00000004c0)={0x20, 0x83, 0x3, "a1cc61"}, &(0x7f0000000500)={0x20, 0x84, 0x1, "f3"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "8b8acd"}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:54:52 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) 06:55:02 executing program 6: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000080)=0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005980)=[{{&(0x7f0000001b40)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000001b80)="af", 0x1}], 0x1, &(0x7f0000002e00)=[@hopopts_2292={{0x18}}], 0x18}}], 0x1, 0x4010) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) 06:55:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 06:55:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40049409, 0x0) 06:55:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfd, 0xe4, 0xff, 0x0, 0x0, 0x7, 0x10, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000100)}, 0x140, 0x0, 0x3, 0x3, 0xbf4, 0x7fff, 0x81, 0x0, 0x6, 0x0, 0x400}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) 06:55:02 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x6, 0x0, @local, 0x5}, 0x1c) 06:55:02 executing program 1: r0 = socket$unix(0x1, 0x7, 0x0) r1 = dup(r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x46100, 0x0) r3 = inotify_init() dup2(0xffffffffffffffff, r3) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x4, 0x5, 0x5, 0x8, 0x6, 0x5}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r2, 0x0) times(0x0) times(&(0x7f0000000080)) times(&(0x7f00000001c0)) times(&(0x7f0000000140)) 06:55:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x20000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x730) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) close_range(r1, r1, 0x2) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000100)={{r1}, 0x0, 0xe, @unused=[0x7, 0x0, 0x9, 0x8], @subvolid=0x4}) 06:55:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x2d, 0x10}, 0x18) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000240)="d2d80caf6c5e553d26c2cc5cc161cc3dce45a657518650b18eb0834bd2a3652a18e0110a3773cf277fdc411bece96795ff671400c2174928bc44d7996f73dcc78e") r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x4e001) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="ae723c22f9b1b6b461983249673261c4b26a118d035701e1cac940f78c5a68b05c275665c3c38cf901e0c9cd5f7e42146a3f8efb15b8123475608441f8b2d52da0b85e678e604f68cb2d370fe2adf650540843c8d0f8428ca78970c828f3f583f14f0d5e01b962c254c56670e0b0423d77524c101472cb5c85be9a111fb847f39a20c5b178bd952557e18a3ecd2f0dc31f38ef994ce15c840b39c30a6fa59d707c91810636d49c630da51eb5e74dc5b1f2ffe5fd8e8982973ac04fb7b9d62f1fb4f7bd1583f849054158ced965f35ce0fba37a4929a0929496fdebafbe7f52c0de88ad27b56e4bea74e4303fa3f1fc3866b839c8ec") write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:55:02 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40086602, 0x0) 06:55:02 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x5) times(&(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r3 = fork() perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x20, 0x9, 0x3, 0x0, 0x4, 0x84, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x50, 0x4, @perf_config_ext={0x6, 0x9}, 0x10, 0x8001, 0x10001, 0x6, 0xfff, 0x1, 0x9, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x3, r0, 0x1) r4 = signalfd(r0, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x6, 0x3, 0x20, 0x0, 0x0, 0x80000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x7, 0x7fff}, 0x100, 0x7ff, 0x10000, 0x5, 0x1, 0x10, 0x9, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, r3, 0x8, r4, 0x2) 06:55:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xea, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x42, 0xfa, 0x0, 0x8, 0x0, 0x1, 0x81003, 0x59a830b34a8ebe68, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x83, 0x1, @perf_bp, 0x400, 0x10001, 0x3, 0x6, 0x6, 0x1, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffff8}, 0x0, 0x1, 0xffffffffffffffff, 0x2) 06:55:02 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x18101, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x7f, 0xffffffffffffff1d) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) openat(r2, &(0x7f0000000040)='./file1\x00', 0x202800, 0x8b) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x3, 0x7}, 0x4) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x440201, 0x0) r4 = accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0x80000001}) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:55:02 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = open(&(0x7f0000000100)='.\x00', 0x22280, 0x18) perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x9, 0xfa, 0x7f, 0x8, 0x0, 0x3ff, 0x4, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x4, 0x1ff}, 0x6, 0x8, 0x6f6, 0x1, 0x1, 0x8, 0x100, 0x0, 0x7, 0x0, 0x2000}, r1, 0xf, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) times(0x0) 06:55:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:55:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x20100000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x7, 0x0, @local, 0x5}, 0x1c) 06:55:12 executing program 4: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x44814) recvmmsg(0xffffffffffffffff, &(0x7f0000009a00)=[{{&(0x7f0000000180)=@pppol2tpv3in6, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/51, 0x33}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x6, &(0x7f0000001600)=""/141, 0x8d}, 0x1}, {{&(0x7f00000016c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001740)=""/58, 0x3a}, {&(0x7f0000001780)=""/91, 0x5b}, {&(0x7f0000001800)=""/118, 0x76}, {&(0x7f0000001880)=""/71, 0x47}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/243, 0xf3}, {&(0x7f0000002a00)=""/44, 0x2c}], 0x7, &(0x7f0000002ac0)=""/208, 0xd0}, 0x7ff}, {{&(0x7f0000002bc0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c40)=""/126, 0x7e}], 0x1, &(0x7f0000002d00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003d00)=@rc, 0x80, &(0x7f0000004f40)=[{&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/249, 0xf9}, {&(0x7f0000004e80)=""/86, 0x56}, {&(0x7f0000004f00)=""/44, 0x2c}], 0x4, &(0x7f0000004f80)=""/236, 0xec}, 0x92}, {{&(0x7f0000005080)=@generic, 0x80, &(0x7f0000005340)=[{&(0x7f0000005100)=""/12, 0xc}, {&(0x7f0000005140)=""/136, 0x88}, {&(0x7f0000005200)}, {&(0x7f0000005240)=""/75, 0x4b}, {&(0x7f00000052c0)=""/95, 0x5f}], 0x5}}, {{&(0x7f00000053c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000078c0)=[{&(0x7f0000005440)=""/69, 0x45}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/208, 0xd0}, {&(0x7f00000065c0)=""/7, 0x7}, {&(0x7f0000006600)=""/22, 0x16}, {&(0x7f0000006640)=""/138, 0x8a}, {&(0x7f0000006700)=""/189, 0xbd}, {&(0x7f00000067c0)=""/102, 0x66}, {&(0x7f0000006840)=""/77, 0x4d}, {&(0x7f00000068c0)=""/4096, 0x1000}], 0xa}, 0x5}, {{&(0x7f0000007980)=@nfc, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007a00)=""/141, 0x8d}, {&(0x7f0000007ac0)=""/70, 0x46}, {&(0x7f0000007b40)=""/12, 0xc}, {&(0x7f0000007b80)=""/84, 0x54}, {&(0x7f0000007c00)=""/90, 0x5a}], 0x5, &(0x7f0000007d00)=""/120, 0x78}, 0xe3e2d9c}, {{&(0x7f0000007d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000008340)=[{&(0x7f0000007e00)=""/87, 0x57}, {&(0x7f0000007e80)=""/43, 0x2b}, {&(0x7f0000007ec0)=""/241, 0xf1}, {&(0x7f0000007fc0)}, {&(0x7f0000008000)=""/185, 0xb9}, {&(0x7f00000080c0)=""/203, 0xcb}, {&(0x7f00000081c0)=""/46, 0x2e}, {&(0x7f0000008200)=""/31, 0x1f}, {&(0x7f0000008240)=""/25, 0x19}, {&(0x7f0000008280)=""/151, 0x97}], 0xa}, 0x5}, {{&(0x7f0000008400)=@can, 0x80, &(0x7f0000009880)=[{&(0x7f0000008480)=""/217, 0xd9}, {&(0x7f0000008580)=""/184, 0xb8}, {&(0x7f0000008640)=""/192, 0xc0}, {&(0x7f0000008700)=""/132, 0x84}, {&(0x7f00000087c0)=""/4096, 0x1000}, {&(0x7f00000097c0)=""/141, 0x8d}], 0x6, &(0x7f0000009900)=""/205, 0xcd}, 0x1}], 0x9, 0x40, &(0x7f0000009c40)={0x0, 0x989680}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000007c0)={&(0x7f0000000340), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x4}]}, 0x20}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000009d80)={&(0x7f0000009c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000009d40)={&(0x7f0000009cc0)={0x4c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffff8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r4, r3) ioctl$sock_bt_hci(r4, 0x400448cc, 0x0) 06:55:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 06:55:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40087602, 0x0) 06:55:12 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) sendfile(r1, r0, 0x0, 0xf88) times(&(0x7f0000000080)) 06:55:12 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0xff, 0xffff}) 06:55:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:55:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_create_cis={{0x2064, 0x11}, {0x4, [{0xfff, 0x2}, {0x7, 0x3ff}, {0x81, 0xac4c}, {0x2, 0x9}]}}}, 0x15) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x4, 0x4}, 0x6) 06:55:12 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x352f8fe62f8f1e2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003, 0xd72cd37a01cc9964, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0x22020, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2e, 0x8, 0x3, 0xac, 0x0, 0xe6, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000140)}, 0x2938, 0xfff, 0x8, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x5, 0x0, 0xd}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0xfffffffffffffffd) times(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r1, 0xffffffffffffffff, 0x0) fadvise64(r2, 0xff, 0x80000000, 0x4) getsockopt(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000540)) r4 = gettid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000400)=0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x1) recvmsg(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)=""/82, 0x52}], 0x2, &(0x7f0000000940)=""/248, 0xf8}, 0x1) sched_rr_get_interval(r5, &(0x7f0000000440)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000b06010300000000000000000a000008050001000700000005000100070000000800094080005298240008800c00078005000300010000001400078010001a00292d212448273a29b03340000500010007000000"], 0x58}, 0x1, 0x0, 0x0, 0x200088c4}, 0x24040814) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40000}, 0xc840) r7 = getpgid(r4) process_vm_writev(r7, &(0x7f0000000240)=[{&(0x7f0000000200)=""/11, 0xb}], 0x1, &(0x7f0000000340)=[{&(0x7f0000000740)=""/103, 0x67}, {&(0x7f0000000300)=""/28, 0x1c}], 0x2, 0x0) times(&(0x7f0000000380)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x9, 0x11, 0x51, 0x7, 0x0, 0x9, 0x1080, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xcc82, 0x4, @perf_bp={&(0x7f0000000080)}, 0x20b3, 0x7fffffff, 0x3ff0, 0x1, 0x6, 0x6, 0x1, 0x0, 0xfff, 0x0, 0x8}, r4, 0x10, r0, 0x4) 06:55:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x3f, 0x22, 0x9, 0x6, 0x0, 0x3, 0xc9181, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={&(0x7f0000001500), 0x6}, 0x0, 0xfffffffffffff801, 0x6, 0x9, 0xdb3, 0x1, 0x4, 0x0, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r0, 0x9) times(&(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) times(&(0x7f00000014c0)) pwritev2(r1, &(0x7f0000001440)=[{&(0x7f0000000140)="ca1d24a76794547092c5a1376ee41272e04e0df799e3b477d16b0d9f8681e02a6b54c24ca0c50c1542226a624d07a4c55f52998c385fcee511edf8ebf46c4c45516ed6d0b13f738399280e96ee753af43e0ee94c30257011b2abed34be7ced678a4c19d2397b92d172d64ee531b0b3d653c4fab6fbd0bb22ab598392f3cb33368d5ad7ddc00ef5f92edfed0a85727551787df0f6a2dbb77fb5b0b744e17c85", 0x9f}, {&(0x7f0000000200)="6a48d38738cd869c2a831eab55579a1835d5e1d5da38277d3d4ffc0c36195c227374b00d26d80d1f60f950deaf7f1e18aab5f5660245867d20d9c24af90e83ec08ecb88c9543eaccc82deaed2624da701907c14bc5c94d7ad607f5910861655e17", 0x61}, {&(0x7f0000000280)="44ab210077e379eaf256717840850bfb2042853a752fe081", 0x18}, {&(0x7f00000002c0)="785ba46a7ce2be02ea528dbea68eb08824e30133783625b1e262199d85fdf10aee901caf8092270b7a5bf8dab28ea88547a77607e7e4150ae9", 0x39}, {&(0x7f0000000300)="67af57843647112d7496d93159b64456f85b33bf6868544c871ee727f1d25c4e67e27a023782b559e8f54f357c505be7766fd6496cd783ce6026db8586b5d0e139e27d45b4a9c0497a226e45202a31f25ac6f8322f7fccba4b5de0508dd6ed9c63d071cb4857c199f5aed70ec58652b50dd5b6d55087a9d59a0ba1754307b131157826c961fb3325e5a14cd0e44fb9cf89d49f219efaa401b3debc0e391ee434499844d7a4a18f2bb1b835513a7667a1201b61e30f082a45a3d3ca3ae4d982828bc25a84fe732542ddd43d70f45ff351085956eddb487cf3002488cc8cb8aebe0aa42d6dd0bb8e6e951d7b80084a7476858f400d8e932dc4bd5fcf07ce80a6c4465159c5aaef0e0a5c5777daab209cf38dda90a6912de0f4e1ec68453ff83dc53723c78782b4081a599d610a92532064f22d41cd9cc4ba1527cd073d2d6845c834bbc0451f3d88c241e3bf04941ca3451b2d218c2f00dae5ba8cd41a3354e9aee0c150454c01b8474d1dcfb69e73089e4f3a2435c6ff5391551759319258791ee9446211ad2d48b8ca933980634d8c23a666f1a3b9589d0edc6457fd87283136546ed8018ce7cd2b3a80655839bc3c8f8aa0325c0c7a836505eae0b28f897374d73a77845684b9386c7be0ea9add2961310ae0722eb3698c44235aba90cd213e4a17dc43f5c7000888430f5595b9a39be42f7e9d87d87cda345e6bf5570f40057fe7f59e24b39845096980cf7fb1f990b79dc3d2062ffb092a9edcb150db001e4b5d13090135985cd79fee5397ccb7e453e8abeb6b83e881507f4e446cacf0a661e338305db9743ba84ed981982643f756dc4108ec954570a757eda931a3970bf573b257d3402e4f7c93be2dd177abe2091380b9ada04e40663445c089fbc16f80c93d5cb87b583b86a44cd682ed3ff08dc08dcfe830fca8dfa619c036332fc60623aca54d79a118304baa7728b91b8bfc4da0078058a218881ad0f22e2758a060fc6c7ab3ce137813ddf9a539e23f80498e10c80c005953430ef024f14c0f3fd957d3426e62d94f2e91f43e0a4a9caa12ea387b3d99c8b3e64452487379eeec342806233f17032e9269b0a56bbeb16020e0ca04a74ff93b18d4a365a8023384531221c2462c72d9de680fd110432d0977a24aee517d2999815f6c7b0b458bc28981567ca7f9f27d9fcb00578fe0227635a1f0c6c48a7d319b7756a7013eeb8a49b0a2ebf7fb9fa1c71e3199cace9624e585194385b4350f3be5d8fd260e3ce205d09b036eb6baa8ddc83ed713aa5fb39dc297d92073917f098ee27a3fc7b573ab4d05ac0d70f23d8b9eaaaedcda794af427b0dba6275f5ba50566ddcc1168fb4c4d92ec0839a0ef3658d16f6637c5a8da8532337a065f688f6d0f8bfdb20029c4ac9fbdf554b924e77d8e53727e6fb5a5cbfb8d9a0c71b5b4858e7c673b80f119ebebc4620ac503344b9d8b05af09798d6685139dc27c0919721c3f2fdf33889b98652089608766b6f9be3e43d263658e33855075afb8b7fc38239f9e3181772154e53fb65186b2dd90b40134aee16ff1081fdd5424d426dc0ac05767cfe6a25d2a40147a5cd0879a1c47d559fbcfa2270d82a81bf205ca40a4d08175cbece282f98e1a791d100caf2a3870cadef28fcbb1bc078756370b272c0cab830450c196d5f2f49395af39cee20f7ba082bf0c4fed56f24152e19a957948dc5174e56ebea67f831cd476dcef6332375577f4710fcd06408d567906247b195b6b27a6467118e1eaaed242e60ddc4491793da38dea527b87edf2fc98ca013dc587a14476d8517048063b24a1015efdb63582c67d3fbaf26c1d05234e1d053eccb25d506a75f9e139e1b13b90e6121855216f5f7c16ab607121e2b4cb74a71daf8b52123dbd6275f3b24efee649f1772de93bdc946159d023d97e056df72fd9287b239a1598f72b5ef5575266908db02c1618300783282fe7637397e85b3e82f0d78d7f22b448cfc8d48dcbe3324f76e0c5a2d56385cce7df98a3b7916c1ca543b555a07b11212d630079d4d6d728839c8ca67a8663879cb77f11c64bb0258911ba8b0c08bcf2d84eeee1f4a9b9c61313aae799caf3d7e9053751e4b2c1c8615945915af942aad074f648fe56cf62522d05cbdb440808f2025e3f524b74ef5783592eb04edbeffe88f8e02f883675af1a9f00ec389e882d176f6697caa6683cc9c89e7d13cad2a7fba5bdf459a7ef75a40378052aefa72c5b404119cafef69d160822992428b56856c5da069c4903fb8f2efa07b708b8f010ff2304b26cd86ddf696a2df57f4d1e322d9f813ab994bbded7859c277c1d0bc92172606bd9accde00b49a1cb9fe849b848ebd94ee2197dc5c33bf20e563a9945778d45c81c55ef1512461af6b86b0c9d311f559422211ddaf296c5918330ff8288d4a0b1e19780ea6c7248d8b1a39b16134f986167f8fbe20c8a2e34163f9af340f4ab344e894889de96ca1bc382f26322485d94dcf9382c37382125aaffb157cb2d542683dc0ed631558c7219fbfd85970e79212d846bf805183b003b32e23fdbd97ac5027f52008f856eaade1d0c49ece642862dd99f9141bd0f8ce0d11235521fc418d5c04ae0cba9be7743d192db2e822726a742881653abb08376a43d5648c272d19d86c882317271e0087900f74c24c506116a8fa3612fe76daf72b93c3851ed9f3ff7606e3b27ef11215d56ec7b5c02477ef101ef4f6bc6b77700596a9bfdb64df5ffc90818d578af71cc2d4b9376748fba9483d851eedb7b50888ee51c378c4cc4fb4999fd8cac5d89af8ef5d9da3b303e91c496039c79cb00e08bff8aab38f3a0e9e8d36f8bace37de5076f810cd7dd84c46a0d2bb3fa4fe8ab628a06d9dac9b0823ded81d8b43247d863b2d19f042b4f06789a7cacdcf0f9b5b27d965e592946b79525841221f8f21480d121cf82338b1692fce828506281c822449ad098034f8f33e5239bb65237b146097d5075937b27ed50aca7edc68035d3f11b80ce9c16ffc5e14503fa8b73752d3536784ba9474ca168821dab0f693590705de3ee6c6e4e335741df43b23f576d5efa2cab948fb49b63e64152dfb94db9972d9427013e1b070a11e890ef6de0561f44a29aff50f08ff703208c806861dc2d6e9829e0672773ec427ee45ac96fbbbb849e7145e07fda201e9ab4287b9479b0673a4614dd0b71d0e0a46819b44999d4ea64f91a0c1eafab0e629a031d162a7ffcc7d5f43373d97d5445aab3baf44993aa5b6efcebce5c2f84476a3763475aeb877150e5c3cff1e50dc5858d9495ccc6cd2ec0c121429aa2afb34637378d08c1c5cc03d0bcd49f7193b24414e5732c458cf86475fd87bb6b1e45c16151e9091237d177f87089fe1fa5391907c27eba6aff94a1fb2082f7cbf9810336bd55b5080eb13d4d28994d30edf1c88a2d767e7c569f6a1c460ee07514516b2384518cbf7dbf458055da95670da4b995b04b29e71955bbcf43c6325ab5c16c0794aa369fe1b77437861972c069740195f968582852349e3b4bf6cad41c29eb94cd82abf30d723eb03d41ee16480eacd586d281f40d6a82c405dffac13ba75ce0190db435d2a1b2ee1ad627c78086110bcf4b61bef670568f88b74c2b6c2fc1fa3b48d966cb36a832f834675abc31a4f3e7f23c34c5c2a28f778765f5828691856e1f955771052160ab0a15092e5c96c41d3efc8ace9daa889527e2ca248d012cc047fe321f66c215f73b753d44d278083ab49bdab13bfdc6ffe8247bcc822912bd74fb51c959bee8b3b6a77cdd1a79f64a3e26d6d791e4c964bb9635593e54495250ba194defa3b9ac7af40410cba3a3d5cb5b0910f352c1a8432a420ffb6b39cb833c4468e7f1d2ce09a7785eb04ddf7cc2e06d182c60bb842881f5de15846aca8ad9b50c41a00c897f4e0cb35fdc2beb3ae1a620b807cd65d9a4d5579bed65234069ae89346bc0e00de90ca9cc97cac0702cf9d76ca103dfa9cd2be80d07796cac79d0561f51bdb7fba38eaa508a8a69f7045e043c7c89b2d25586f5715a208860a2a36f0cd77f9ae8584699eaa045cf07f47fbb6a1f2e7f5ab5236bc85fb4da48bef951a391defb6fa43610cf40bc2109dba88e8e63ade3546bfa84ae09db50959f234c0221c096f1ce3140510fbda88a3bc87f891be02a4d59572f2452b08353ffeca2db62a19e032c29e79e5239bd7f954712b264a14167e6124ad22df48cdedd92db88ecc34ba662d07b28032db786ee3cd80ae31254c6d4a1fa61e60b3531caee1e557a8955d1596fe7a69fb1e149073055765ee71a6af4635d1f82607d77fa5f6565385ca8fb40b27a10319eb04c2783034403ae8613679fcd16d32b75f70f0eb04ba3281c516a379fe9a201e2c5d4cc05f55b9db482d0bfb896e5570d15ea11d043edb9caa1e89d95a146e0f20954af0df1d0dc5f95a994eef6cbb952843dc6216e593a04a62236aa7dd32f003c06b46aa8331a95479a1066d2c97c04fa6fa6df37c05be14baf282b29a2f0cd8cc965e5ef919848fbe650b8d2d77ddd3de1accea1eac6ea405787b3c6e86fef7fddcd894d63f7c980ce51b7e9cb1280bcb2b5add4c75bdcb6a42ae4c2da67a928b98eced94eecac6f212e52a43bc0a2b3d7b79597f297c8fc42b2bc745731495c08a280031fde44eb06b3ad3bf0f1019b63541ff9300a610e6e052e00c3572bd8810a53b826e09fd23d4fade64afc21ed91906af517d2b82e8cc54f1bf550ed5564283b100727509e47494c23546c8cbc7be10da501e51c028e841e94c1d092efbb0bc9d71152926f763f3883066a215cb8dde479b1b1e948a1536085c08b297f7d1432c37138e4d1d10a43b1f740db790d5dd4bc65ea1538d64461f15c3373085974e25cc0732d36d1a49985492a51702f3871bd6f2c81a142803a5817a785d2bd9d17eecf6921a063c24f137ac3b7ae792f701a2b5f666db7df20f8a5ec1c5b6540431082aab047b029d8ee9e2afc484b0591f09ae4de7aa0627f6162e34bde7c5741b1771de4215371d60e24db844848aa7de2a5bde27014ee510075ad7197e27507839a71724721b8d75cf54f36086b5d92407b728702a2b878b014028210296a9a4e076c988ccf862736262a82b844837db6995cf8aa0e2eefebd535b693ecd0586b8d1c4f1065eba3a1f53e488c4f20700234b94dd322f0506a21b7b649dfbc22e72838c551e76f6934b03583398e2d60d6eb8e8a4e0871f3e5b3d906b04512523059196ce6f88fda46486a495e1a29b8cf158b1415d46746e0663b34a6203d2a4299cec12b35307606116a2bc298df0c7028d41043d60e4023427bffbe63e3d7a434c0a7017e1eb1ea74aae78c024578046c63f65f6fdc527adf6cb7c6ae31f52289e3e0c4ca593457df40212c8a4af82b77625d3ba80638bf7e145b6215d1f8e1d96e3eb1c1cbd71c12f56a234c904acedf77281771057bb2c39e77ef973937e12d27e1a931f45db371b6b55ac8bf018ce5cf68db3e8cfa7f6770868a5ac4879d95dd47ff5dbc6adfddd6d11ae80cca8876ee2bbd1594ec66f92017ca96a2d897e3d48b8b23cfd69a6643a448d949b13abae0675117378b5f849e8ae861c93e67fd3c2dd197559547523f96819153b85415751cfb6a17239c17da5a0569e301c922a8fb8a550dea4c4a8797ed8404b7dcf48317637f95b536913beaa8d7cba27da80ca6e24e19bf37641ef50c1c379f3d8f4af87e45df0f0e1ee8b34000e4a13977999ac80409619ba530dde7ff1fee644e0a84234505b14cfe65", 0x1000}, {&(0x7f0000001300)="a138c8949902c1fef81ab28235c3d49186eb234140dcf590e2c37d092e51cf6490a1cc798fbfd8404af419dcc0e7c3f52829d1c60ba1820bb156bf97bc9431b1097079aacaf1bb4d159a1f5aecb8cf35d8a62c5a774e5cedafbcdf8d4e6db48fef9065fae8364c76ecf0e2b63028822829e353096ad62e449b80ea9ce953cdb27398b8a6536c37d83e6db2890656cf6bdf7fd7c4f6e63bff87406b7c09d28352e9bf4571648581e60eb818da5f66a925dae63683707b1d7ba6770b0301d076a9a6ecdf14b9d5ffd3e9ca", 0xca}, {&(0x7f0000001400)="7578d637a18d0c325baf5441ff72116ace3b1e6f67", 0x15}], 0x7, 0x8, 0xfe1, 0x1) 06:55:12 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x401c5820, 0x0) 06:55:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x40000000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:12 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x7, 0x8, 0x20, 0xdb, 0x0, 0x9, 0x85000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x7}, 0x1400, 0x5, 0x32e, 0x3, 0x8453, 0xffffffc1, 0x8, 0x0, 0x3, 0x0, 0x1}, r1, 0x4, 0xffffffffffffffff, 0xa) times(0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x0, 0x1, 0x0, 0x8000, 0x7b, "cd200a25e3acbfcfb61c3783849b541dc92f0f7d72325687925e4d81ae813df4ae5b6cde4d7f3969c76a91c4bfdc008c01d21416dfa07d94c0b47da528238325e1027c0a3ddbe35332de7f430f637c0cb4714eb68ed384336958121679af88023532445eec8615ae289303bad979d846169d4d926d574d7543bd9a"}, 0x84, 0x3) close(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) flock(r4, 0xd) 06:55:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r2, r1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r5 = dup2(r4, r3) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) connect$bt_sco(r5, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000140)="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") 06:55:12 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x9, 0x3, 0xfffffffffffffff9, 0x400, 0x53bdf90b00000, 0xfffffffffffffffd}, {0xf3, 0x3ff, 0xe8, 0x6, 0x8, 0x8}], ['\x00', '\x00']}) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r5 = dup2(r4, r3) ioctl$sock_bt_hci(r5, 0x400448ca, 0x0) write$bt_hci(r5, &(0x7f0000000280)={0x1, @le_reject_cis={{0x2067, 0x3}, {0xc8, 0x3f}}}, 0x7) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01372023030404d78adb40f30aee6b578746cd75f4dbff11cff834168d3e8fc0222c82edcffa44"], 0x27) 06:55:12 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x15, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x700, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xfe, 0x6e, 0x0, 0x4, 0x0, 0x2, 0x800, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7fff, 0x4}, 0x31, 0x5, 0x9, 0x3, 0x3ff, 0x6b, 0x9, 0x0, 0x2, 0x0, 0x8}, r0, 0xffffffffffffffff, r1, 0x2) times(0x0) 06:55:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0xa7d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf, 0xffffffffffffffff, 0x0) times(0x0) 06:55:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x8cffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:21 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x8, 0x0, @local, 0x5}, 0x1c) 06:55:21 executing program 4: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x229fc000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) 06:55:21 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r2, r1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x2, 0x5, "21bfa8", 0x20}) 06:55:21 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x15, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000140), 0x40000000000000, 0x10000) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000180)={0x4, 0x8, 0x4, 0x8, 0x2, 0x3f}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x7f, 0x5, 0x90, 0x0, 0x7, 0x60a, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x1000, 0x7fffffff}, 0x40008, 0x0, 0x81, 0x6, 0x8001, 0xfff, 0x401, 0x0, 0x9, 0x0, 0x401}, r0, 0xa, r1, 0xb) 06:55:21 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4020940d, 0x0) 06:55:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r0) times(&(0x7f0000000080)) 06:55:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x35, &(0x7f0000000900)={@private1}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x3, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8, 0x3}}, './file0\x00'}) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @accept_conn_req={{0x409, 0x7}, {@none, 0xf9}}}, 0xb) r3 = openat$cgroup_ro(r2, &(0x7f0000000680)='freezer.state\x00', 0x0, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 06:55:21 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xc0ed0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$peeksig(0x15, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xd3) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x0, 0x1, 0x8, 0x0, 0xff, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x8, 0x80}, 0x190, 0x100000001, 0x76b2, 0x4, 0x8, 0x2, 0x400, 0x0, 0x80000000, 0x0, 0x2}, r0, 0x3, r1, 0x2) times(&(0x7f0000000080)) 06:55:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r0 = fork() ptrace(0x10, r0) times(&(0x7f0000000140)) ptrace$peeksig(0x15, r0, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1f, 0x0, 0x2, 0x4, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x10, 0x400, 0xffffc84a, 0x4, 0x2, 0x0, 0x7, 0x0, 0x81, 0x0, 0x2}, r0, 0xc, r3, 0x0) 06:55:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 06:55:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x280}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:55:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 06:55:22 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x1}, @release], 0x1000, 0x0, &(0x7f0000000040)="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"}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x3f, 0x0) getsockopt(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f0000000080)) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) fstat(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = getpid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002e80)=0x0) r9 = syz_open_dev$hidraw(&(0x7f0000002ec0), 0x200, 0x2040) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r10, 0x1, 0x4, 0x0, &(0x7f0000000080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000001080)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e40)=[{&(0x7f00000010c0)={0x118, 0x2a, 0x800, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x3b, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x1b, 0x0, 0x0, @fd}, @generic="cda3f61e1aad114b6d7b0e6b384f93453717b02fa45fd0fe15c9f0d62d49ead65267b050a8d991b7c0e0b155c6d663ff45b0d237051c251f6c5cbe82cdcc2bb6f278a54b4ebc7e9fe47cb291cda781d0af9062e87cedd92c02b83951d2a54a8582af114c3d2195a8689a0c797fe3df414d6b6120c07897d330fd37c4b62d11fb84598182052f352b73cd37191758db103e30d7bf6c95be23d37c1d9960d3e985edfbcce4dc0433adad8f30ccdb8b3db3b839741d7cf376a07d7c05ec1ae8334b550d36e208c79cf7584e3d2cd9201777f0601847b94e60", @nested={0x20, 0x2d, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0xfffffffffffffff9}, @typed={0x8, 0x73, 0x0, 0x0, @fd}]}]}, 0x118}, {&(0x7f0000001200)={0x1dc, 0x1f, 0x300, 0x70bd29, 0x25dfdbfe, "", [@nested={0x112, 0x77, 0x0, 0x1, [@generic="a9707a748a34f1394f0b03fcb74429de2ffb2d738b00667c7280475304e58025eb33eec87a881fa3db41183ed94cbf2f882de2587a3976c23c36e7e687259c8e675364315d3a3a6267a1722af2ee344097c235426313233c79bcd679db328546d0e9c53afea74011870b816e25dfb4c7d78e6ce18495dd66437ca36bd849c82ea6d7634dd6fff810af19e3cd34b7fd172af2bcd57ea234cccc7a27a887a7818b48c677c4d00907d95b98b98e3e5d50500738e9a2232028df5232c049b9d92c25fe57537adae0c61f7744da4bb80473a4cf704e", @typed={0x8, 0x64, 0x0, 0x0, @fd=r0}, @generic="05164892c52653ace0f0514347c34f4b1f894fd6201308e1b3ba44a515143deef7744358bae4d1e75645b3", @typed={0x8, 0x73, 0x0, 0x0, @pid=r1}]}, @generic="91fedb68e7aeef5db399a77c90ba9546c0d7f85aa37b3402086d170634a216a58625d52ff520c2b3b142d9d24260cb187328d4cdb64fa2135016c96abfc4a73ec70629ae8091a7", @generic="5636eb0b9a69bede80468498deb15bcefef3dbe46912173c60a1c65a3f44233628b426ae1d023a5965ea5844ae38a59c633f61c8c900a676ecc9d9836cd46795ebb0829b0ea4d2cbe4fa8bd5f7e095eefd3e9b0d2abdcd269a542f463f67fad05867f8c0cf977162bb9ac66dfd77855b"]}, 0x1dc}, {&(0x7f0000001480)={0x728, 0x39, 0x8, 0x70bd26, 0x25dfdbfc, "", [@generic="921644946d76cff4b067a53db28e8f650e4b2a57462a626da455bf43806dfbb8f8848efaa32087caa9f9566cdd22334626b56eac5223265a69da2c51229e2f22243cefd61589ae8de729a455e2eaa5f1eaeae06ae17343ba2ef51bac10c5ce8916b502cbfe423cee71cddc7b131d3a823ab28a45da20207bce121957bef2b782cd628ca8c28d8fcdffa6b79eea221b729ca34069bd66034e7e3416b6a2018a52014d176c393798288e68c150b087999b4c164ca59ae67396007d3c9da355ab67327b2d54c1a94eb06340cfd69871edffceee6c866eca71ecd20dd226448525ca46d3c3fe849dc121", @typed={0x8, 0x43, 0x0, 0x0, @u32}, @nested={0x1b4, 0x2d, 0x0, 0x1, [@generic="48b2a8b1a7ff37769a098be2f84f102d290c654d9279015d45d3b9ab06b099ea91046a1067cd6208a37e63e0fe45b0bc2ec62fb4e97a8d392091786d73ccbb86f270fa9345c1772984279defe682c6209eb2", @typed={0x6, 0x19, 0x0, 0x0, @str=')\x00'}, @generic="fcd68af1e9a38fd7f207868f7c5c41d13334f4f36bce2c8cbdd18c6c1ffbe4b6c009b5728c5eff5e1c21ef82658827a322eca0f28f3378d046570f448cd97e7455d8695443642543aee385ac606df545b86363019e63060bdbf3e462ec9d45810fe34534", @generic="1d86c7be8087cff7e8d8ad88f340ecf2aad3d5988606d28d9867116b67bb4e7e6d81e000bff7270c59c2bbe825399b480db0a46b195963c27134187dc4ba735e534f5190241496a33d7cf6180c8906ca7e067acdfb4fa7ba7cd8b86957162c21a3c77f305cf3bf05d7d5cbda8dfe08a77d448dcd5065d144539498395698c2ca8eb4400e0ee926e81f5662e8686cb9b4347aef3def9263d73681462fbcf8", @typed={0x8, 0x28, 0x0, 0x0, @uid=r2}, @generic="56973e1157283991849a380ff4b2c688d61007e2a8e494b19aee3432ab9d104db1ccf804d646", @generic="593b27ca52ffbace9920669e38dd5a19270fac26c19bd13ad2c1cc809e83", @typed={0x8, 0x25, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0x36f, 0x81, 0x0, 0x1, [@generic="cfa466dc8f3213913c9cd48507a44f0a13f5b9bc9b96d9ba1898e78590cda9724282c085b294b34b8bdfb059e0fe0fd86d282cecee8ba810fadfd578d672141568060b57f5360474443fe722b48ca31d3e8e225cffe4a14b1df17df43d118754681397abef82e8b770444afd81f0fcf1bec1036a760d7b0788c1b79acee756cdfdf2f44fb20444a8184955e0f55038de8c0276a346855e9c47814c67356605af20c1e88ae06ccf8ec4ed3d0e0fd1247731e9a0a7055056bf0265ad5ace98883166cf82", @generic="b554d05e0da191466d259707cf80d48dacbb10f397e21ecb6faa5787", @generic="0c2e963ca21edda36d07b5bfeb6db066d361dd223200c27170688e40635bb5f1814cb5ccbad6752a989a27b65fd7dfadd58a", @generic, @typed={0x8, 0x33, 0x0, 0x0, @fd=r0}, @typed={0x95, 0x19, 0x0, 0x0, @binary="8e8897ad777cf6dbf0e2540c342aca0a7552669081aecc60af1f9c09a8f2fd01c90c9dfb4a1275bb1c9e0e84fadda0c981c5a10b1519894effcc7079a1afe0b89f2754d1c9a70c6fb60879b6783461bdc55e0c2b9d585ad84bde6fd986f8bfceb87e12a368f10f5dce08a236a22f97470d058ff83b41523e0a32df3d1fc9900724f99cde29bf8161a46a5ecdcaab6b35ba"}, @typed={0xbc, 0x3, 0x0, 0x0, @binary="110cf24462c1e4d7128c9ce29046a5458644299e67c13085c648b2300169038b03a256a495c97575e17e5edef97df14b9fe25690e9bbd6d379521073d514f6a426b3f752dc078841239c716d9ad9f538e8fd5575d58344ed1ac31bf23cb2730510f6a020034a40b08c14b1acf7bbfb57e2459b9c8b332c56b5beb951c2c88ef5d0bea7b4de09247be672ef4070848130155a4939d0cf19190a27b1033eb77837a33cde3af39aa956f8710ff23a2762756ceab2338223880b"}, @typed={0x8, 0x4a, 0x0, 0x0, @fd=r0}, @generic="d22dc2528b8ba59b00eb473158ff2e7ce959238175307e63c55f9af2d4cab912f0dc69e0282641715d96281fd1342278b1c11a2684865a7dd0f2f7638e233b3afdba243c9942b73510f1199f58348c2ba4228cabebcef7978b756874188c4a6f5b926643e1a3d9469958b0477ea08342a15ee5bb3e44896e5baab9e0f559ab13597b8356607d98ceae4934783d1aad83e5a40d490cb8a20f5cc51aa2ceaae47f34a632433ee0edaeb742d49d19a821ceb8c067ce9c4da59cbf44ff1cac78b90f41858a618a5334bd160e284e18503157ba373012af23c97696c486095d1cb8c1b102a35740d166f28706e5f1d801b9f0fd04972ab078"]}, @generic="cbad70983fcc67da9ace75dfec896aef67e2dfb70270280d640146c23a0e70410ef9c8af418b64389afe7e7d3035d83ca2b583583945ad33883596f77ad64ca15433f2e8d7bdedb77edf5ea55c40cc7e5c4df1f4b80f5d8d2da89f853db328bcceef7b9a31341ac7ec3d0d01c96ab2883da8946f69f8708f0363057eb0f8267af3ead63dd3062cd147d4bdae69cc448d692c12bd1f4bbfe5174555aa5b4a2bc4bfe26033c80e42750b3d", @generic="0ff51c0cd136e8218a4ac80cb355cf2d1620cd1b0af3c0b10f51518973211eefd0b7d430a31de0c339d866681395575a887bc3280d891a5410ad0696f310e339b1b6c3bbd022c8b85122a6a28081f20639b2ddacd4589b35"]}, 0x728}, {&(0x7f0000003000)=ANY=[@ANYBLOB="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"], 0x1274}], 0x4, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r9, r10]}}], 0x98, 0x40}, 0x4) 06:55:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:55:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) times(&(0x7f00000000c0)) 06:55:22 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) times(0x0) 06:55:22 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) [ 889.541118] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 889.543901] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 890.717548] Bluetooth: hci2: command 0x0406 tx timeout [ 892.764897] Bluetooth: hci2: command 0x0406 tx timeout 06:55:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x2002, 0x2}, 0x6) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000180)=0x4) bind$bt_hci(r5, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)="b54178a800d0d7b06acb3988bd8f7a080750afd2d8467593e6ea4646c5b51a0b401dee4e4b543c4c2a7159c02d") r6 = dup2(r5, r4) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x3c040, 0x0) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:55:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xf6ffffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:55:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x9, 0x80, 0x4, 0x0, 0x8, 0x82, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8000, 0x2, 0x3321, 0x7, 0x0, 0x1, 0xffc7, 0x0, 0xffff}, 0xffffffffffffffff, 0xf, r2, 0x9) 06:55:32 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xc, 0x0, @local, 0x5}, 0x1c) 06:55:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 06:55:32 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x88) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x406, r4) 06:55:32 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x899c62ad9e14c6b5, 0x7, 0x80000001, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x65, 0x0, 0x9, 0x0, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) 06:55:32 executing program 1: chroot(&(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) 06:55:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xf9fdffff, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/65, 0x41}, {&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/136, 0x88}], 0x7, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40010042) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000640)=ANY=[@ANYBLOB="01413e63e11637c3a9000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) bind$bt_hci(r2, &(0x7f0000000680)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 06:55:32 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r3 = dup2(r2, r1) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x80, 0xc, 0x4, 0x0, 0x0, 0x9, 0x2400, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x400, 0x1}, 0x2, 0x0, 0x1, 0x5, 0x1, 0x5, 0x1, 0x0, 0x1602a68f, 0x0, 0x1}, r0, 0xffffffffffffffff, r3, 0x1) times(0x0) 06:55:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x28000, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x10, 0x6, 0xff, 0x5, 0x0, 0x47, 0x88001, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0xa}, 0x281, 0x8, 0x9, 0x4, 0x0, 0x9, 0x9, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r0, 0x1) times(0x0) 06:55:32 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 06:55:32 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) times(&(0x7f0000000100)) times(&(0x7f00000000c0)) 06:55:32 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x408000, 0x0) ioctl$FIONCLEX(r1, 0x5450) 06:55:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xffff0000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0x5, 0x1f, 0xa8}}}, 0x7) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) 06:55:32 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x4, 0x81, 0x17, 0x0, 0x7, 0x47984, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd1, 0x1, @perf_config_ext={0x800, 0x2}, 0x40020, 0x3f, 0x0, 0x8, 0x5, 0x7fff, 0x54aa, 0x0, 0x8000}, 0x0, 0x2, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000180)=0x100, 0x4) times(0x0) 06:55:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xfffffdf9, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:32 executing program 6: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000000)=ANY=[], 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) dup2(r5, r4) write$bt_hci(r5, &(0x7f0000000080)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x4}}}, 0x6) [ 899.338615] ------------[ cut here ]------------ [ 899.339178] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x323/0x3d0, CPU#1: syz-executor.6/9624 [ 899.340047] Modules linked in: [ 899.340640] CPU: 1 UID: 0 PID: 9624 Comm: syz-executor.6 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 899.341474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 899.342140] RIP: 0010:nsproxy_ns_active_get+0x323/0x3d0 [ 899.342566] Code: 00 01 0f 98 c3 31 ff 89 de e8 99 4d ab ff 84 db 75 07 5b 5d e9 be 52 ab ff e8 b9 52 ab ff 90 0f 0b 90 eb ee e8 ae 52 ab ff 90 <0f> 0b 90 e9 3f fd ff ff e8 a0 52 ab ff 90 0f 0b 90 e9 92 fd ff ff [ 899.344013] RSP: 0018:ffff88804d90fe08 EFLAGS: 00010212 [ 899.344431] RAX: 000000000000081a RBX: ffff88804b60a888 RCX: ffffc9000a065000 [ 899.345009] RDX: 0000000000040000 RSI: ffffffff81c95742 RDI: 0000000000000001 [ 899.345566] RBP: ffff888009421c01 R08: 0000000000000001 R09: ffffed1001284397 [ 899.346152] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ca48e00 [ 899.346710] R13: 0000000000000000 R14: ffff88804c928000 R15: ffff88804d90fe98 [ 899.347300] FS: 00007f63dd3d8700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 [ 899.347948] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.348407] CR2: 00007f63dd3b7718 CR3: 00000000171d5000 CR4: 0000000000350ef0 [ 899.349514] Call Trace: [ 899.350080] [ 899.350616] switch_task_namespaces+0x3d/0x110 [ 899.351641] __do_sys_setns+0x6b0/0x19a0 [ 899.352543] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.354014] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.355488] ? __pfx___do_sys_setns+0x10/0x10 [ 899.357237] do_syscall_64+0xbf/0x430 [ 899.357543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.358776] RIP: 0033:0x7f63dfe85107 [ 899.359103] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.360457] RSP: 002b:00007f63dd3d8128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 899.361040] RAX: ffffffffffffffda RBX: 00007f63dff97020 RCX: 00007f63dfe85107 [ 899.361567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 899.362121] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 899.362649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.363212] R13: 00007fffa737c14f R14: 00007f63dd3d8300 R15: 0000000000022000 [ 899.363752] [ 899.363955] irq event stamp: 1201 [ 899.364215] hardirqs last enabled at (1209): [] __up_console_sem+0x78/0x80 [ 899.364879] hardirqs last disabled at (1218): [] __up_console_sem+0x5d/0x80 [ 899.365528] softirqs last enabled at (1108): [] handle_softirqs+0x50c/0x770 [ 899.366196] softirqs last disabled at (811): [] __irq_exit_rcu+0xc4/0x100 [ 899.366844] ---[ end trace 0000000000000000 ]--- [ 899.367394] ------------[ cut here ]------------ [ 899.367744] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x331/0x3d0, CPU#1: syz-executor.6/9624 [ 899.368560] Modules linked in: [ 899.368839] CPU: 1 UID: 0 PID: 9624 Comm: syz-executor.6 Tainted: G W 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 899.369724] Tainted: [W]=WARN [ 899.369999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 899.370652] RIP: 0010:nsproxy_ns_active_get+0x331/0x3d0 [ 899.371114] Code: 84 db 75 07 5b 5d e9 be 52 ab ff e8 b9 52 ab ff 90 0f 0b 90 eb ee e8 ae 52 ab ff 90 0f 0b 90 e9 3f fd ff ff e8 a0 52 ab ff 90 <0f> 0b 90 e9 92 fd ff ff e8 92 52 ab ff 90 0f 0b 90 e9 e5 fd ff ff [ 899.372556] RSP: 0018:ffff88804d90fe08 EFLAGS: 00010212 [ 899.373000] RAX: 000000000001b446 RBX: ffff88804b60a888 RCX: ffffc9000a065000 [ 899.373563] RDX: 0000000000040000 RSI: ffffffff81c95750 RDI: 0000000000000001 [ 899.374166] RBP: ffff8880177b4501 R08: 0000000000000001 R09: ffffed1002ef6900 [ 899.374730] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ca48e00 [ 899.375319] R13: 0000000000000000 R14: ffff88804c928000 R15: ffff88804d90fe98 [ 899.375897] FS: 00007f63dd3d8700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 [ 899.376529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.377005] CR2: 00007f63dd3b7718 CR3: 00000000171d5000 CR4: 0000000000350ef0 [ 899.377570] Call Trace: [ 899.377781] [ 899.377989] switch_task_namespaces+0x3d/0x110 [ 899.378362] __do_sys_setns+0x6b0/0x19a0 [ 899.378690] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.379194] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.379671] ? __pfx___do_sys_setns+0x10/0x10 [ 899.380063] do_syscall_64+0xbf/0x430 [ 899.380376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.380837] RIP: 0033:0x7f63dfe85107 [ 899.381142] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.382593] RSP: 002b:00007f63dd3d8128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 899.383219] RAX: ffffffffffffffda RBX: 00007f63dff97020 RCX: 00007f63dfe85107 [ 899.383783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 899.384371] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 899.384959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.385522] R13: 00007fffa737c14f R14: 00007f63dd3d8300 R15: 0000000000022000 [ 899.386131] [ 899.386326] irq event stamp: 1609 [ 899.386601] hardirqs last enabled at (1617): [] __up_console_sem+0x78/0x80 [ 899.387314] hardirqs last disabled at (1626): [] __up_console_sem+0x5d/0x80 [ 899.388019] softirqs last enabled at (1518): [] handle_softirqs+0x50c/0x770 [ 899.388704] softirqs last disabled at (1503): [] __irq_exit_rcu+0xc4/0x100 [ 899.389395] ---[ end trace 0000000000000000 ]--- [ 899.389936] ------------[ cut here ]------------ [ 899.390311] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x33f/0x3d0, CPU#1: syz-executor.6/9624 [ 899.391183] Modules linked in: [ 899.391449] CPU: 1 UID: 0 PID: 9624 Comm: syz-executor.6 Tainted: G W 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 899.392408] Tainted: [W]=WARN [ 899.392663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 899.393331] RIP: 0010:nsproxy_ns_active_get+0x33f/0x3d0 [ 899.393764] Code: ab ff 90 0f 0b 90 eb ee e8 ae 52 ab ff 90 0f 0b 90 e9 3f fd ff ff e8 a0 52 ab ff 90 0f 0b 90 e9 92 fd ff ff e8 92 52 ab ff 90 <0f> 0b 90 e9 e5 fd ff ff e8 84 52 ab ff 90 0f 0b 90 e9 38 fe ff ff [ 899.395231] RSP: 0018:ffff88804d90fe08 EFLAGS: 00010216 [ 899.395655] RAX: 00000000000367bc RBX: ffff88804b60a888 RCX: ffffc9000a065000 [ 899.396246] RDX: 0000000000040000 RSI: ffffffff81c9575e RDI: 0000000000000001 [ 899.396831] RBP: ffff8880168e4001 R08: 0000000000000001 R09: ffffed1002d1c941 [ 899.397394] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ca48e00 [ 899.397976] R13: 0000000000000000 R14: ffff88804c928000 R15: ffff88804d90fe98 [ 899.398542] FS: 00007f63dd3d8700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 [ 899.399207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.399669] CR2: 00007f63dd3b7718 CR3: 00000000171d5000 CR4: 0000000000350ef0 [ 899.400255] Call Trace: [ 899.400468] [ 899.400654] switch_task_namespaces+0x3d/0x110 [ 899.401047] __do_sys_setns+0x6b0/0x19a0 [ 899.401381] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.401880] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.402352] ? __pfx___do_sys_setns+0x10/0x10 [ 899.402722] do_syscall_64+0xbf/0x430 [ 899.403062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.403472] RIP: 0033:0x7f63dfe85107 [ 899.403776] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.405252] RSP: 002b:00007f63dd3d8128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 899.405866] RAX: ffffffffffffffda RBX: 00007f63dff97020 RCX: 00007f63dfe85107 [ 899.406426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 899.407020] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 899.407582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.408162] R13: 00007fffa737c14f R14: 00007f63dd3d8300 R15: 0000000000022000 [ 899.408735] [ 899.408947] irq event stamp: 2009 [ 899.409220] hardirqs last enabled at (2017): [] __up_console_sem+0x78/0x80 [ 899.409920] hardirqs last disabled at (2026): [] __up_console_sem+0x5d/0x80 [ 899.410599] softirqs last enabled at (1670): [] handle_softirqs+0x50c/0x770 [ 899.411313] softirqs last disabled at (1665): [] __irq_exit_rcu+0xc4/0x100 [ 899.412002] ---[ end trace 0000000000000000 ]--- [ 899.412466] ------------[ cut here ]------------ [ 899.412863] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x35b/0x3d0, CPU#1: syz-executor.6/9624 [ 899.413693] Modules linked in: [ 899.413980] CPU: 1 UID: 0 PID: 9624 Comm: syz-executor.6 Tainted: G W 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 899.414945] Tainted: [W]=WARN [ 899.415199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 899.415863] RIP: 0010:nsproxy_ns_active_get+0x35b/0x3d0 [ 899.416295] Code: 0f 0b 90 e9 92 fd ff ff e8 92 52 ab ff 90 0f 0b 90 e9 e5 fd ff ff e8 84 52 ab ff 90 0f 0b 90 e9 38 fe ff ff e8 76 52 ab ff 90 <0f> 0b 90 e9 8b fe ff ff e8 68 52 ab ff 90 0f 0b 90 e9 de fe ff ff [ 899.417739] RSP: 0018:ffff88804d90fe08 EFLAGS: 00010246 [ 899.418183] RAX: 0000000000040000 RBX: ffff88804b60a888 RCX: ffffc9000a065000 [ 899.418748] RDX: 0000000000040000 RSI: ffffffff81c9577a RDI: 0000000000000001 [ 899.419340] RBP: ffff888009487c01 R08: 0000000000000001 R09: ffffed1001290f97 [ 899.419926] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800ca48e00 [ 899.420491] R13: 0000000000000000 R14: ffff88804c928000 R15: ffff88804d90fe98 [ 899.421076] FS: 00007f63dd3d8700(0000) GS:ffff8880e549c000(0000) knlGS:0000000000000000 [ 899.421711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.422190] CR2: 00007f63dd3b7718 CR3: 00000000171d5000 CR4: 0000000000350ef0 [ 899.422758] Call Trace: [ 899.423002] [ 899.423190] switch_task_namespaces+0x3d/0x110 [ 899.423559] __do_sys_setns+0x6b0/0x19a0 [ 899.423911] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.424386] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 899.424889] ? __pfx___do_sys_setns+0x10/0x10 [ 899.425258] do_syscall_64+0xbf/0x430 [ 899.425564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.425997] RIP: 0033:0x7f63dfe85107 [ 899.426298] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.427753] RSP: 002b:00007f63dd3d8128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 899.428395] RAX: ffffffffffffffda RBX: 00007f63dff97020 RCX: 00007f63dfe85107 [ 899.428977] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ef [ 899.429540] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 899.430124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.430686] R13: 00007fffa737c14f R14: 00007f63dd3d8300 R15: 0000000000022000 [ 899.431286] [ 899.431479] irq event stamp: 2399 [ 899.431753] hardirqs last enabled at (2407): [] __up_console_sem+0x78/0x80 [ 899.432449] hardirqs last disabled at (2416): [] __up_console_sem+0x5d/0x80 [ 899.433150] softirqs last enabled at (1670): [] handle_softirqs+0x50c/0x770 [ 899.433855] softirqs last disabled at (1665): [] __irq_exit_rcu+0xc4/0x100 [ 899.434521] ---[ end trace 0000000000000000 ]--- 06:55:42 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000040)=0x8, 0x4) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xd, 0x0, @local, 0x5}, 0x1c) 06:55:42 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, 0x0) 06:55:42 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x292400, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 06:55:42 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x80, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7b, 0x83, 0x2, 0x7e, 0x0, 0x20, 0x8040, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x212, 0x80000000000000, 0x80000001, 0x5, 0x800, 0x100, 0x7, 0x0, 0x6, 0x0, 0x81}, r1, 0x3, 0xffffffffffffffff, 0x1) times(0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 06:55:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xffffff8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/106, 0x6a}, {&(0x7f0000001280)=""/215, 0xd7}, {&(0x7f0000001380)=""/210, 0xd2}], 0x6, &(0x7f0000001500)=""/132, 0x84}, 0x4}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000015c0)=""/145, 0x91}, {&(0x7f0000001680)=""/13, 0xd}, {&(0x7f00000016c0)=""/118, 0x76}, {&(0x7f0000001740)=""/135, 0x87}], 0x4, &(0x7f0000001840)=""/11, 0xb}, 0x101}, {{&(0x7f0000001880)=@can, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001900)=""/158, 0x9e}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2}}], 0x3, 0x40000061, &(0x7f0000002ac0)) 06:55:42 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x4, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f0000000080)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000140)={'veth0_to_bond\x00', {0x2, 0x0, @dev}}) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r3, 0x1, 0x4, 0x0, &(0x7f0000000080)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x1, 0x4, 0x0, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r5, 0x1, 0x4, 0x0, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESDEC=r5], 0x6) 06:55:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000080)) r1 = fork() ptrace(0x10, r1) ptrace$peeksig(0x15, r1, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x1, 0x1}, 0x6) r4 = dup2(r3, r2) ioctl$sock_bt_hci(r4, 0x400448ca, 0x0) r5 = geteuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r7 = fork() ptrace(0x10, r7) ptrace$peeksig(0x15, r7, &(0x7f00000002c0)={0x2ff, 0x1, 0x8}, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x2, 0x0, 0xee01, r5, r6, 0x6, 0x3f}, 0x788, 0x3800000000, 0x0, 0x0, r7, r1, 0x6a}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0xff, 0x3, 0x6, 0x0, 0x8, 0x520b8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x2, @perf_config_ext={0x9}, 0x100, 0x3, 0x4, 0x1, 0x7, 0x200, 0x200, 0x0, 0x1ff, 0x0, 0x3}, r1, 0x8, r4, 0x8) times(&(0x7f00000000c0)) times(&(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') [ 909.274338] ------------[ cut here ]------------ [ 909.274757] WARNING: ./include/linux/ns_common.h:288 at nsproxy_ns_active_get+0x369/0x3d0, CPU#0: syz-executor.6/9651 [ 909.276001] Modules linked in: [ 909.276299] CPU: 0 UID: 0 PID: 9651 Comm: syz-executor.6 Tainted: G W 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 909.277263] Tainted: [W]=WARN [ 909.277522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 909.278191] RIP: 0010:nsproxy_ns_active_get+0x369/0x3d0 [ 909.278630] Code: 0f 0b 90 e9 e5 fd ff ff e8 84 52 ab ff 90 0f 0b 90 e9 38 fe ff ff e8 76 52 ab ff 90 0f 0b 90 e9 8b fe ff ff e8 68 52 ab ff 90 <0f> 0b 90 e9 de fe ff ff e8 5a 52 ab ff 90 0f 0b 90 e9 31 ff ff ff [ 909.280104] RSP: 0018:ffff888049437e08 EFLAGS: 00010212 [ 909.280539] RAX: 0000000000015281 RBX: ffff88801f1cb680 RCX: ffffc90009a62000 [ 909.281122] RDX: 0000000000040000 RSI: ffffffff81c95788 RDI: 0000000000000001 [ 909.281691] RBP: ffff888016e76101 R08: 0000000000000001 R09: ffffed1002dcec62 [ 909.282274] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801a47d500 [ 909.282860] R13: 0000000000000000 R14: ffff888016711bc0 R15: ffff888049437e98 [ 909.283442] FS: 00007f63dd3f9700(0000) GS:ffff8880e539c000(0000) knlGS:0000000000000000 [ 909.284094] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 909.284559] CR2: 00007f7e7de10ef0 CR3: 000000004d8bb000 CR4: 0000000000350ef0 [ 909.285149] Call Trace: [ 909.285370] [ 909.285557] switch_task_namespaces+0x3d/0x110 [ 909.285953] __do_sys_setns+0x6b0/0x19a0 [ 909.286289] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 909.286766] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 909.287283] ? __pfx___do_sys_setns+0x10/0x10 [ 909.287657] do_syscall_64+0xbf/0x430 [ 909.287988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.288411] RIP: 0033:0x7f63dfe85107 [ 909.290141] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 909.292411] RSP: 002b:00007f63dd3f9128 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 909.293047] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f63dfe85107 [ 909.293612] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000003 [ 909.294196] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 909.294760] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63dd3f96bc [ 909.295361] R13: 000000000000000e R14: 00007f63dd3f9300 R15: 0000000000022000 [ 909.295938] [ 909.296128] irq event stamp: 1317 [ 909.296399] hardirqs last enabled at (1325): [] __up_console_sem+0x78/0x80 [ 909.297087] hardirqs last disabled at (1334): [] __up_console_sem+0x5d/0x80 [ 909.297768] softirqs last enabled at (1244): [] handle_softirqs+0x50c/0x770 [ 909.298454] softirqs last disabled at (951): [] __irq_exit_rcu+0xc4/0x100 [ 909.299138] ---[ end trace 0000000000000000 ]--- 06:55:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = pidfd_open(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0xfffffff6, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 06:55:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) VM DIAGNOSIS: 06:55:32 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=0000000000000002 RCX=ffffffff8255986e RDX=0000000000000000 RSI=ffffffff82559878 RDI=0000000000000007 RBP=ffff88801c9cf380 RSP=ffff888019037770 R8 =0000000000000000 R9 =ffffed10037282f3 R10=0000000000000002 R11=0000000000000001 R12=00000000e9eab938 R13=0000000000000002 R14=1ffff11003206efa R15=ffff8880190377f0 RIP=ffffffff8174a9f4 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc0bd95c700 00000000 00000000 GS =0000 ffff8880e539c000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff1d238bc78 CR3=000000000e8e3000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2032333a35353a363020313120766f4e XMM01=5d3134363135332e39393820205b203a XMM02=7465735f7379735f6f645f5f20205d31 XMM03=6e72656b2072656c6c616b7a79732032 XMM04=30392062302066302030392066662062 XMM05=20646620663320396520303920623020 XMM06=20656120386520656520626520303920 XMM07=35203962203865206666206261203235 XMM08=7973223d6d6d6f6320373537383d6469 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8292b315 RDI=ffffffff88966840 RBP=ffffffff88966800 RSP=ffff88804d90f6b8 R8 =0000000000000000 R9 =ffffed1001583046 R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=0000000000000010 R14=ffffffff88966800 R15=ffffffff8292b300 RIP=ffffffff8292b36d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f63dd3d8700 00000000 00000000 GS =0000 ffff8880e549c000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f63dd3b7718 CR3=00000000171d5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f63dff6a7c000007f63dff6a7c8 XMM02=00007f63dff6a7e000007f63dff6a7c0 XMM03=00007f63dff6a7c800007f63dff6a7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000